
$ rpki-client -vvf repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft
File: 798D703C19A93E4E19F716304D78F20AA3261B8A.mft (raw, json)
Hash identifier: +cX+OjLC6+OYfYsLGiorubuvJfh/hCEY0Q0Ch2Z9W0A=
Subject key identifier: BB:CB:6B:52:A0:45:C8:F2:58:E7:56:3A:D4:3F:DE:12:32:E1:33:CB
Authority key identifier: 79:8D:70:3C:19:A9:3E:4E:19:F7:16:30:4D:78:F2:0A:A3:26:1B:8A
Certificate issuer: /CN=798D703C19A93E4E19F716304D78F20AA3261B8A
Certificate serial: 02188590B9E18D463ECFDDF179F7406548A84E13
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft
Manifest number: 0523
Signing time: Wed 05 Nov 2025 00:11:56 +0000
Manifest this update: Wed 05 Nov 2025 00:06:56 +0000
Manifest next update: Sat 08 Nov 2025 07:53:56 +0000
Files and hashes: 1: 3130332e38332e39362e302f32322d3234203d3e20313336303738.roa (hash: h+98Hl+FH7IDfemSrtBXhbDJo99hfIfndXfQe3JekOA=)
2: 798D703C19A93E4E19F716304D78F20AA3261B8A.crl (hash: gKnFdQ3MZVo+1gAzylOYuvrNcEYoO8jwu+ohoZAOc3g=)
3: 323430303a393163303a3a2f33322d3438203d3e20313336303738.roa (hash: JtI1jfgaZBEwCqyUB72ksPn3QargIoHZ6U4tHyErJjI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.crl
rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 07:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:18:85:90:b9:e1:8d:46:3e:cf:dd:f1:79:f7:40:65:48:a8:4e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798D703C19A93E4E19F716304D78F20AA3261B8A
Validity
Not Before: Nov 5 00:06:56 2025 GMT
Not After : Nov 8 07:53:56 2025 GMT
Subject: CN=BBCB6B52A045C8F258E7563AD43FDE1232E133CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3c:d2:12:10:0d:f6:30:10:34:ae:0c:d5:9b:
20:41:b5:2b:3c:37:14:88:b8:42:8b:fc:bd:34:02:
e5:37:10:1e:3e:15:06:b7:72:36:07:25:7a:8f:b8:
56:1b:b2:7a:06:31:e7:65:02:f8:dc:3c:96:fd:7f:
78:b1:7f:46:23:16:a7:21:6a:60:50:2c:30:32:07:
ab:8c:55:e7:0c:94:be:d8:97:ab:4d:41:f0:e6:bd:
6c:23:27:91:a0:b4:33:f4:65:9e:56:df:88:ed:cb:
f9:56:a8:34:ff:3c:c0:7d:63:a2:96:c1:fa:49:c4:
4e:76:58:a0:13:68:ba:cc:e8:21:38:e5:63:bb:c3:
57:d2:09:6c:d7:f5:a9:b2:8b:37:ed:17:e8:50:9b:
f1:bb:f3:8a:ac:68:29:6e:6e:98:ca:25:c7:a2:ce:
3d:92:79:9b:27:9a:a2:40:70:49:b0:8c:61:aa:e9:
22:24:34:c6:45:e2:17:5b:b5:cd:db:7f:1f:0c:8e:
e3:c2:eb:b6:67:ff:5f:ed:de:de:37:a6:12:ac:df:
d2:a5:30:88:04:dc:77:7c:cd:74:92:97:a2:78:51:
a9:51:b2:ac:00:b4:ec:fd:a7:39:d9:98:f6:ea:42:
f2:18:af:c7:c9:3e:3c:16:5b:eb:aa:8a:a1:47:65:
36:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CB:6B:52:A0:45:C8:F2:58:E7:56:3A:D4:3F:DE:12:32:E1:33:CB
X509v3 Authority Key Identifier:
keyid:79:8D:70:3C:19:A9:3E:4E:19:F7:16:30:4D:78:F2:0A:A3:26:1B:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4d:26:fb:f7:d3:87:74:04:07:b8:8c:09:51:c8:c4:d5:83:
ee:be:76:63:97:77:18:4f:51:a7:77:f1:da:39:19:a5:8f:4d:
65:d7:78:5a:54:0f:86:1e:5f:25:0e:17:0d:a5:4e:ba:4e:68:
a8:16:29:dc:e0:0a:5c:bc:5c:c7:67:3d:8e:d7:f1:5f:b8:5d:
47:4d:50:98:27:b1:2e:c3:cc:fe:00:da:ab:aa:7f:02:28:2c:
e8:2c:a1:eb:e9:c2:f7:18:53:90:04:0c:45:b0:0d:75:31:55:
d6:66:c6:1c:6f:1f:bc:3a:c4:1e:ab:2d:25:b5:4b:73:b4:7e:
65:67:44:97:29:ef:c3:75:e1:73:b2:8d:21:fb:77:76:df:58:
cc:7f:ae:ef:dc:95:5e:61:84:28:99:ef:5a:5f:0f:6c:35:fa:
b5:98:3b:71:38:8c:20:9a:55:19:c7:2e:e3:fc:64:13:c0:8b:
39:29:77:51:41:84:4c:02:f4:e7:4d:4c:5c:0f:2d:6f:63:0c:
8e:66:40:30:e9:80:b0:84:3b:c7:ff:98:af:38:03:29:07:13:
11:19:ca:6a:1f:e9:80:09:0c:f9:60:4b:2a:da:f3:67:e0:36:
98:8d:55:3f:f7:2a:c9:d2:66:a9:8d:0b:be:39:94:aa:ad:e7:
97:81:68:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:29 2025 by rpki-client