
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
File: E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft (raw, json)
Hash identifier: vjxoZpIAuCR5ywJrHR7emq8vWO64r/7ZagEG54kPmL4=
Subject key identifier: 43:52:F8:AB:7F:FA:EC:16:47:DC:50:E1:4C:C0:DD:BC:17:27:84:C1
Authority key identifier: E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54
Certificate issuer: /CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54
Certificate serial: 3362D97B9AA6AF298B220FCE29F30B06CEB852BB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
Manifest number: 0122
Signing time: Thu 16 Apr 2026 13:40:47 +0000
Manifest this update: Thu 16 Apr 2026 13:35:47 +0000
Manifest next update: Sun 19 Apr 2026 19:56:47 +0000
Files and hashes: 1: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: nQLud3Jn262khF6pI+ZrfSTaiFCpRTXR0OL4+TzR7ac=)
2: E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl (hash: f+jELAtzQwwB3c5aIMwIJQIcpiFrkJUV+j8DKnrsk8E=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl
rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 19:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:62:d9:7b:9a:a6:af:29:8b:22:0f:ce:29:f3:0b:06:ce:b8:52:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54
Validity
Not Before: Apr 16 13:35:47 2026 GMT
Not After : Apr 19 19:56:47 2026 GMT
Subject: CN=4352F8AB7FFAEC1647DC50E14CC0DDBC172784C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:7d:e8:d3:6e:46:c3:e0:3f:47:93:52:9e:
e8:d8:e6:85:94:5f:ca:f4:50:24:52:18:f1:05:be:
4e:33:fa:c6:48:cf:12:69:45:96:8f:21:e2:29:44:
d3:6a:35:52:71:59:ac:5a:f0:9e:cc:52:6b:1b:86:
57:d5:4b:52:aa:62:e3:1c:4b:ca:e5:94:7d:43:16:
c3:96:2c:43:a7:9b:ea:6c:b3:03:8f:6a:26:c2:89:
9f:eb:21:03:1c:e3:81:85:a9:c4:b5:c6:17:49:ba:
60:6d:ca:39:65:8a:ba:3d:b8:2f:29:17:56:a4:9e:
e9:00:6c:c3:06:69:c7:bb:d6:f8:f7:86:c4:24:59:
69:5a:43:68:13:c9:4b:5d:9d:33:8b:73:55:d2:15:
c0:31:79:ee:30:49:16:29:f5:39:e2:54:e7:5b:74:
8d:44:4d:ce:7e:81:84:23:0a:3f:67:4a:5f:9f:e4:
70:4b:3b:98:ca:8e:14:e3:44:07:3e:65:1b:6f:f0:
31:ba:65:48:da:08:f1:f8:87:ec:f3:d3:82:4b:8d:
06:25:9e:10:a2:de:39:40:a3:e3:d9:4f:7e:01:9f:
bc:45:e6:98:fa:8f:17:69:37:a2:24:2c:80:6f:0b:
11:df:40:58:a8:fa:37:47:75:63:96:4a:63:d0:fb:
dd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:52:F8:AB:7F:FA:EC:16:47:DC:50:E1:4C:C0:DD:BC:17:27:84:C1
X509v3 Authority Key Identifier:
keyid:E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:eb:77:f6:a9:32:29:b7:57:13:e4:ef:6b:02:88:99:77:1c:
88:53:9f:fd:4a:cb:c5:19:65:2d:1f:37:83:1f:c6:f5:9b:28:
f2:10:1f:a5:70:f9:db:b9:81:5c:d4:d3:53:0d:2d:72:c3:4f:
ad:f8:cd:2b:48:67:10:19:12:97:ae:2a:90:7d:8a:ce:b9:34:
28:d2:05:8f:32:6d:65:d6:b9:a0:bc:fc:88:a5:82:d1:ac:84:
81:fc:13:bf:02:6b:58:c1:aa:d3:93:9f:8b:0c:fc:ba:54:f3:
1a:b1:ef:2c:66:2d:82:3c:d7:1f:e0:2e:f4:73:27:85:7e:4a:
b1:3c:ee:1d:9c:d2:74:99:a6:3b:71:0c:72:bf:bf:e9:d2:e1:
12:a3:26:8d:3a:3e:88:a4:c3:7c:8d:7c:49:d9:ec:79:b4:46:
d6:c2:33:84:ab:d7:c5:5e:b9:17:0c:5c:39:f9:ad:6e:df:dd:
ec:f6:3e:f1:db:a6:02:70:06:9f:4e:02:f5:9a:e9:6b:4c:8e:
75:6d:1c:aa:c6:cb:16:bc:b7:c5:4b:22:ca:4c:25:5c:d2:fd:
81:db:f2:91:15:a1:f2:06:d9:56:c6:ca:a0:c6:be:16:d9:07:
71:af:f6:25:93:85:2a:08:20:2e:4b:e8:df:25:6a:d7:1c:9a:
2a:33:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:43:40 2026 by rpki-client