
$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft
File: C79C17C4F5C843791A7028B499932A84B65CD399.mft (raw, json)
Hash identifier: PPALNnKMJkEkspYBYhNPmDHzR/RvBjPfoKsTNr6DbCM=
Subject key identifier: 66:B6:1A:74:C1:B7:A3:9F:8C:59:69:E7:0F:64:56:09:4D:11:A1:CF
Authority key identifier: C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99
Certificate issuer: /CN=C79C17C4F5C843791A7028B499932A84B65CD399
Certificate serial: 4E5B75577AE505D29FDDDE73676D74748CEEE0B4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft
Manifest number: 0111
Signing time: Sun 01 Mar 2026 23:31:31 +0000
Manifest this update: Sun 01 Mar 2026 23:26:31 +0000
Manifest next update: Thu 05 Mar 2026 02:34:31 +0000
Files and hashes: 1: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: xoAFKq/o5an6vKaY7+FEI8eF7uN0DJPTXe0V7TuXoIk=)
2: C79C17C4F5C843791A7028B499932A84B65CD399.crl (hash: zVJDUOWt+WshKcMWe3igVDtSc3LD/BBIuwDMzndSW5k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl
rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:34:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:5b:75:57:7a:e5:05:d2:9f:dd:de:73:67:6d:74:74:8c:ee:e0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C79C17C4F5C843791A7028B499932A84B65CD399
Validity
Not Before: Mar 1 23:26:31 2026 GMT
Not After : Mar 5 02:34:31 2026 GMT
Subject: CN=66B61A74C1B7A39F8C5969E70F6456094D11A1CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:73:38:1f:28:db:cc:6e:ec:85:7c:af:18:
8e:f1:d4:1b:50:2a:f5:ba:11:ce:cd:e2:9f:40:c2:
ca:00:b1:0a:6e:59:b1:78:67:fb:66:cf:da:43:b5:
20:7a:c0:40:c3:17:ee:dd:d7:2c:ed:58:39:6f:df:
27:1c:55:a0:fb:06:dd:86:f0:b7:0e:ef:1c:ff:71:
bf:a2:f5:dc:06:98:54:3c:2b:01:e3:73:93:7b:ca:
59:23:4f:67:6c:62:49:94:d4:f5:6f:06:ca:1f:6f:
24:e6:ad:37:6e:a5:68:d0:e7:8b:19:32:ce:37:cb:
29:7f:b1:2a:dc:c1:5e:0f:08:04:49:f2:9b:4c:7b:
3e:06:da:d1:73:76:ab:b4:eb:00:43:29:70:f2:17:
ad:aa:ab:81:20:62:0d:1e:49:f6:7b:55:1d:91:b1:
75:f5:db:26:82:8c:8c:2b:6a:19:eb:11:ea:9b:bc:
00:9d:b9:f0:f0:63:e2:d3:2f:b9:6d:93:1c:af:5e:
43:ed:44:23:45:a1:90:ef:0e:fe:eb:c4:a8:69:83:
96:93:bc:b2:ad:f0:ae:b6:42:db:46:d0:f6:9f:7c:
a9:73:c3:de:f9:c2:4a:1e:05:5a:04:5d:63:2d:99:
21:da:e4:d4:bb:99:63:a7:e5:b6:b7:f2:d9:7b:cf:
51:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B6:1A:74:C1:B7:A3:9F:8C:59:69:E7:0F:64:56:09:4D:11:A1:CF
X509v3 Authority Key Identifier:
keyid:C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:92:98:1d:f3:a3:14:fc:6e:2c:73:63:12:68:1a:bf:9f:2a:
17:18:45:21:31:a3:8f:0b:37:83:64:22:f0:ae:52:87:74:5b:
c0:77:ea:21:1b:68:26:fc:b3:da:94:64:e6:ff:8c:cb:bc:9b:
a4:30:a2:0c:96:35:68:5a:0a:6d:cc:4e:90:e3:b1:16:fa:8d:
48:59:ad:9f:58:35:c7:21:68:42:6f:d2:ee:b2:9d:de:12:41:
76:fd:f9:04:25:f3:53:04:2a:48:7a:3f:e9:2e:a6:74:d7:74:
65:bb:40:a8:10:42:44:4e:5a:6b:84:04:35:21:00:32:e0:74:
f4:ed:66:25:79:12:30:3a:4b:54:93:97:b8:8f:ff:f3:cc:f1:
60:da:fc:d1:64:f5:26:11:b5:f0:2a:2d:40:67:f1:02:f3:77:
f4:c7:2a:c2:f7:e7:d4:c6:98:dc:9d:16:3d:76:bd:de:b2:b3:
f3:2e:93:08:94:2f:74:0f:30:e8:c1:d6:36:92:69:7c:b1:c7:
81:29:be:ee:51:df:5d:24:20:51:d3:00:9c:6e:97:c3:3b:58:
e5:a2:a8:fa:c6:66:32:30:a7:f6:5c:44:1f:b9:c1:79:a8:dc:
cd:8a:0d:9d:8d:d9:4d:f8:cc:c9:1c:c5:32:0a:28:b4:89:0f:
9e:41:f6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:07 2026 by rpki-client