
$ rpki-client -vvf repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
File: E44D4DE701D932713536A084F76894A6B0473F5E.mft (raw, json)
Hash identifier: iqHWMTfT1LldRjA5Jdq8oo/cPyM3aawODVaJVdoKkB4=
Subject key identifier: 19:08:19:D5:47:C9:49:8F:D0:48:DA:3A:70:DE:FB:24:C1:EF:8F:5C
Authority key identifier: E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
Certificate issuer: /CN=E44D4DE701D932713536A084F76894A6B0473F5E
Certificate serial: 249FE69F51567F40F685A2CFD1EA288E4DB53C28
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
Manifest number: 0280
Signing time: Sun 01 Mar 2026 19:12:30 +0000
Manifest this update: Sun 01 Mar 2026 19:07:30 +0000
Manifest next update: Thu 05 Mar 2026 06:18:30 +0000
Files and hashes: 1: E44D4DE701D932713536A084F76894A6B0473F5E.crl (hash: 4HECF5CIm75Pfk2X1izvmWZTaHVKQpIP2j+tsi6qnpA=)
2: 3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (hash: 7QCopDe7hDkeVtB42/2nmhBi3ICh26qKFWh8viPiuG0=)
3: 3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (hash: bl/n5bigRNUdzOdSRBMJ4xavg1ElwqsMKJXdZov+BBc=)
4: 3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa (hash: W4u8P1SQQa3NmSN5ZCqGSVGNmCx4edXu6e4flVOIf2c=)
5: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (hash: otSYaOpWUX7/R5silYI2qFwHrea2Nhn73//fdSkzDls=)
6: 3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (hash: 4c0IK//t9QV9eDZcRuS2szDSLoJBAnWIV4hCGmSoEiE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl
rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:9f:e6:9f:51:56:7f:40:f6:85:a2:cf:d1:ea:28:8e:4d:b5:3c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E44D4DE701D932713536A084F76894A6B0473F5E
Validity
Not Before: Mar 1 19:07:30 2026 GMT
Not After : Mar 5 06:18:30 2026 GMT
Subject: CN=190819D547C9498FD048DA3A70DEFB24C1EF8F5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:19:8e:c8:6e:e1:51:33:69:21:e7:f8:cf:5b:
b2:d2:21:d2:32:84:f9:95:c8:0b:d0:e7:e0:62:fb:
1f:89:d1:0d:ab:46:0d:0f:2a:41:0a:82:42:4e:19:
aa:28:35:5a:b6:2b:3a:37:69:2c:b6:49:99:72:09:
84:5d:af:3f:68:34:50:79:db:b8:38:b7:20:95:42:
23:80:f8:f5:9c:7a:2a:24:32:36:7b:2a:32:6a:3e:
5d:46:13:a2:b0:ba:6e:40:83:97:d5:b2:7f:2f:53:
db:28:38:26:4f:0f:4c:d9:9f:09:3e:ea:ac:41:76:
18:85:34:90:56:76:01:83:0c:fd:4f:23:dc:09:84:
8b:11:bb:36:c1:4e:e5:49:83:f7:2f:94:1a:19:97:
94:6b:3e:a9:26:ec:a2:30:df:16:ea:d6:ca:d5:fe:
66:9c:a8:bf:76:bf:a1:7d:7f:0e:3d:c0:74:00:6f:
d9:2d:f4:c4:53:59:24:3f:96:10:14:98:c3:64:a1:
52:fd:83:65:d1:35:ca:51:71:40:53:1d:26:98:b2:
f6:cc:3b:bc:36:07:d5:ac:ad:a9:d0:d9:34:b0:30:
39:b3:57:4e:f8:94:41:60:b0:9a:47:2d:fe:23:ef:
ed:32:e9:32:a5:05:34:e2:a1:3d:85:fd:95:9c:01:
e6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:08:19:D5:47:C9:49:8F:D0:48:DA:3A:70:DE:FB:24:C1:EF:8F:5C
X509v3 Authority Key Identifier:
keyid:E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b9:04:44:71:86:27:09:dd:04:bd:8a:8d:d1:32:f7:59:5d:
21:fa:bc:44:c9:85:74:91:1a:2d:12:a3:2b:52:f6:67:7b:d7:
58:66:6f:84:3b:0f:ce:2c:a5:62:f9:a0:e8:d2:be:f8:1e:73:
3b:f7:ad:b3:ca:49:dd:8a:c4:53:52:1d:4f:41:39:00:00:21:
2e:7f:c3:da:35:ae:2c:23:15:48:8c:d7:74:a2:27:a6:38:71:
a7:8d:2a:e8:6e:fb:f0:5b:d2:e7:46:13:f7:6c:ce:40:39:cc:
cc:11:95:6b:0d:48:60:54:63:be:5f:0e:c7:51:30:d6:52:81:
12:9a:0d:b5:d5:b0:28:6d:96:f5:d1:5c:a5:27:24:72:19:58:
6a:d6:e2:1e:e6:d4:39:ed:72:c6:f8:00:f1:8c:c5:6c:d6:3a:
c8:c4:f7:84:62:52:09:8f:af:14:e6:c2:cb:77:e0:05:f8:4e:
55:41:c0:d6:20:62:ba:3f:5e:24:c4:93:d2:f3:da:ee:d9:c8:
45:f9:9c:08:f4:b1:48:7c:a3:aa:65:f8:29:8a:e3:b3:00:f1:
ea:17:7f:7d:c8:a8:6b:fa:0a:24:b5:27:92:6d:4c:7a:3f:a3:
33:72:73:d1:f1:47:cb:8a:07:35:e0:97:57:8e:4a:de:cb:03:
45:8d:13:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:03:44 2026 by rpki-client