
$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft
File: E7953AD51AF5D89FB7129E253DEEFE8072247264.mft (raw, json)
Hash identifier: SXe8ik7xRPnSTAlG+V/DZRHKoVyH95o9x6UPSIwuF/A=
Subject key identifier: 2B:27:0F:F2:A6:C7:68:64:BA:67:E6:A8:8E:B9:FF:BC:EC:06:07:57
Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64
Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
Certificate serial: 3A1DB0843DF209ACF686197090A81B1D3BDDB2BA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft
Manifest number: 01F8
Signing time: Sun 01 Mar 2026 12:10:56 +0000
Manifest this update: Sun 01 Mar 2026 12:05:56 +0000
Manifest next update: Wed 04 Mar 2026 12:55:56 +0000
Files and hashes: 1: E7953AD51AF5D89FB7129E253DEEFE8072247264.crl (hash: Jna/ybOp7g9jeTZAjEy9mL6Y59IHbVYv0oS9a5LTqLE=)
2: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: fibpaoWLGLqVlSh+YVe38FiOvASMtn5m89vjXOwhkBg=)
3: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: VxYbMhqwlKJa8vovl6e5giv2nGRmCv5MIyRt8vp3qoU=)
4: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: 3IPWWkSr+CRIxbooLiHD2sYaMVl9ZCy+eS+fZpZLV/I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl
rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 12:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:1d:b0:84:3d:f2:09:ac:f6:86:19:70:90:a8:1b:1d:3b:dd:b2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
Validity
Not Before: Mar 1 12:05:56 2026 GMT
Not After : Mar 4 12:55:56 2026 GMT
Subject: CN=2B270FF2A6C76864BA67E6A88EB9FFBCEC060757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:be:c8:3c:be:62:6d:4f:c4:fc:0c:22:c1:
ff:48:b0:73:b3:e4:58:f8:66:ae:ec:39:c1:9d:02:
fd:e5:12:f7:60:27:bb:66:09:7a:61:8d:95:d8:85:
a3:6d:6f:0a:a1:9e:b2:28:a9:c6:94:7f:0e:63:ea:
1d:30:22:f8:21:f2:cf:c4:43:e5:09:85:8c:ff:3f:
d8:4e:3d:4b:8a:0b:40:82:50:96:e0:89:89:79:cf:
a7:31:52:49:70:36:3e:93:82:95:cd:59:02:39:9f:
d2:64:c4:33:60:1c:9d:e5:e8:66:d7:f8:97:28:c8:
2e:7c:2b:c8:6b:de:3b:53:dd:07:01:83:35:cb:cf:
30:03:c9:67:04:e9:be:cd:06:6e:64:6e:b2:f2:b0:
9c:3a:aa:20:10:f4:c1:ab:b3:c9:bf:bb:d3:46:e3:
f1:ba:66:d4:4c:6a:f4:79:cc:c7:c5:bd:12:5b:8c:
9d:dd:57:9d:16:a0:00:3a:7b:bb:b1:5e:c5:55:d2:
e9:db:ed:cf:f2:42:6e:c1:15:e6:3a:d5:8a:47:f5:
05:86:c3:42:df:40:b9:5b:c1:d1:06:62:0f:ab:b1:
cb:20:08:57:33:2f:c6:a9:b3:fe:c4:64:10:5e:82:
bb:74:c9:43:7a:e0:d7:26:15:3b:14:46:47:45:09:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:27:0F:F2:A6:C7:68:64:BA:67:E6:A8:8E:B9:FF:BC:EC:06:07:57
X509v3 Authority Key Identifier:
keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ec:f6:7b:6d:6f:1d:b1:4f:85:a8:ce:2b:10:0d:d4:14:17:
16:43:63:d8:ae:19:16:c9:6a:ac:59:a2:e4:f1:d6:5c:70:66:
e7:87:63:f1:df:d2:ba:13:c4:51:0e:de:c0:1a:dc:55:c7:e1:
7c:e3:62:eb:66:ac:4c:6d:3f:08:78:95:df:1a:55:eb:a8:d3:
6c:c5:8d:84:aa:3a:f4:9e:5d:ec:b3:30:c1:16:d9:1d:83:58:
af:a3:0a:50:13:da:c1:70:15:7e:eb:bb:52:55:3b:c3:6e:d2:
a8:9a:ed:4d:22:81:d6:7b:28:09:ac:97:ad:46:0d:17:af:9a:
0f:7a:ad:4f:3c:cd:2d:8e:b1:00:46:c1:db:7d:38:1e:9c:09:
43:4f:63:1d:63:6c:7a:3d:18:5f:7d:48:82:fb:30:0c:a5:8c:
1c:b2:0e:93:18:79:d5:40:d2:a7:0e:fe:de:89:6d:f9:0d:a0:
0e:73:f6:9f:09:a1:7b:83:75:2b:80:09:9f:80:7c:c7:5f:c5:
08:b5:38:00:85:e6:1c:2e:f7:06:56:97:bc:a9:31:84:f4:4e:
4e:66:a6:ee:0e:cb:32:58:43:07:8d:f7:e2:09:95:a1:46:ab:
cb:15:ca:34:67:6d:0e:a4:69:1e:ea:fc:74:0b:ef:a3:cc:81:
6a:62:57:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:21 2026 by rpki-client