
$ rpki-client -vvf repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft
File: 13697C4A24DCE77089F778CD506D620711B4472B.mft (raw, json)
Hash identifier: xWgWTSzjO+E1NHo7qdw/VqyHGui6OeRrPtWBnPKIXrQ=
Subject key identifier: 3F:86:2E:44:C2:7A:59:4B:AF:EE:11:72:4F:9D:7A:54:42:F1:D4:12
Authority key identifier: 13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B
Certificate issuer: /CN=13697C4A24DCE77089F778CD506D620711B4472B
Certificate serial: 0EAFD1614A7CF3A54D57EF11DCEE66744042069C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft
Manifest number: 03A0
Signing time: Sun 01 Mar 2026 07:00:53 +0000
Manifest this update: Sun 01 Mar 2026 06:55:53 +0000
Manifest next update: Wed 04 Mar 2026 09:00:53 +0000
Files and hashes: 1: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: z8SiNmSQZoeivn4D0nJbpNuNEHST/FILH3X+hwxtGs8=)
2: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: cgQmKFRKJxdktyV9rczfIpoHQDdH6UPgKR9KvlttEAM=)
3: 13697C4A24DCE77089F778CD506D620711B4472B.crl (hash: ZJ9g1ve46a00AcaIX37PqMUBlnVQw2q0qZ0y85OAwaQ=)
4: 3130332e3136312e3131372e302f32342d3234203d3e20313430333936.roa (hash: OaYN9F7Ro7W56q+ls2T1VHXeadTTjgnnYsVEGgZUhRE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl
rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:af:d1:61:4a:7c:f3:a5:4d:57:ef:11:dc:ee:66:74:40:42:06:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13697C4A24DCE77089F778CD506D620711B4472B
Validity
Not Before: Mar 1 06:55:53 2026 GMT
Not After : Mar 4 09:00:53 2026 GMT
Subject: CN=3F862E44C27A594BAFEE11724F9D7A5442F1D412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:37:db:e6:2c:e7:99:d7:e1:54:7c:22:4d:
79:b2:f6:51:23:39:ae:da:90:1e:c6:c9:75:30:ab:
b1:46:82:16:67:11:08:ce:79:e5:de:7c:fb:e6:34:
4a:fd:63:c8:a5:1c:96:04:66:4c:1a:36:f4:17:a1:
84:3a:ca:64:d6:51:c4:85:2e:1a:4f:aa:d8:14:f2:
45:62:0f:18:bf:5e:ff:e2:8b:ea:93:81:7f:5b:b7:
c4:d8:00:dc:22:cd:04:c9:b9:41:a0:1e:04:be:1f:
a2:7e:56:13:41:5e:a9:3d:34:33:af:99:89:48:52:
48:21:a7:c7:42:5e:be:a8:cf:cf:9f:8e:35:c2:83:
8e:73:96:31:be:5b:09:39:ec:9c:ae:89:5a:69:cc:
58:9f:1f:9a:bd:d3:9c:71:10:61:49:12:4c:c6:c0:
d5:d8:c5:47:ad:6b:08:cc:e8:2c:de:d9:c9:aa:4d:
0b:20:cc:0b:ad:60:e7:94:da:f8:10:ea:72:6d:b5:
8e:9b:59:38:48:ab:ed:61:28:42:97:8d:fd:64:75:
35:d8:3c:a8:43:d1:fb:95:db:bf:80:03:8e:a7:b1:
e7:ec:d9:76:a8:3b:89:f6:9a:90:3a:cf:1a:b0:ef:
eb:29:79:ed:44:47:4e:0a:1b:19:c0:d1:c9:60:18:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:86:2E:44:C2:7A:59:4B:AF:EE:11:72:4F:9D:7A:54:42:F1:D4:12
X509v3 Authority Key Identifier:
keyid:13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:63:9f:63:b3:b6:6e:e2:5a:54:8c:5a:71:0a:ae:34:6a:11:
ba:03:18:25:6e:d9:f0:0f:59:8c:b1:0b:6f:9b:58:58:68:f5:
83:de:d2:9e:fe:2a:73:76:11:f8:d9:64:d7:0d:0a:f1:92:b6:
b6:46:7b:b1:f0:57:b6:63:49:4a:98:46:c8:70:ad:ec:da:5a:
92:60:00:05:97:cd:73:05:25:15:58:19:f2:6e:d3:35:f1:c0:
ac:f4:42:d3:c4:f4:e2:35:5d:2e:6c:12:ef:11:3e:6c:14:05:
f0:23:93:4a:1e:fd:87:3b:01:ce:31:18:56:48:f3:16:40:9d:
2e:3f:ff:7a:2a:e9:73:89:7d:51:92:d6:8f:77:2a:d3:85:82:
2d:54:84:92:7c:80:ff:44:e7:23:6f:28:0b:5a:5d:56:d4:fa:
d5:1a:87:aa:7d:05:13:fd:f5:f9:47:2f:fa:45:f2:57:7e:70:
81:ef:03:d8:06:76:06:49:9a:4c:c1:a1:03:3c:12:13:34:f4:
aa:55:89:d2:48:28:5e:a7:8a:a5:67:9a:9b:d5:6b:74:3c:6c:
09:eb:5a:ce:cd:ff:28:e7:2e:a5:ce:bc:53:d7:0d:bd:66:62:
ee:c9:c7:41:59:33:96:4f:e2:23:ed:e7:0b:a0:35:fd:72:24:
21:09:d6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:14 2026 by rpki-client