
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
File: 1952B074D19D5AB562D7EE537AD3059EA097353B.mft (raw, json)
Hash identifier: 9l2LYnI2icszDuxrA786P+K74OCzZBbOXVjrRxyZ50I=
Subject key identifier: AA:26:EF:F2:68:EC:7E:83:18:1F:84:6D:DC:01:57:02:7E:FF:37:26
Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
Certificate issuer: /CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Certificate serial: 741700D9106A3AAC30FE0EBE010591D66C1C8045
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
Manifest number: 0252
Signing time: Sun 01 Mar 2026 23:11:46 +0000
Manifest this update: Sun 01 Mar 2026 23:06:46 +0000
Manifest next update: Thu 05 Mar 2026 00:47:46 +0000
Files and hashes: 1: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (hash: ykRWiMSaAsP4Z39Whyu3kvlehUT+9RaQnqBPMyF4FR0=)
2: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (hash: EFHYC7XhG7MQGG+p71C9PeqM87F/0AnjgXarEbD+y4E=)
3: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: 83g1exgFqaTQKU38X1D6x0BtWT5D2KATwMghhQSp0Hg=)
4: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (hash: AS7ErBWYOh3ltpqaacXCmV2CVPom+cE/4rFVdqtAK+c=)
5: 1952B074D19D5AB562D7EE537AD3059EA097353B.crl (hash: ZhVH4S7ghhg3LPFwgCepix9bR4oe9bgmhha3gg0Yp9o=)
6: 323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa (hash: mPh7GdsHOCij5+t8LRe0pT3jX8ibPd0uc3fcqsjEKco=)
7: 323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa (hash: Ty7LXGWFu77417YzD9LySsWN2AIJ4KwCcp3kNzWJAIM=)
8: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (hash: sJCm2ee/pkpEqZ3CTb0n1XRlqsVPP4kAsamQV7lnrGA=)
9: 323430363a616563303a623a3a2f34382d3438203d3e20313431363735.roa (hash: D0b7YQ9CGnuoR/guzqV8sUGQy2lE5KoINh6LVHdhIG8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl
rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 00:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:17:00:d9:10:6a:3a:ac:30:fe:0e:be:01:05:91:d6:6c:1c:80:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Validity
Not Before: Mar 1 23:06:46 2026 GMT
Not After : Mar 5 00:47:46 2026 GMT
Subject: CN=AA26EFF268EC7E83181F846DDC0157027EFF3726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cc:28:c0:78:ac:44:41:ec:8d:ec:dc:80:b2:
d5:48:b2:50:91:9f:71:0d:98:d0:15:08:13:4f:d5:
5a:af:60:2f:f1:50:09:43:e2:27:3b:a7:cb:82:4c:
cf:78:77:7a:e1:b2:c3:83:b4:8e:75:40:37:40:78:
25:13:9f:4a:c6:4f:db:1f:be:5b:ad:c1:4d:8f:97:
44:48:d5:43:74:0c:2d:7a:c2:2c:f0:29:86:dc:61:
93:85:2d:10:06:3a:44:15:c1:80:80:d3:2e:70:4f:
54:32:1b:a8:7a:fd:30:09:d7:8f:34:b3:3b:da:57:
e5:d4:17:ad:8b:1d:27:ed:0e:3f:c0:aa:cb:1f:70:
08:ca:cf:20:f5:b6:a1:8c:2b:2a:a1:c4:92:9a:56:
aa:4d:ae:7b:7a:b0:19:43:48:82:8e:02:a3:95:34:
7a:bf:67:84:92:c2:13:f1:73:49:20:97:c6:79:cf:
32:bf:14:1f:12:de:ce:66:1f:c0:b3:49:ea:c7:6c:
67:68:f0:27:d0:02:ae:f4:0f:d9:db:5e:17:b9:7f:
69:d2:95:37:0a:af:f6:f0:ce:3c:6d:d7:4f:d0:b4:
11:b9:c4:4d:93:c7:19:2f:c6:fa:93:d9:15:a1:f3:
5b:6d:46:73:2a:ac:36:57:3b:dd:a9:06:70:69:6d:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:26:EF:F2:68:EC:7E:83:18:1F:84:6D:DC:01:57:02:7E:FF:37:26
X509v3 Authority Key Identifier:
keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c2:11:7b:4a:c6:26:15:e1:20:c1:f0:0f:ea:ee:8b:b9:df:
d2:b7:32:0b:98:28:3e:c0:fe:6c:4c:e5:bd:18:17:20:3b:00:
9b:cd:b6:ce:ae:57:6a:6d:d8:d2:50:a8:04:83:87:1e:32:cf:
ad:b7:71:dc:f9:30:65:da:2c:b5:df:5d:c7:a8:7b:c9:f0:a2:
79:05:ec:91:e8:51:61:26:c5:8d:d3:3e:18:fa:b3:5b:00:92:
5b:28:20:58:da:14:47:62:d3:77:a5:3f:07:ab:dc:af:df:f7:
3b:55:d3:f5:d9:d2:ff:98:2d:ae:9d:48:54:75:8e:4f:e2:22:
5b:fb:dc:d5:35:94:b4:9c:e3:89:7b:93:52:3d:25:6f:61:db:
59:5e:9e:88:ce:25:1f:2f:8b:f2:b4:b9:5d:b7:83:0d:28:a1:
d7:1e:fc:ba:71:05:66:9b:ad:8c:b9:d5:7b:e7:c3:d7:0c:77:
6e:00:3e:ad:48:71:15:8e:f7:df:97:ed:77:a3:14:24:28:87:
ad:95:55:ba:db:bc:cc:70:a0:64:61:aa:ae:4c:4d:64:e8:46:
69:a2:ad:b6:1f:76:a1:fc:8e:e5:f9:dc:2b:4d:5b:a3:2e:4a:
29:31:f1:b3:72:8a:05:39:d0:6e:07:fc:31:3b:a8:19:22:90:
b5:c2:54:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:45 2026 by rpki-client