
$ rpki-client -vvf repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft
File: A777F080277567701C7EF464D9A7351ADB0B538E.mft (raw, json)
Hash identifier: iyayMY+6RzmVSEWfDQPPa8gEwCqzi2aeszMfkGkubu4=
Subject key identifier: 4D:5C:F5:3B:B2:8A:A0:AD:83:C0:6F:6E:74:C8:28:0D:29:AB:58:D5
Authority key identifier: A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E
Certificate issuer: /CN=A777F080277567701C7EF464D9A7351ADB0B538E
Certificate serial: 6054E2C47A1CC3D42AA2D6C8C1F06BFAD264FCB2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft
Manifest number: 01AE
Signing time: Sun 01 Mar 2026 13:31:32 +0000
Manifest this update: Sun 01 Mar 2026 13:26:32 +0000
Manifest next update: Wed 04 Mar 2026 18:02:32 +0000
Files and hashes: 1: A777F080277567701C7EF464D9A7351ADB0B538E.crl (hash: /xQ9M7ZDtetQGdDbYScpSbhMYZuZCktJUlXXFin6hIo=)
2: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: JBW3MNYcLkvyzbMzPH1digOsTzRoTjkVj2ZYm/AplQ8=)
3: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: nww0OvBV7eoF7ccGlEcWlOh6cTNl+JMulSg7kpc2Jzg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl
rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 18:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:54:e2:c4:7a:1c:c3:d4:2a:a2:d6:c8:c1:f0:6b:fa:d2:64:fc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A777F080277567701C7EF464D9A7351ADB0B538E
Validity
Not Before: Mar 1 13:26:32 2026 GMT
Not After : Mar 4 18:02:32 2026 GMT
Subject: CN=4D5CF53BB28AA0AD83C06F6E74C8280D29AB58D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:6f:9d:75:6e:a6:33:db:18:a7:b4:1d:3e:
ad:58:e3:80:f9:9c:0f:95:f6:51:9b:b7:6a:bc:83:
68:51:e4:15:b7:52:79:01:fb:50:7a:e0:96:42:be:
07:35:42:d6:5b:a9:ab:09:79:6e:72:db:49:9d:d0:
22:10:93:1e:66:16:3c:99:ad:74:44:50:17:4f:8a:
57:be:bb:5b:fc:cb:36:ee:ae:44:5f:c4:45:3b:de:
8f:c3:26:b3:78:52:08:89:46:cb:81:44:94:91:89:
9f:50:e0:89:cd:75:f4:69:b2:ee:46:0f:a8:2e:c3:
87:13:b5:c1:29:2d:e7:81:76:6e:10:be:23:7c:44:
d0:19:78:aa:e5:5c:6e:ae:60:b5:36:26:92:1b:9a:
27:a0:4b:4f:c3:fd:f7:ca:3c:fd:9f:cf:c5:2e:92:
0f:e7:c4:59:a2:c4:1d:65:51:cc:06:d4:2b:20:c8:
5c:33:b7:3e:0b:7a:a3:9c:3a:53:22:f1:e8:31:d4:
94:35:81:62:3d:b2:ae:40:85:fb:65:02:ee:00:b3:
2e:8f:60:01:15:d3:b2:1f:a4:8b:1c:5d:73:19:71:
7b:d5:2c:bf:7d:ff:ce:6d:d0:8c:a0:66:76:d2:e0:
ed:ed:b1:9c:01:06:15:c2:19:9c:54:12:fe:99:82:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5C:F5:3B:B2:8A:A0:AD:83:C0:6F:6E:74:C8:28:0D:29:AB:58:D5
X509v3 Authority Key Identifier:
keyid:A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:83:41:13:bf:12:e1:12:3c:14:8b:b5:9a:6e:a7:e6:83:71:
37:a7:93:4f:66:20:b8:1f:43:06:d1:ec:9a:cc:75:9b:2d:93:
fe:d7:22:d3:35:ae:4c:55:57:03:95:65:c3:7e:3a:51:bb:76:
09:3d:7e:93:65:f9:e2:9b:5c:00:8a:19:33:2e:54:59:66:ae:
69:0e:e0:f0:d6:24:a3:84:e4:cd:f3:66:93:4c:32:71:b4:0f:
09:80:fc:47:98:b5:50:b4:b8:0d:5f:7c:39:19:05:48:d3:05:
e7:68:bc:7f:d6:64:45:d6:16:0e:56:fd:af:4d:45:88:e2:9a:
68:bd:be:c5:ec:52:b6:86:76:51:4c:24:ea:2e:23:11:d0:4d:
ee:82:bf:1f:09:1a:c2:8d:59:f9:49:0c:7b:74:62:53:d9:b9:
b8:70:4f:25:ad:af:69:ba:dd:01:f0:dd:f2:ef:f7:f4:93:bd:
23:96:db:aa:cd:cf:23:7b:35:64:50:7a:5e:f8:a1:c2:c0:3d:
46:ae:68:47:22:fe:ec:5d:0d:ad:28:53:79:0a:e8:0b:f5:78:
ea:a0:87:ca:d5:50:8d:1f:6a:49:c3:bc:dc:0a:d5:75:f1:3e:
d2:c0:ac:ac:21:0f:ff:8d:08:b6:01:a3:91:95:b9:0a:fd:d2:
18:ea:4c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:50 2026 by rpki-client