
$ rpki-client -vvf repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft
File: 7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft (raw, json)
Hash identifier: +85tWMELQDK1onz5FiN6bY8LvsvMiEQUhk8IkoV3ChU=
Subject key identifier: 9E:7A:CF:A3:35:22:04:A0:9E:93:17:3F:CE:B3:9C:2F:A1:BC:FF:E3
Authority key identifier: 7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E
Certificate issuer: /CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E
Certificate serial: 520A9EFC8D0120C7529F689E2B8CE4D8776E6A8D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft
Manifest number: 0113
Signing time: Sun 01 Mar 2026 21:31:39 +0000
Manifest this update: Sun 01 Mar 2026 21:26:39 +0000
Manifest next update: Thu 05 Mar 2026 01:26:39 +0000
Files and hashes: 1: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: 3IUGvQHYckh9j4psQSuGBFM7lfhV4EtYEKWC7HzE4TE=)
2: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: VWW2OjO2Nb0Oyhr5Vqe+VmM1lOl8RPUO1FTuyvBrHBg=)
3: 7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl (hash: 7RllYaGMt8Hfwtn3YSHTRH7H72ru/kiJ7m9NFqVSEEk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl
rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 01:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:0a:9e:fc:8d:01:20:c7:52:9f:68:9e:2b:8c:e4:d8:77:6e:6a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E
Validity
Not Before: Mar 1 21:26:39 2026 GMT
Not After : Mar 5 01:26:39 2026 GMT
Subject: CN=9E7ACFA3352204A09E93173FCEB39C2FA1BCFFE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0b:06:f6:10:65:a1:5f:80:01:6d:49:fb:ac:
94:c9:18:69:fa:32:b5:d0:41:40:ad:5e:62:7a:34:
63:e1:5c:23:8d:4b:5b:32:6d:e0:18:37:26:d9:20:
2d:e4:b0:ce:03:5f:6c:2e:8f:8d:43:00:5d:1d:62:
b6:24:7a:b2:53:2d:52:7f:77:08:3e:7a:b3:f3:b0:
c0:a2:67:fe:40:06:7d:13:39:b0:d2:4c:93:af:1d:
4e:40:29:53:66:93:f5:45:3b:a0:b7:d8:ba:d7:9f:
72:77:20:b2:74:59:4f:e9:76:b9:ac:e0:c7:e4:4f:
99:e3:92:9e:e0:35:75:da:d7:08:33:9f:3d:d0:db:
85:61:21:5b:d5:75:8d:c9:9a:fd:c5:3d:87:8d:e7:
d0:b2:91:69:e4:66:5d:81:d9:93:de:b8:e5:cd:a6:
50:0b:f8:12:a4:27:87:f8:c1:5e:ea:b3:a9:f3:b3:
1c:a7:db:66:08:c1:3f:8c:de:82:89:28:f9:ad:42:
f7:c4:37:ea:14:4e:d4:e5:ad:d4:7f:2c:f1:8a:4b:
1a:5e:05:7f:33:d5:02:9e:e6:e8:9a:5f:9e:0c:55:
b4:58:3d:bc:b5:b8:18:a7:a5:19:8e:d0:4c:79:9e:
f6:6b:35:80:9f:a6:7f:7e:ba:8c:e7:f2:5c:d7:51:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7A:CF:A3:35:22:04:A0:9E:93:17:3F:CE:B3:9C:2F:A1:BC:FF:E3
X509v3 Authority Key Identifier:
keyid:7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cf:09:02:22:53:2e:76:11:54:d9:b3:7e:74:c3:93:aa:58:
aa:ae:b9:30:c1:7b:f5:9b:89:fc:e5:c1:20:36:50:3e:2e:66:
1f:02:56:d3:87:37:a1:cb:ea:5b:e7:f2:12:55:3f:39:48:8c:
dc:d5:86:4a:57:1c:0a:77:8d:22:9c:5a:0c:9d:ae:c7:3e:b0:
36:c1:2d:b6:6c:e4:d1:1f:59:cb:6a:f6:a7:74:4c:51:8c:66:
42:48:ac:da:6a:f9:1f:93:0e:d4:bf:4c:13:e7:e1:b0:d9:75:
7b:eb:c3:24:49:53:6f:a3:f0:8f:4f:17:c1:d0:45:3d:10:ec:
43:ba:6e:7e:d2:39:7e:4d:a3:b0:34:92:ae:98:1d:78:43:2e:
ca:32:88:af:64:68:33:83:6a:79:c5:f0:c4:3a:59:f5:55:dd:
a1:e2:e5:21:ec:72:ad:28:e3:90:13:38:04:f6:4d:61:15:58:
1b:75:de:93:9b:42:09:dc:ce:7f:98:bb:50:d6:46:32:71:38:
63:73:96:77:58:a8:d9:fa:4b:e0:85:72:9e:55:be:e1:c3:07:
a8:c8:c9:c0:fe:e3:18:6f:68:4c:fe:54:e9:18:66:37:71:63:
f0:4e:e1:0b:1a:ef:a5:e7:ce:d5:83:8e:7b:31:66:7d:03:b2:
21:e4:60:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:29 2026 by rpki-client