
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
File: E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft (raw, json)
Hash identifier: U25/F6UBmnThqMJrY8bTLUk3276uJRJ4KKFneQ/X0hQ=
Subject key identifier: E7:11:07:D6:21:D6:17:0E:E2:7B:57:F4:CA:B2:43:E5:5E:E3:F2:44
Authority key identifier: E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54
Certificate issuer: /CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54
Certificate serial: 37CC84D4D598EA6E1A0E02FF1D15D22CBD1D7A61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
Manifest number: 010E
Signing time: Mon 02 Mar 2026 13:00:46 +0000
Manifest this update: Mon 02 Mar 2026 12:55:46 +0000
Manifest next update: Thu 05 Mar 2026 15:38:46 +0000
Files and hashes: 1: E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl (hash: i/Wy7NnLtNV9m/0h0OV9LA9gZODtArrbVm5XiAvD07A=)
2: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: nQLud3Jn262khF6pI+ZrfSTaiFCpRTXR0OL4+TzR7ac=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl
rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:cc:84:d4:d5:98:ea:6e:1a:0e:02:ff:1d:15:d2:2c:bd:1d:7a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54
Validity
Not Before: Mar 2 12:55:46 2026 GMT
Not After : Mar 5 15:38:46 2026 GMT
Subject: CN=E71107D621D6170EE27B57F4CAB243E55EE3F244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:4d:93:3d:a8:9d:90:98:8f:ac:97:19:50:
b5:bf:c8:52:41:7e:db:9f:07:04:a5:6b:5d:4b:a1:
21:a7:f1:14:33:76:37:2e:4b:d5:09:f2:86:7e:d3:
12:fe:9f:39:f0:7d:1b:7d:7f:44:12:3e:87:32:8d:
7d:bc:aa:66:64:24:13:1f:ec:d8:da:d9:db:0a:48:
57:5c:3a:8b:49:56:c1:74:0e:35:73:05:64:03:66:
57:3a:82:f3:3e:9a:3b:a4:0d:bb:f2:b1:f1:6c:be:
56:56:a1:8a:40:f8:20:55:64:ee:0d:8b:0f:69:8d:
dd:66:17:7b:41:94:52:8f:70:24:8a:28:c2:d7:94:
3d:2c:96:33:03:d6:df:4a:3d:93:99:3a:19:7a:28:
f7:cb:22:38:46:98:c7:04:d1:72:14:4c:9c:4b:fa:
09:d2:20:e0:13:28:5d:d4:9b:cb:1b:17:e6:e8:c0:
8e:ad:00:67:c2:2e:32:d1:18:51:cf:43:45:dd:b4:
5e:a9:e5:d2:97:ba:f6:0d:a7:c8:ff:88:93:80:fd:
f9:bb:7c:eb:ee:c0:8a:54:85:43:39:89:18:e0:1c:
fe:47:98:b4:57:a5:0f:b8:25:84:f6:ee:42:10:d8:
e7:e8:46:ca:c1:a9:ef:93:b7:3d:be:61:84:9c:4a:
4a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:11:07:D6:21:D6:17:0E:E2:7B:57:F4:CA:B2:43:E5:5E:E3:F2:44
X509v3 Authority Key Identifier:
keyid:E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2c:4e:cb:a6:ef:cd:ba:b2:fd:68:99:9b:88:d7:10:f1:78:
27:0f:df:ef:ef:bc:d5:e8:70:ad:be:f8:3f:f0:b1:7e:28:0c:
e6:cf:2b:21:07:92:d9:56:01:e7:3a:47:0b:ac:a5:86:c0:80:
9d:fc:bb:22:f7:41:5d:32:27:29:78:c7:5a:75:75:83:42:9a:
5c:fd:0f:02:ad:e5:35:8b:24:6c:02:34:6d:e6:3c:be:85:39:
cd:2a:3b:ce:42:6a:1d:06:64:b4:18:93:18:ad:ed:7d:9d:2e:
f4:f4:c4:cd:9f:3e:fa:cd:92:31:ed:d0:3f:94:b5:1e:a2:cb:
dc:14:a9:e5:49:15:cc:fb:b5:62:99:cc:c1:5a:cd:16:39:c1:
b4:1c:5c:f9:fc:4d:90:08:a0:cf:79:2e:41:98:c7:83:a7:b4:
f1:f3:1a:51:63:90:1d:12:4a:bb:a6:5a:57:56:ee:7a:fb:5e:
b7:2b:d2:da:c0:20:a8:e2:93:f4:cc:86:d4:1f:8b:e8:38:f2:
82:45:8d:41:9a:04:61:0f:48:e7:ef:88:5c:02:95:e8:a8:3a:
a8:8e:c1:d6:a1:e7:ed:32:a9:cb:19:52:cf:e0:f8:2b:fe:fa:
50:b9:ec:27:da:79:cd:63:ac:e1:cf:46:82:9e:f9:63:ca:f3:
ea:26:b4:f4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUN8yE1NWY6m4aDgL/HRXSLL0demEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQyNjQ1
RDY5NUE1NDAeFw0yNjAzMDIxMjU1NDZaFw0yNjAzMDUxNTM4NDZaMDMxMTAvBgNV
BAMTKEU3MTEwN0Q2MjFENjE3MEVFMjdCNTdGNENBQjI0M0U1NUVFM0YyNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOjU2TPaidkJiPrJcZULW/yFJB
ftufBwSla11LoSGn8RQzdjcuS9UJ8oZ+0xL+nznwfRt9f0QSPocyjX28qmZkJBMf
7Nja2dsKSFdcOotJVsF0DjVzBWQDZlc6gvM+mjukDbvysfFsvlZWoYpA+CBVZO4N
iw9pjd1mF3tBlFKPcCSKKMLXlD0sljMD1t9KPZOZOhl6KPfLIjhGmMcE0XIUTJxL
+gnSIOATKF3Um8sbF+bowI6tAGfCLjLRGFHPQ0XdtF6p5dKXuvYNp8j/iJOA/fm7
fOvuwIpUhUM5iRjgHP5HmLRXpQ+4JYT27kIQ2OfoRsrBqe+Ttz2+YYScSkqPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU5xEH1iHWFw7ie1f0yrJD5V7j8kQwHwYDVR0j
BBgwFoAU4H8OjeJXLce4E37AZ59CZF1pWlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
OGYyODVlZi0zNDUzLTQxNzktYTU1My1mMTk1OTdkZTlkZWQvMC9FMDdGMEU4REUy
NTcyREM3QjgxMzdFQzA2NzlGNDI2NDVENjk1QTU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQyNjQ1RDY5
NUE1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThmMjg1ZWYtMzQ1My00MTc5LWE1
NTMtZjE5NTk3ZGU5ZGVkLzAvRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQy
NjQ1RDY5NUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACAsTsum7826sv1omZuI1xDxeCcP3+/vvNXo
cK2++D/wsX4oDObPKyEHktlWAec6RwuspYbAgJ38uyL3QV0yJyl4x1p1dYNCmlz9
DwKt5TWLJGwCNG3mPL6FOc0qO85Cah0GZLQYkxit7X2dLvT0xM2fPvrNkjHt0D+U
tR6iy9wUqeVJFcz7tWKZzMFazRY5wbQcXPn8TZAIoM95LkGYx4OntPHzGlFjkB0S
SrumWldW7nr7Xrcr0trAIKjik/TMhtQfi+g48oJFjUGaBGEPSOfviFwCleioOqiO
wdah5+0yqcsZUs/g+Cv++lC57Cfaec1jrOHPRoKe+WPK8+omtPQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:28:08 2026 by rpki-client