
$ rpki-client -vvf repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft
File: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft (raw, json)
Hash identifier: SY1nd9jdI6dVTMuV3FVPbH2hKqYhdPhkMhdx/rel1pw=
Subject key identifier: C6:35:93:9D:01:C7:9D:84:E0:F8:70:C2:AB:E2:D0:E7:44:41:CA:65
Authority key identifier: E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5
Certificate issuer: /CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5
Certificate serial: 17BD1E6DB54FB528105F487E409F111197635E67
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft
Manifest number: 0136
Signing time: Sun 01 Mar 2026 18:42:15 +0000
Manifest this update: Sun 01 Mar 2026 18:37:15 +0000
Manifest next update: Thu 05 Mar 2026 01:12:15 +0000
Files and hashes: 1: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl (hash: sAUl2r+SBc/OsZLjH0Vqcw3WI25EJwm8M2ST11r213k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl
rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 01:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:bd:1e:6d:b5:4f:b5:28:10:5f:48:7e:40:9f:11:11:97:63:5e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5
Validity
Not Before: Mar 1 18:37:15 2026 GMT
Not After : Mar 5 01:12:15 2026 GMT
Subject: CN=C635939D01C79D84E0F870C2ABE2D0E74441CA65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:89:84:aa:32:d2:a5:19:25:86:ba:c1:1a:
05:f1:2e:50:1b:d8:1d:56:3c:7a:ae:f2:6e:ac:cf:
ec:0a:7c:b3:5d:b6:a0:c8:c0:61:e9:f1:0b:1a:94:
d1:4a:f3:8a:1e:ab:fd:96:7d:94:c6:d3:b6:29:95:
a2:63:ab:d8:35:48:9d:21:57:85:c0:6e:1c:bc:43:
15:cb:08:97:de:14:3f:cc:d7:aa:c1:41:6d:f9:e1:
98:b7:f7:47:be:dc:0f:8f:4a:89:c0:3d:a4:2b:5e:
8e:50:61:c9:99:24:9d:b6:dc:32:64:b4:fb:25:ac:
54:1f:e0:23:fd:3f:6a:68:71:c8:80:24:52:3b:ba:
16:dd:6d:1f:c8:f9:1b:a9:c8:e3:2c:55:bb:73:d4:
13:dd:05:59:b6:56:ce:36:e3:53:47:09:01:42:68:
dc:e4:77:64:ab:3a:92:61:1b:34:fb:7f:84:72:fe:
28:52:24:c6:fb:04:69:f5:01:1b:13:a0:69:b3:97:
e6:02:4c:85:9c:6e:a2:18:c1:44:8f:89:dd:46:ef:
3e:0d:13:03:80:55:d4:af:f2:6a:8e:b6:6a:7f:54:
4c:5a:67:5e:3c:25:9d:fe:97:b0:a7:a3:3f:7b:03:
ec:e5:8d:89:ef:d2:20:ca:7c:fb:3f:88:9b:9b:2d:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:35:93:9D:01:C7:9D:84:E0:F8:70:C2:AB:E2:D0:E7:44:41:CA:65
X509v3 Authority Key Identifier:
keyid:E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:10:fa:a0:cd:9d:22:64:bb:f2:a7:8a:3f:ac:2d:74:fa:f7:
81:f8:ab:fa:d1:b7:d5:8e:58:1b:9c:27:dd:da:a9:59:38:11:
83:f7:e3:83:62:54:9d:5b:ca:38:6c:57:7b:f7:3b:d5:f0:aa:
ad:12:e2:6b:1c:dd:69:b6:b5:d9:fe:ca:6f:54:f5:1d:f2:b4:
fa:90:35:54:cb:bc:ab:90:10:32:4b:42:38:bc:86:e3:c2:7e:
dc:24:e5:45:48:b4:53:9a:be:22:d3:8c:a4:ea:f4:75:bd:68:
9c:f6:af:32:db:6d:1e:96:57:88:46:ef:d3:db:08:c3:b1:50:
67:b0:28:85:30:80:0c:c6:2c:e3:0b:30:c4:c6:e7:ab:38:2f:
38:e5:05:a7:2c:e0:59:06:6c:fc:43:58:67:91:77:c8:cf:c7:
3e:2d:c1:ad:a4:2f:9a:5c:fa:b8:43:9b:71:66:52:ea:93:a2:
17:d7:88:94:38:ae:7b:81:7a:eb:fa:3e:4d:fc:ad:20:51:ea:
75:c5:3c:a7:91:43:99:f8:c0:b3:36:02:c0:28:b7:67:b6:a7:
eb:67:15:60:63:7a:88:78:11:8c:39:3e:86:1c:07:74:5c:a5:
c6:36:7c:89:b7:14:0d:32:65:00:c2:d3:13:84:19:e1:de:46:
9c:cd:23:40
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUF70ebbVPtSgQX0h+QJ8REZdjXmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4
QzZFNjVBNTAeFw0yNjAzMDExODM3MTVaFw0yNjAzMDUwMTEyMTVaMDMxMTAvBgNV
BAMTKEM2MzU5MzlEMDFDNzlEODRFMEY4NzBDMkFCRTJEMEU3NDQ0MUNBNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIxYmEqjLSpRklhrrBGgXxLlAb
2B1WPHqu8m6sz+wKfLNdtqDIwGHp8QsalNFK84oeq/2WfZTG07YplaJjq9g1SJ0h
V4XAbhy8QxXLCJfeFD/M16rBQW354Zi390e+3A+PSonAPaQrXo5QYcmZJJ223DJk
tPslrFQf4CP9P2pocciAJFI7uhbdbR/I+RupyOMsVbtz1BPdBVm2Vs4241NHCQFC
aNzkd2SrOpJhGzT7f4Ry/ihSJMb7BGn1ARsToGmzl+YCTIWcbqIYwUSPid1G7z4N
EwOAVdSv8mqOtmp/VExaZ148JZ3+l7Cnoz97A+zljYnv0iDKfPs/iJubLQc5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxjWTnQHHnYTg+HDCq+LQ50RBymUwHwYDVR0j
BBgwFoAU4UHtC48bg6usmLjbdYwlGIxuZaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MzFlNjkzYy0yZmQ3LTRmNGMtYWY2My1mZWU2OTA3NmUwZDEvMC9FMTQxRUQwQjhG
MUI4M0FCQUM5OEI4REI3NThDMjUxODhDNkU2NUE1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4QzZF
NjVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm
NjMtZmVlNjkwNzZlMGQxLzAvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1
MTg4QzZFNjVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHsQ+qDNnSJku/Knij+sLXT694H4q/rRt9WO
WBucJ93aqVk4EYP344NiVJ1byjhsV3v3O9Xwqq0S4msc3Wm2tdn+ym9U9R3ytPqQ
NVTLvKuQEDJLQji8huPCftwk5UVItFOaviLTjKTq9HW9aJz2rzLbbR6WV4hG79Pb
CMOxUGewKIUwgAzGLOMLMMTG56s4LzjlBacs4FkGbPxDWGeRd8jPxz4twa2kL5pc
+rhDm3FmUuqTohfXiJQ4rnuBeuv6Pk38rSBR6nXFPKeRQ5n4wLM2AsAot2e2p+tn
FWBjeoh4EYw5PoYcB3RcpcY2fIm3FA0yZQDC0xOEGeHeRpzNI0A=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:06 2026 by rpki-client