
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft
File: B7260D30835B9D812F7044ECE96F4FB8F698379C.mft (raw, json)
Hash identifier: egFwhSkepefWr26CCKxfncUxg0791IpIMW0VDPqCyLw=
Subject key identifier: 2F:5A:9E:10:14:9D:7E:06:6E:C8:E9:EC:F0:C9:27:8B:75:B0:20:DE
Authority key identifier: B7:26:0D:30:83:5B:9D:81:2F:70:44:EC:E9:6F:4F:B8:F6:98:37:9C
Certificate issuer: /CN=B7260D30835B9D812F7044ECE96F4FB8F698379C
Certificate serial: 7190DC42A3DEE79B0A3A2DA90DFEAC972802E7E9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft
Manifest number: 0357
Signing time: Tue 04 Nov 2025 02:21:45 +0000
Manifest this update: Tue 04 Nov 2025 02:16:45 +0000
Manifest next update: Fri 07 Nov 2025 10:12:45 +0000
Files and hashes: 1: B7260D30835B9D812F7044ECE96F4FB8F698379C.crl (hash: 8pj989vX5xvNuY6rlxMm8UeM3EBjYotbcb6lZCuoarc=)
2: 3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa (hash: C1fWM39iM3F6U+59gsqeYJ83me8iwLln6AeCDUtsAG4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.crl
rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 10:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:90:dc:42:a3:de:e7:9b:0a:3a:2d:a9:0d:fe:ac:97:28:02:e7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7260D30835B9D812F7044ECE96F4FB8F698379C
Validity
Not Before: Nov 4 02:16:45 2025 GMT
Not After : Nov 7 10:12:45 2025 GMT
Subject: CN=2F5A9E10149D7E066EC8E9ECF0C9278B75B020DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:d1:b4:59:6d:01:d3:17:13:e8:a8:32:6b:
99:96:9c:7d:1d:54:dc:d3:19:97:01:5b:ea:89:7a:
2f:10:29:73:2e:6d:65:a4:d6:70:53:9a:3c:f2:54:
f1:69:18:2d:48:b6:4e:cd:69:f2:13:d3:5f:18:3f:
bd:00:07:d9:c7:e7:17:31:fc:b3:65:13:1d:9c:bf:
b8:9e:e7:e0:e4:a5:1f:88:2f:4f:5b:17:10:38:ea:
d0:eb:06:c5:a9:73:96:9e:00:f0:53:12:88:d3:3e:
d0:8b:b2:08:f5:bd:0c:3d:9f:bd:5f:43:da:5f:da:
69:91:1e:99:49:07:44:af:a3:9c:de:2e:68:b5:33:
3d:50:bd:4f:85:73:16:83:aa:ca:cb:8e:c6:f8:66:
89:2d:33:a9:d4:32:22:46:76:9e:b3:30:e1:99:90:
dd:5b:e5:1a:87:0f:75:4d:05:2f:a5:e0:29:ad:74:
17:8d:3d:b7:6d:46:5e:f0:e4:7c:82:3c:8a:80:1d:
32:b6:6e:5c:7a:dc:dd:72:63:0d:11:f2:5d:d7:a0:
3e:27:8a:20:53:15:13:cc:0d:f7:e3:84:f5:37:a2:
34:da:12:af:18:31:0a:6a:41:e1:74:29:2e:73:ba:
ef:26:9e:3a:b2:3e:1e:20:0f:29:ec:21:41:9f:a1:
f4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5A:9E:10:14:9D:7E:06:6E:C8:E9:EC:F0:C9:27:8B:75:B0:20:DE
X509v3 Authority Key Identifier:
keyid:B7:26:0D:30:83:5B:9D:81:2F:70:44:EC:E9:6F:4F:B8:F6:98:37:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:44:3f:98:a5:03:16:ee:4a:c2:cf:45:2a:6f:1f:8d:80:6f:
39:f3:81:eb:00:4f:cf:92:e0:3d:95:3d:cb:76:8f:c0:9e:b4:
45:db:43:6d:74:89:2b:bb:1b:f3:35:21:fd:22:cf:c3:3f:1a:
21:70:07:ff:8f:95:30:92:5e:cd:82:4a:5d:c7:34:a6:da:6c:
52:61:2e:7d:44:6d:79:a1:30:b1:45:16:1d:07:f0:4e:4f:eb:
c3:33:0b:8e:83:c6:13:97:3f:82:8b:ab:b8:75:da:3d:cb:1f:
7c:1e:b6:57:c7:28:53:22:d8:d3:98:e8:6a:28:2e:0a:22:b2:
16:44:9a:e7:ef:c0:7c:e4:fc:37:55:4d:6f:16:4b:09:63:a1:
9b:6d:d1:fe:0f:ce:ee:aa:55:33:e0:5c:fa:8d:b0:46:a4:5b:
38:9e:9e:22:97:d9:1e:7f:1b:b4:ab:31:e0:61:81:be:d2:28:
a8:4e:2a:ff:70:86:f5:13:69:49:e0:27:04:fe:c7:b0:9b:dd:
49:9b:9b:ea:92:34:54:36:e2:93:0c:bf:fb:0f:f5:76:d7:26:
9c:27:62:04:13:2e:8c:da:a8:21:c7:98:66:34:2e:e8:c6:eb:
1a:37:08:55:90:6d:f4:e4:72:ac:17:3f:56:ac:38:46:ca:10:
58:7d:eb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:55:36 2025 by rpki-client