
$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft
File: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft (raw, json)
Hash identifier: VHR7zmt1nXQzHWtZTHYrANOdn8Inr03eiHFT0MaHhH4=
Subject key identifier: 1D:6A:68:D7:D7:D9:B5:B5:78:2F:1D:7E:11:02:1C:E7:83:43:20:FF
Authority key identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C
Certificate issuer: /CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C
Certificate serial: 3C799FA702B4D305BC206ECABD48FD55151AFC26
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft
Manifest number: 0104
Signing time: Sat 28 Feb 2026 13:10:58 +0000
Manifest this update: Sat 28 Feb 2026 13:05:58 +0000
Manifest next update: Tue 03 Mar 2026 14:49:58 +0000
Files and hashes: 1: 3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (hash: 067j8zIqWRfiKYsv/8PNz7miyq3F672QljWEkk7m/9s=)
2: 323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa (hash: H0tMLPWT/xMzJjo+X3cfcs6u4yhbTyToHbzV+AgsIh8=)
3: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl (hash: JTdJdyHzZqWPJVrxy0JLRt9PkX2b16oLkkP5yvCq2f0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl
rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 14:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:79:9f:a7:02:b4:d3:05:bc:20:6e:ca:bd:48:fd:55:15:1a:fc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C
Validity
Not Before: Feb 28 13:05:58 2026 GMT
Not After : Mar 3 14:49:58 2026 GMT
Subject: CN=1D6A68D7D7D9B5B5782F1D7E11021CE7834320FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:b1:95:72:01:e6:8e:fc:e1:27:ed:40:5f:
85:03:e3:70:13:9b:13:f4:04:83:bc:ab:ef:c5:35:
69:06:c3:07:40:d9:b5:8e:f7:83:9b:5f:22:4e:70:
f3:d6:e2:1b:e1:0a:f1:d8:82:98:b3:7c:ac:42:2f:
29:b5:d3:16:ac:50:22:e0:c1:fb:aa:c6:c5:56:f5:
16:7b:8e:d5:e5:b6:b5:49:fe:18:94:64:69:08:b5:
23:ab:70:49:d1:24:97:78:55:b2:04:9a:10:db:e5:
1d:ff:7a:74:0b:82:45:32:81:7e:88:ea:f6:ff:11:
49:06:23:7c:be:71:37:6a:6a:ae:5d:2a:62:ca:e5:
ac:45:a2:89:79:31:4d:39:90:ac:c1:ed:d1:6e:5a:
ed:dc:d1:8e:e2:e5:e5:ff:79:d3:83:d0:54:ab:51:
ad:bf:3c:5c:50:8c:1c:dd:3f:6d:9f:aa:57:09:df:
63:aa:1a:5e:82:73:d0:3d:34:19:e5:72:04:f1:cc:
ec:09:b9:81:ad:31:ae:0f:cb:bc:01:33:7c:8f:40:
09:b5:3b:54:46:45:bb:6b:56:39:59:92:50:ed:9a:
65:4b:a3:80:25:97:19:55:6b:a2:eb:d7:ef:5f:80:
66:a8:15:ad:7f:48:75:b4:02:b9:5f:5d:29:65:a5:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6A:68:D7:D7:D9:B5:B5:78:2F:1D:7E:11:02:1C:E7:83:43:20:FF
X509v3 Authority Key Identifier:
keyid:30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:53:65:ee:bd:ce:ce:87:ab:03:60:8b:39:f0:5e:5d:cf:6a:
14:2c:8c:e2:6b:90:c2:32:f3:91:b6:9d:8d:b4:19:d6:ce:4c:
0d:bd:0f:d7:cf:54:21:69:b3:ce:88:40:8d:de:db:fe:c6:a9:
e6:f1:b7:51:d9:6a:1e:4a:c4:d5:ed:52:1b:a6:b0:f6:34:30:
1d:5f:23:ed:80:1e:3c:80:c1:98:5f:62:30:51:59:29:85:6a:
d0:f5:5b:71:dc:3f:38:e0:39:3f:50:2d:86:65:d5:d7:9c:ef:
52:75:10:cf:da:28:98:a4:21:fe:d3:ea:b7:ee:d3:4a:67:5e:
e2:f9:c3:25:42:f5:a9:4b:c3:5a:15:74:68:5e:4a:07:1f:b3:
62:43:96:a8:09:77:78:f0:94:35:0a:ea:e0:85:74:66:31:a8:
6a:80:bc:12:1c:c0:f7:ec:df:7e:13:97:3d:37:05:f8:6b:2b:
29:bc:8a:fa:a7:da:b2:78:ea:4b:31:e9:dd:48:6c:7a:e3:73:
ea:67:fe:83:87:d8:e0:f7:7a:56:f6:cc:05:d0:da:ec:6b:42:
b6:bf:60:bc:54:6f:fc:cd:24:e0:8b:37:5e:0d:3e:71:d2:31:
63:06:d0:23:0f:84:25:3b:d4:3e:81:86:b8:d2:d6:1a:a3:be:
fd:b7:b6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:56 2026 by rpki-client