
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft
File: 7B04CE58A1370241E93EF01F597DD18A039D613D.mft (raw, json)
Hash identifier: QUD8o1ASwLzb3ZzYARtb1fRo302zQQfMLahBmS/LBiM=
Subject key identifier: 33:D1:BA:2C:F4:29:DA:2E:CA:AE:47:14:B7:FA:93:A0:87:AE:40:DC
Authority key identifier: 7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D
Certificate issuer: /CN=7B04CE58A1370241E93EF01F597DD18A039D613D
Certificate serial: 7819A193B1E3D75E4A20E892D2098FECD9E3934C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft
Manifest number: 01E2
Signing time: Sun 01 Mar 2026 09:30:41 +0000
Manifest this update: Sun 01 Mar 2026 09:25:41 +0000
Manifest next update: Wed 04 Mar 2026 11:50:41 +0000
Files and hashes: 1: 3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa (hash: zomwNLCe0VyAqDz92tIZrE0AVW1Hd75UHhQ0Qjvp8io=)
2: 3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa (hash: BVsk6AHIvUUfWZ+4++VqM/4m6oLrmg+QHEXYFO+Hiks=)
3: 7B04CE58A1370241E93EF01F597DD18A039D613D.crl (hash: IRgFFnwtg6rC/vf8k0IWc+mQ4OJnTzeMbI8fA5TEz6c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl
rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 11:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:19:a1:93:b1:e3:d7:5e:4a:20:e8:92:d2:09:8f:ec:d9:e3:93:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B04CE58A1370241E93EF01F597DD18A039D613D
Validity
Not Before: Mar 1 09:25:41 2026 GMT
Not After : Mar 4 11:50:41 2026 GMT
Subject: CN=33D1BA2CF429DA2ECAAE4714B7FA93A087AE40DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:84:06:b4:0d:17:92:c1:3d:03:75:3b:6c:
d9:5d:bf:8c:f2:be:8e:bf:13:9e:c3:86:41:1e:83:
65:06:d8:c9:5c:7a:7d:8a:e7:cd:26:c3:62:29:76:
1c:18:10:f5:28:87:97:3b:a3:d8:95:6e:e3:a2:97:
da:d1:83:26:74:b2:b2:54:08:c1:fa:fb:3c:cf:0a:
ca:af:f2:77:d0:39:08:6a:79:23:10:48:a9:87:df:
f4:89:45:56:6a:d3:16:c7:74:11:4e:0d:82:ab:b8:
db:10:d1:61:cd:ca:be:c4:99:eb:ec:51:08:c7:f8:
75:79:aa:5c:85:8a:6e:d7:31:75:f4:a9:21:f2:64:
13:10:89:b1:1d:35:6a:d6:f5:c6:cf:2f:32:8a:91:
d6:fe:83:b0:3a:96:12:e4:64:97:a9:e2:6a:03:c7:
09:bf:15:87:33:28:08:0c:60:d3:ac:c3:5e:4d:0d:
5b:b2:46:0d:84:47:09:97:73:7a:39:6f:61:c2:24:
38:f7:7d:d3:10:32:b9:3c:b8:51:e3:52:82:63:fe:
84:e0:0e:68:29:1b:4d:e0:65:8b:7e:c2:50:3a:19:
70:1b:17:6a:94:6c:91:e1:8e:62:4e:c5:c7:fa:fa:
f3:04:f3:b2:97:85:4d:49:98:fa:ef:11:6c:e6:f6:
6f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D1:BA:2C:F4:29:DA:2E:CA:AE:47:14:B7:FA:93:A0:87:AE:40:DC
X509v3 Authority Key Identifier:
