
$ rpki-client -vvf repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft
File: 575614534DD1047EA1BA290176D96470FCBA1ECA.mft (raw, json)
Hash identifier: hf66fo7YNK+dyV5BoWFtk7k/joRtkkJF0KJghFdJWCo=
Subject key identifier: F8:71:D3:7E:10:5C:F5:B9:81:72:7E:6D:75:8D:BE:A1:65:B9:68:63
Authority key identifier: 57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA
Certificate issuer: /CN=575614534DD1047EA1BA290176D96470FCBA1ECA
Certificate serial: 05085B726C678CBE07B30F2BE372EDBC9363137A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft
Manifest number: 0114
Signing time: Sat 28 Feb 2026 20:50:45 +0000
Manifest this update: Sat 28 Feb 2026 20:45:45 +0000
Manifest next update: Tue 03 Mar 2026 23:50:45 +0000
Files and hashes: 1: 575614534DD1047EA1BA290176D96470FCBA1ECA.crl (hash: 6SF7iUq2ym3XtC5jHPntM0SUKcml46UjEMBqTdRh7oE=)
2: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: s193StwN0Z9fOKLEn3xGZ1WwxkYPgh/jBrrzDTrFlDA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl
rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 23:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:08:5b:72:6c:67:8c:be:07:b3:0f:2b:e3:72:ed:bc:93:63:13:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575614534DD1047EA1BA290176D96470FCBA1ECA
Validity
Not Before: Feb 28 20:45:45 2026 GMT
Not After : Mar 3 23:50:45 2026 GMT
Subject: CN=F871D37E105CF5B981727E6D758DBEA165B96863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:36:cb:32:85:8d:8e:4c:6d:60:1f:d8:05:a9:
d0:48:bc:d0:1e:fd:98:d4:65:0f:b4:07:00:78:ba:
96:a0:fb:c0:c9:6f:31:cb:8f:0b:e7:e9:73:d7:92:
95:a0:2c:c2:59:30:b3:05:1a:a8:dd:40:c2:28:1e:
23:dc:9a:bf:92:6d:99:39:a0:37:35:9c:30:61:1f:
a3:26:6f:21:15:5e:a3:4e:be:9f:c0:be:00:42:a2:
57:35:fc:79:f9:df:0c:ee:2b:8b:ef:07:06:a7:27:
0f:87:63:b6:49:20:f3:86:d4:44:c5:4d:a1:c0:e2:
9e:51:84:0d:f5:df:7f:7d:2e:64:d1:75:cb:d8:f9:
2a:52:89:23:30:a5:6f:e8:d2:d3:62:83:82:38:d0:
91:f2:7c:eb:a6:85:c2:15:34:4e:b2:7f:8a:bb:55:
f2:44:00:fa:d9:42:03:9e:25:a8:08:55:2f:56:fa:
9a:91:58:72:00:6c:8a:22:4a:17:59:12:64:2a:01:
03:7d:c4:16:34:59:10:4b:a0:ab:70:2c:bf:42:34:
5c:38:90:c6:cb:af:b5:cd:30:f8:9e:2d:d4:6f:32:
d6:2a:fb:4b:a3:46:f1:de:c5:da:ce:09:8a:2b:af:
f2:17:0d:95:5f:ec:26:dc:cf:e7:db:ef:f0:9a:70:
e3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:71:D3:7E:10:5C:F5:B9:81:72:7E:6D:75:8D:BE:A1:65:B9:68:63
X509v3 Authority Key Identifier:
keyid:57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:23:2b:9f:21:ed:90:22:e0:2a:49:99:94:cf:34:74:13:f3:
b0:e3:43:a9:89:92:7f:83:b2:d8:a9:be:11:6f:f2:d9:ac:f0:
7e:6b:60:7b:56:b8:a0:fb:3e:86:f7:73:5c:d9:3d:33:b0:e2:
ae:6a:2b:11:0e:8c:d6:e4:a4:e6:a6:8b:2d:fa:e8:da:17:1b:
0c:91:0f:71:f8:fc:6a:48:e1:77:88:2e:bc:e4:d8:b8:87:f4:
13:ed:fc:0e:e6:34:2a:30:a0:f6:77:b1:49:b5:30:de:f0:a6:
a3:98:ae:f7:fa:ce:91:de:c2:1f:f4:9d:65:d8:7b:7f:fd:7a:
11:bb:b4:e8:c7:a1:60:26:f9:ec:bf:d4:ee:f0:c5:11:67:4a:
5e:7e:22:6c:78:21:ee:c9:a9:33:6f:89:7f:37:59:4f:cc:27:
a3:5b:f7:c2:c4:12:86:11:97:53:39:13:d3:b6:08:d5:09:8f:
d3:6f:9f:31:41:3b:7e:54:7d:27:a8:f2:ce:fd:f9:e8:00:20:
e6:4b:f8:ed:13:8b:4b:e4:1e:0d:1f:52:e3:61:31:12:7f:a6:
26:20:3b:4a:de:08:c3:a1:76:0b:49:96:bd:fd:6f:a2:78:0b:
ac:35:e3:b7:ec:92:66:4d:5c:20:01:87:ce:d4:dc:7b:47:64:
da:0a:d1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:05:37 2026 by rpki-client