
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft
File: 14A39FA5410EA57E0D416E032D769E52AB89CC75.mft (raw, json)
Hash identifier: /FLiAr0xtrKJDwhshkPSgMsNS4RCraet1FfLpDm5AaE=
Subject key identifier: 87:2B:00:5C:18:28:E1:60:78:90:5C:A8:31:60:8A:4E:B1:2A:93:A5
Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75
Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75
Certificate serial: 4DABFCD809986DF0AB902EAE5B8CB664C3DBDDF4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft
Manifest number: 0309
Signing time: Sun 01 Mar 2026 04:11:43 +0000
Manifest this update: Sun 01 Mar 2026 04:06:42 +0000
Manifest next update: Wed 04 Mar 2026 09:46:42 +0000
Files and hashes: 1: 3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (hash: dpkbleFDqkwX+EuMYZZpimYtRlL7Dy5gfGKwOre/oBA=)
2: 323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (hash: rNCEVC57YsG1pLsfroR7lL5bhtvNw6HpUyrSsSif6rU=)
3: 14A39FA5410EA57E0D416E032D769E52AB89CC75.crl (hash: Rs+oj+fI5fwQiHnGW/mZbQaWiE8X7Yiz3l5lBuYua/E=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl
rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 09:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ab:fc:d8:09:98:6d:f0:ab:90:2e:ae:5b:8c:b6:64:c3:db:dd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75
Validity
Not Before: Mar 1 04:06:42 2026 GMT
Not After : Mar 4 09:46:42 2026 GMT
Subject: CN=872B005C1828E16078905CA831608A4EB12A93A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e5:64:a4:1a:72:c9:f1:fb:6a:b0:8e:ba:93:
a0:7c:41:51:11:3f:de:19:a3:67:d6:c1:f7:04:fa:
ea:1d:6c:72:1c:97:ab:2c:f3:0f:a9:30:ef:37:ec:
9b:16:f3:f5:b6:98:8a:da:e0:fc:b9:6a:e1:3e:31:
c1:89:c5:22:ae:1a:e7:d2:6c:e9:2a:f0:ad:bb:dc:
3b:f6:1f:f4:2c:9c:8e:20:3e:6b:55:f0:5f:c2:1e:
0e:ab:e8:fd:7c:77:1c:8d:b7:0f:ca:12:57:b4:52:
7e:60:15:ad:dc:bc:16:02:b9:61:c0:9e:90:32:0d:
6a:c9:72:d9:83:80:ff:0c:ab:13:7a:dc:5b:61:ea:
68:17:37:5a:fd:2f:64:08:46:f6:ad:68:ce:80:71:
d5:5d:2d:21:e4:1c:dd:99:e2:0d:43:60:c3:a7:09:
d5:81:3b:86:d4:6e:98:ce:34:be:00:2b:44:76:02:
62:77:8f:72:eb:c6:55:b2:96:48:fb:21:15:a6:c4:
f2:02:12:bb:6c:e4:8f:6d:57:30:ef:46:e5:da:08:
cc:38:f5:96:1e:1f:42:af:ec:9b:40:a6:15:28:95:
7b:3a:87:6a:d5:f5:f6:ab:18:c3:8d:3b:b7:fe:7f:
be:e8:51:db:3e:10:45:05:01:e3:98:42:63:0d:16:
86:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2B:00:5C:18:28:E1:60:78:90:5C:A8:31:60:8A:4E:B1:2A:93:A5
X509v3 Authority Key Identifier:
keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7c:b7:36:6c:0d:82:8e:be:64:ff:9f:86:1e:20:17:e8:00:
1c:83:87:7e:30:3e:44:5c:48:59:74:a3:a7:97:eb:95:6a:86:
3d:dc:b6:6f:e1:21:5f:44:31:f9:0e:16:9c:78:c7:d9:c2:66:
96:6d:05:39:06:b7:c2:97:9a:6a:f5:80:a6:c5:6c:b4:44:cf:
6e:d7:c1:e6:ad:4c:c4:0d:7d:03:bb:19:5e:83:72:1b:53:6f:
10:d8:d0:10:62:19:ba:94:7c:bd:46:7e:28:e8:44:14:1c:98:
51:e3:36:05:99:ff:04:b0:24:19:81:d4:c4:2c:04:0d:c1:4e:
7b:93:51:42:f8:2d:b8:92:7c:e8:a7:8a:91:3e:7b:26:62:1a:
da:2d:7f:1e:21:a0:7e:13:70:0c:47:8d:f1:d9:fd:83:49:f8:
3d:f3:7d:57:d7:62:58:9c:3d:38:76:fc:58:d6:50:f8:ad:38:
87:e2:92:80:11:b8:f7:c5:3e:a4:04:10:35:4e:17:c7:30:49:
7a:df:3e:00:33:06:d9:fc:4a:3b:ca:43:7f:b2:5b:0b:f1:65:
0c:ef:7c:ee:74:e2:5c:a0:ba:53:a0:05:2d:89:22:57:cb:13:
c5:14:52:12:8b:c9:30:ba:f7:f9:4d:9a:7d:9c:d3:f0:bd:b1:
25:6f:04:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:25 2026 by rpki-client