keyid:7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ec:c1:e2:15:a0:28:0b:b3:26:68:73:89:96:a6:d6:21:02:
ad:3a:62:71:83:38:52:2d:95:db:8f:e5:e0:dc:30:e8:29:5a:
15:d8:a5:04:2d:26:1b:fd:de:36:b0:5a:c3:63:b7:ac:9c:b0:
cf:00:77:62:1e:1b:4d:e3:e1:64:31:80:63:62:c2:b2:c2:f1:
60:96:a3:55:49:55:40:54:ef:31:5c:75:75:76:d9:12:6e:13:
81:21:44:ee:d9:57:f6:cb:9e:7d:3f:2e:22:c7:da:b7:0f:b6:
e2:02:9d:53:f1:1b:aa:30:3b:bd:d7:5d:91:38:fe:3e:aa:99:
b0:11:87:e4:af:4c:5b:02:7f:1c:04:24:e2:6e:c5:91:62:86:
93:53:dc:a8:78:dd:1e:fb:00:12:cc:1e:6e:9b:39:69:75:50:
c1:40:78:42:8b:68:d1:66:2c:9f:bd:fc:6d:5b:6b:7a:f2:55:
cd:6e:96:19:9e:b7:a4:42:39:cb:99:f3:f7:41:e0:0c:17:f0:
0c:c2:43:39:b1:08:9e:62:53:ca:09:14:06:5d:0b:c1:f4:e9:
f3:32:c6:e1:8e:18:23:a2:63:6e:97:d9:5c:d9:33:ea:19:12:
6c:83:2f:54:cd:1d:bb:2a:4f:4c:b5:70:ad:17:68:f6:f9:37:
af:2a:0d:5c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeBmhk7Hj115KIOiS0gmP7Nnjk0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQxOEEw
MzlENjEzRDAeFw0yNjAzMDEwOTI1NDFaFw0yNjAzMDQxMTUwNDFaMDMxMTAvBgNV
BAMTKDMzRDFCQTJDRjQyOURBMkVDQUFFNDcxNEI3RkE5M0EwODdBRTQwREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKYQGtA0XksE9A3U7bNldv4zy
vo6/E57DhkEeg2UG2Mlcen2K580mw2IpdhwYEPUoh5c7o9iVbuOil9rRgyZ0srJU
CMH6+zzPCsqv8nfQOQhqeSMQSKmH3/SJRVZq0xbHdBFODYKruNsQ0WHNyr7Emevs
UQjH+HV5qlyFim7XMXX0qSHyZBMQibEdNWrW9cbPLzKKkdb+g7A6lhLkZJep4moD
xwm/FYczKAgMYNOsw15NDVuyRg2ERwmXc3o5b2HCJDj3fdMQMrk8uFHjUoJj/oTg
DmgpG03gZYt+wlA6GXAbF2qUbJHhjmJOxcf6+vME87KXhU1JmPrvEWzm9m/1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUM9G6LPQp2i7KrkcUt/qToIeuQNwwHwYDVR0j
BBgwFoAUewTOWKE3AkHpPvAfWX3RigOdYT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ODQ2M2FkNS0xNzQ1LTQ0M2UtYjE2NS1kMTk0ZWVkODllNmIvMC83QjA0Q0U1OEEx
MzcwMjQxRTkzRUYwMUY1OTdERDE4QTAzOUQ2MTNELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQxOEEwMzlE
NjEzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg0NjNhZDUtMTc0NS00NDNlLWIx
NjUtZDE5NGVlZDg5ZTZiLzAvN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQx
OEEwMzlENjEzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB7sweIVoCgLsyZoc4mWptYhAq06YnGDOFIt
lduP5eDcMOgpWhXYpQQtJhv93jawWsNjt6ycsM8Ad2IeG03j4WQxgGNiwrLC8WCW
o1VJVUBU7zFcdXV22RJuE4EhRO7ZV/bLnn0/LiLH2rcPtuICnVPxG6owO73XXZE4
/j6qmbARh+SvTFsCfxwEJOJuxZFihpNT3Kh43R77ABLMHm6bOWl1UMFAeEKLaNFm
LJ+9/G1ba3ryVc1ulhmet6RCOcuZ8/dB4AwX8AzCQzmxCJ5iU8oJFAZdC8H06fMy
xuGOGCOiY26X2VzZM+oZEmyDL1TNHbsqT0y1cK0XaPb5N68qDVw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:18:25 2026 by rpki-client