
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft
File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json)
Hash identifier: 31GJKQSq/Fh5hMn+sXNzRfRHqJgBhjKGiblfxTcVUo0=
Subject key identifier: 1A:34:38:44:C4:3D:F4:25:03:47:2F:81:60:EB:3E:17:D1:0A:B8:87
Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70
Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370
Certificate serial: 21BAEAA4C693E7805FF1E7D6B0548009E0D829E2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft
Manifest number: 020C
Signing time: Mon 02 Mar 2026 17:21:40 +0000
Manifest this update: Mon 02 Mar 2026 17:16:40 +0000
Manifest next update: Fri 06 Mar 2026 05:19:40 +0000
Files and hashes: 1: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: TODEDun2Zl+j5gm95jSV7b8fVwk7R83jzCkXAd4YUh0=)
2: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: G15jhzfZRAvw44ZtH89JpUZ7Q4CGTBRIfeHqxNKeprc=)
3: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: R2BiqYcNCej+6Pp05MhZaSAGDYWWwNQwjQD0afZ3GKY=)
4: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: Tj+rZXXICw5VIXsxuWhO+B1070IpmB9rr/NwmKii+rg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl
rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ba:ea:a4:c6:93:e7:80:5f:f1:e7:d6:b0:54:80:09:e0:d8:29:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370
Validity
Not Before: Mar 2 17:16:40 2026 GMT
Not After : Mar 6 05:19:40 2026 GMT
Subject: CN=1A343844C43DF42503472F8160EB3E17D10AB887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:ae:20:d9:13:0c:e1:e4:9a:7d:c5:26:b1:
9c:66:d4:bc:48:b3:25:a3:38:10:a0:48:86:40:9c:
9a:17:f7:d8:76:6a:2a:a2:84:3f:d0:4d:d7:6d:c4:
1c:07:1d:3d:42:c2:4a:05:f7:d4:93:9c:10:9c:c4:
22:03:cb:fb:6c:4b:1a:22:7c:9c:fd:6f:a5:3c:95:
b0:24:4a:e2:c3:bf:3a:6a:46:55:6d:60:fc:59:cb:
0c:e8:2b:41:6a:6b:23:bd:9c:fc:fc:66:1b:18:8e:
13:f7:4f:c8:b7:57:57:10:9b:22:51:e6:97:5d:fa:
f5:1a:22:66:15:32:0f:3e:ed:25:4d:cf:98:53:c6:
d6:3e:98:8f:1c:13:e3:e6:a7:e5:ff:e6:27:af:8f:
d8:64:2b:cb:47:fb:dc:79:22:b7:d4:9e:eb:a4:43:
83:b4:9a:9e:a6:a0:eb:f8:f2:ee:5a:c7:6c:90:42:
c5:5a:74:11:99:3e:47:39:de:1b:18:01:e8:cc:33:
6b:30:e2:b6:56:52:a1:e9:4b:ef:cc:66:41:21:35:
a0:c3:65:4b:84:d3:60:57:99:a0:75:b5:c9:b7:95:
da:ce:c0:33:26:d9:66:f9:35:4d:b3:8e:3a:15:55:
7f:41:b4:1a:d4:ab:f6:27:48:52:a6:b1:75:62:15:
be:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:34:38:44:C4:3D:F4:25:03:47:2F:81:60:EB:3E:17:D1:0A:B8:87
X509v3 Authority Key Identifier:
keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:a9:7b:4a:46:c3:5a:b0:53:d3:4c:5f:1c:32:97:a3:11:bf:
e1:68:29:23:ab:e9:fb:12:4b:4f:0f:25:84:a6:2f:a8:3c:13:
28:55:9d:48:97:36:12:1b:b0:6b:2e:3f:2f:19:53:37:e7:56:
50:b1:e9:0b:2a:6f:83:46:48:21:4d:f1:c9:d4:83:7b:da:35:
fe:10:88:9d:1b:9d:0e:4f:88:dd:66:a5:33:54:0d:0a:66:b5:
25:c6:63:41:57:d6:de:90:87:04:cb:75:17:fe:df:01:5f:00:
9c:b9:95:6f:46:26:07:60:d9:d4:97:25:23:91:f5:ce:2d:bd:
9b:bc:f2:cb:ec:ee:36:26:bc:fb:a1:10:b5:7b:77:3c:28:0d:
d5:9a:92:84:76:74:f6:34:50:85:77:9f:dc:e7:e1:16:21:c3:
1d:88:0d:2c:52:03:92:ee:a9:6f:69:77:25:30:e2:d6:a0:e6:
03:c2:e8:79:9a:1a:27:c4:59:0b:fe:d9:8c:3b:d3:2b:1d:c7:
34:6b:7f:84:f5:d0:a9:e4:dd:4d:46:e4:81:d1:c6:ee:a4:04:
cb:2e:9e:07:3e:f7:a1:9c:eb:d9:a1:fe:cd:e9:be:63:a3:66:
bb:04:30:ae:f1:61:c6:fd:89:f2:e3:92:4d:af:58:2f:ad:9a:
47:40:4c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:48:12 2026 by rpki-client