
$ rpki-client -vvf repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
File: 11D0290B4630192458231FFEA93A463483E71D15.mft (raw, json)
Hash identifier: 6eu0YyWa4mBPypxlGeWBq3zfr+Bl51yHlFb93xF3BUc=
Subject key identifier: 9E:3E:1A:5B:64:C0:2E:94:91:EB:2B:16:30:DA:6F:72:D4:4A:DF:B4
Authority key identifier: 11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15
Certificate issuer: /CN=11D0290B4630192458231FFEA93A463483E71D15
Certificate serial: 5AE582BE89377B5B507A8D6165E5BD5CD881706E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
Manifest number: 01F8
Signing time: Mon 02 Mar 2026 10:02:19 +0000
Manifest this update: Mon 02 Mar 2026 09:57:19 +0000
Manifest next update: Thu 05 Mar 2026 11:58:19 +0000
Files and hashes: 1: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: u+vUasuo+Igy3NmWXga5XKWPQhhkbM5VIPkZA+eRxSc=)
2: 11D0290B4630192458231FFEA93A463483E71D15.crl (hash: u7jExYBWsxI8n2wWw+Pw2rn60L7N+evjpwa/ogqFlCU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl
rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e5:82:be:89:37:7b:5b:50:7a:8d:61:65:e5:bd:5c:d8:81:70:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11D0290B4630192458231FFEA93A463483E71D15
Validity
Not Before: Mar 2 09:57:19 2026 GMT
Not After : Mar 5 11:58:19 2026 GMT
Subject: CN=9E3E1A5B64C02E9491EB2B1630DA6F72D44ADFB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:4b:ce:67:20:09:eb:aa:5d:15:b2:10:70:
de:ce:62:bb:28:3b:5a:5e:67:90:0c:d8:a4:7e:f9:
10:a2:5e:f7:9c:41:2e:c2:1e:33:65:04:b2:87:4b:
25:bf:e7:1e:4e:6b:9c:69:47:3b:90:af:f3:8a:bf:
ef:d3:48:79:5f:09:a5:53:da:b9:7f:1a:1d:24:6c:
ca:4f:6e:43:63:6d:50:14:81:49:1e:4d:6c:27:74:
66:61:ea:ba:12:92:f9:bd:53:de:73:dc:c1:07:0d:
3d:89:1a:35:74:4e:67:59:13:3d:02:f1:0f:23:9e:
8d:24:f6:9d:a8:1b:3c:97:ff:9b:a5:73:65:84:9b:
94:8c:57:e5:e9:4f:f5:cb:bb:09:da:a7:64:f2:de:
99:57:20:c4:6e:d5:1f:fa:bb:48:e7:6f:f9:87:d9:
16:11:f3:de:96:c1:67:96:38:fb:5c:7b:3d:13:6a:
02:57:6e:5a:68:06:f8:2e:46:a1:72:29:03:de:57:
62:79:f7:54:5e:f4:48:e6:a5:57:df:e7:21:88:da:
a2:d8:6d:6e:87:9e:72:59:98:92:21:87:1a:cc:d2:
b9:79:27:6a:f9:e8:a3:98:de:87:d1:f6:d4:6f:82:
a6:0e:6c:06:ca:fa:66:ec:12:61:96:e2:2c:38:94:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3E:1A:5B:64:C0:2E:94:91:EB:2B:16:30:DA:6F:72:D4:4A:DF:B4
X509v3 Authority Key Identifier:
keyid:11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:97:c1:f2:47:4c:45:9f:e2:d6:c7:96:ae:a5:d3:f0:df:12:
f8:b4:b5:46:00:0a:32:b4:68:85:fa:d0:50:49:60:cd:1b:e1:
c3:14:a0:9a:0f:8d:39:fa:e0:35:88:fd:8c:46:a7:9f:b2:e6:
93:c6:6c:31:0e:b9:d8:3f:d4:a3:ed:2d:c6:39:9a:a9:be:34:
be:7b:8f:70:cb:c4:e2:77:ff:04:33:ab:1f:a7:4d:d1:4e:4a:
04:70:1a:6f:3a:fe:8e:26:f4:24:cc:c9:23:66:1e:25:6b:af:
9e:fc:55:6f:ed:2f:bf:e1:de:ab:cd:e3:c2:fa:70:d3:fc:ee:
54:95:0e:7c:32:cf:5b:91:ed:bd:28:b3:55:54:eb:2e:8f:6c:
4f:93:5d:a4:3f:10:df:4c:c2:38:ab:84:85:5d:1a:4c:e5:d4:
b1:0f:73:9a:99:d3:c1:fe:cb:57:43:24:01:07:10:c2:91:f9:
36:d7:34:90:41:77:6c:a5:8b:61:eb:47:35:1c:73:f6:ef:d5:
2d:24:02:57:29:02:34:20:14:80:21:de:57:76:c0:96:7f:3f:
a8:f2:b1:2f:87:c2:00:40:76:0f:6c:a1:76:06:8d:9b:23:4d:
0f:f4:87:28:e6:ca:18:be:16:f1:bc:69:da:7f:f2:03:5c:f2:
be:0c:ed:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:29 2026 by rpki-client