
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft
File: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft (raw, json)
Hash identifier: iHCSRwxCQMg0qbyQT4GnN1jRXhSdRSR5hWJbR6xnFu8=
Subject key identifier: 7B:F3:28:A8:41:9C:3E:11:2C:43:5C:B9:0D:A4:1C:42:3B:67:04:F2
Authority key identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C
Certificate issuer: /CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C
Certificate serial: 21F8F6C9D9159D9C9588EC6478453873397CDA4C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft
Manifest number: 0568
Signing time: Wed 15 Apr 2026 21:30:00 +0000
Manifest this update: Wed 15 Apr 2026 21:25:00 +0000
Manifest next update: Sun 19 Apr 2026 01:51:00 +0000
Files and hashes: 1: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: 7t1UfL5E/ZJwSEO7orDivflRDFpoQvNkURGau+OZ9WE=)
2: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl (hash: szrJ5v/F80EVzKHmETSmW8iXf0cTzGkFLGzDGE25wRk=)
3: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: mhHbC7IIWFFORZdV/WAdZvBGn0b08EabDQByz7GAvr4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl
rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 01:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f8:f6:c9:d9:15:9d:9c:95:88:ec:64:78:45:38:73:39:7c:da:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C
Validity
Not Before: Apr 15 21:25:00 2026 GMT
Not After : Apr 19 01:51:00 2026 GMT
Subject: CN=7BF328A8419C3E112C435CB90DA41C423B6704F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:59:ca:aa:a9:d0:34:48:b0:83:ad:1e:53:
00:25:b5:9d:e1:8b:58:1d:c5:1b:b5:44:4d:eb:92:
f3:8d:a5:a6:1e:80:10:c7:a8:da:0b:06:4d:f1:26:
23:2d:1a:95:de:98:f7:34:eb:b7:3c:80:20:5a:4f:
ab:40:7d:79:b4:33:3b:9a:26:48:9e:91:9d:2b:70:
39:9d:0c:16:e9:29:30:c2:94:ea:cb:59:a2:12:a7:
c6:b0:19:df:b0:e8:3d:ab:5d:40:0d:f2:c1:3b:18:
9c:95:d8:e8:01:cd:81:fc:b9:43:13:1d:23:82:dc:
5b:df:4a:ee:ab:fd:98:f9:8a:70:96:56:c4:a9:03:
e3:2e:bd:07:91:80:9d:1b:2e:3c:21:25:23:9f:3f:
2f:c0:cd:22:b2:9c:ba:44:f1:6d:f3:63:dc:e3:a7:
c7:e6:e2:9d:53:6c:ee:5f:0f:30:a7:46:7c:78:af:
0d:b5:29:db:f8:20:71:8d:83:8f:1a:12:fe:c6:82:
fb:33:27:78:fb:77:3f:05:d0:65:fb:2b:ae:69:27:
5a:8e:fb:8f:4f:c5:9c:24:2b:1e:bb:ee:ba:83:62:
8d:b0:95:40:b9:be:be:a2:36:14:47:65:c6:07:db:
c6:2f:bc:15:ad:b7:7e:64:93:cf:8e:a7:4e:4a:7d:
21:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F3:28:A8:41:9C:3E:11:2C:43:5C:B9:0D:A4:1C:42:3B:67:04:F2
X509v3 Authority Key Identifier:
keyid:E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:77:d0:66:7f:6c:2e:6f:e8:c9:0a:99:36:93:9b:65:1a:1e:
05:9f:36:72:14:35:7d:01:67:6d:7a:69:77:47:a8:60:a7:77:
be:26:0f:e5:02:66:02:d6:82:f0:0e:ca:94:20:32:e7:b5:f0:
16:e8:ca:5c:92:75:55:fd:d2:4c:cb:89:b2:5b:33:d1:ee:3d:
da:d9:1e:d7:ee:ba:da:18:00:a3:e3:fa:59:29:21:24:14:df:
f6:1a:65:13:b7:11:5e:53:68:f1:60:ff:b8:72:31:71:63:5f:
57:bd:67:ec:38:ac:71:db:0b:15:b7:08:97:4e:fb:a6:3e:57:
77:77:88:d0:c4:50:98:fc:cd:85:cb:7d:d9:0a:e2:33:ee:98:
51:1d:8c:d7:c1:65:fa:dd:18:95:aa:15:1f:6c:41:7a:7f:79:
eb:6a:9d:62:be:a1:29:9c:51:18:a9:31:48:ea:a6:02:8f:8d:
71:6a:42:67:d0:77:b3:ad:6b:ce:f0:5f:79:91:98:5c:f6:fe:
8d:24:fa:be:7f:78:a2:95:6f:4d:22:42:98:59:73:6d:74:b0:
1a:22:41:ce:54:c0:14:48:a2:c7:36:bf:ff:e4:6a:57:dd:f0:
4b:40:84:8f:17:14:3b:a3:ca:9a:f0:4f:da:fa:e9:2c:f8:2f:
3d:7e:d4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:49:49 2026 by rpki-client