
$ rpki-client -vvf repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft
File: A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft (raw, json)
Hash identifier: OgNNhjE2Ofd33oGir29u4C/BTV3v4lU/8B0s3wAQxoo=
Subject key identifier: 69:49:B9:DE:0B:34:E3:C7:4A:51:9A:19:60:FB:C2:5E:01:CB:9D:6E
Authority key identifier: A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D
Certificate issuer: /CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D
Certificate serial: 2B645AE78D67CFCB02A7D59E9D283346C096E2EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft
Manifest number: 0552
Signing time: Sat 28 Feb 2026 11:01:44 +0000
Manifest this update: Sat 28 Feb 2026 10:56:44 +0000
Manifest next update: Tue 03 Mar 2026 21:25:44 +0000
Files and hashes: 1: A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl (hash: hNIatknbBhUn5ojZJfPp2ODRdhx6u6aw+IhzjHZ/1x8=)
2: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (hash: Go0CPlPcssjZzIiCTnTf40YOYb6lhMvP1qODXAMUZSM=)
3: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (hash: m9TQ4kbiWJ7wAU6DJc4l1m4yIYMItzDNgLT+tillKjs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl
rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 21:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:64:5a:e7:8d:67:cf:cb:02:a7:d5:9e:9d:28:33:46:c0:96:e2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D
Validity
Not Before: Feb 28 10:56:44 2026 GMT
Not After : Mar 3 21:25:44 2026 GMT
Subject: CN=6949B9DE0B34E3C74A519A1960FBC25E01CB9D6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:8c:6a:8d:08:03:24:85:d2:bb:a5:c2:9a:
3a:ed:3f:c6:a6:1f:e5:50:6a:8f:bf:57:11:b4:0a:
1e:23:03:59:66:8e:db:b5:8e:8b:9f:0a:86:55:c6:
b4:60:93:92:c3:5d:c9:5f:89:66:e1:d0:f8:e7:9d:
31:de:9e:2c:d2:79:93:35:15:83:2b:72:d4:a5:94:
c1:bf:16:1b:e0:be:0a:73:57:76:63:96:75:0a:ee:
f4:78:41:f6:8b:fa:67:e6:53:82:2a:fe:34:69:60:
d8:0b:e9:45:93:c0:af:28:32:15:b3:cd:b4:5a:5e:
40:03:55:e9:74:34:08:76:b8:5b:77:76:32:74:61:
46:c0:3b:9f:e8:d9:cc:06:ae:f3:22:e1:dc:f5:e3:
82:23:1e:dc:1a:39:d8:22:37:66:64:19:b7:a1:92:
4d:e7:d7:c9:04:73:b9:c7:39:a6:62:7f:c4:0d:12:
be:f2:ca:9f:48:ca:83:fe:ad:da:86:45:ae:2f:d5:
77:97:ff:f3:c7:f1:d3:e5:7e:01:bc:79:0d:34:ac:
d3:cf:dd:a7:b9:ed:7a:35:f7:8b:49:25:6a:70:9b:
f7:b8:60:47:9d:37:e5:1d:a2:21:57:22:ea:7a:93:
21:46:18:54:53:55:b0:bc:9f:72:c0:4d:2c:a7:82:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:49:B9:DE:0B:34:E3:C7:4A:51:9A:19:60:FB:C2:5E:01:CB:9D:6E
X509v3 Authority Key Identifier:
keyid:A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c4:79:e4:10:69:14:89:e8:c5:e1:d3:bb:d1:34:3f:ba:45:
a1:ed:95:35:be:40:3a:8e:8d:40:1b:b6:54:e3:85:86:9f:b7:
d6:ef:e6:ad:b3:bf:d6:a3:37:e7:39:f9:fc:40:e1:59:0a:00:
2a:a7:81:4f:8a:6f:83:66:72:0c:34:8f:0b:5a:53:21:09:c4:
6d:c1:2c:da:26:55:59:dd:48:b3:9c:6a:f7:e5:f4:a2:b5:e3:
40:5c:6d:21:9e:59:d0:06:95:2c:30:c1:20:b6:83:58:f2:96:
27:27:d2:55:3e:46:9b:79:65:d2:57:78:3d:77:5b:44:21:ac:
49:a0:a4:5a:8c:6e:6b:06:c9:00:a6:f4:3b:3a:91:31:70:f8:
b0:8d:1a:65:c3:45:ee:77:d4:38:c7:22:76:86:f8:a2:86:c0:
ee:9c:da:8c:95:7c:82:46:39:1c:98:5d:0d:65:5a:45:a3:87:
8a:a6:42:f2:65:bb:f8:dc:f9:94:e3:ad:91:a6:af:08:50:2e:
09:49:43:34:0f:bc:04:27:8d:1f:71:8a:cb:3c:b6:e8:f6:e7:
a1:40:d9:df:7a:e3:8a:ea:58:c1:96:0d:8b:ba:00:3b:6f:26:
f7:8a:e9:50:28:54:f1:69:c2:bb:46:8d:e2:e5:1c:19:5f:f1:
f4:31:16:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:03 2026 by rpki-client