
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft
File: E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft (raw, json)
Hash identifier: kqEXY3/P3mh6Sjf2dGfbs7Mt9n8buZq0dHnjIbo+aGE=
Subject key identifier: 03:75:F1:14:57:F4:03:13:CB:BB:C0:32:86:E0:CF:D6:38:8C:52:D9
Authority key identifier: E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF
Certificate issuer: /CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF
Certificate serial: 3CBEC33F37E9FA1126089953B3FCD9E4F6BB71D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft
Manifest number: 0258
Signing time: Thu 19 Mar 2026 05:52:26 +0000
Manifest this update: Thu 19 Mar 2026 05:47:26 +0000
Manifest next update: Sun 22 Mar 2026 13:39:26 +0000
Files and hashes: 1: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: AMV0DaoVzEpr6QFAmB1hobQPZBoR2MCCNocuQFbfT54=)
2: E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl (hash: tw9vLXoncsb3kY2CcLLtuD1gn/NfhpmiPn9WN+9AR4A=)
3: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: ++rnMg/cn38VB7ywZ7HTwbB2FOMWD3Zhtth2U6OPVoI=)
4: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: N+b2Iu4VbSgstaUesFmQsFf6IU12aajq3e/wLuOvgLQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl
rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 09:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:be:c3:3f:37:e9:fa:11:26:08:99:53:b3:fc:d9:e4:f6:bb:71:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF
Validity
Not Before: Mar 19 05:47:26 2026 GMT
Not After : Mar 22 13:39:26 2026 GMT
Subject: CN=0375F11457F40313CBBBC03286E0CFD6388C52D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:1b:71:89:a7:b2:dc:1f:02:35:d2:3b:7e:
c7:15:c5:1d:34:93:11:b7:1e:06:c6:70:53:bd:1c:
27:33:94:43:bb:f3:72:56:5c:33:12:1a:f2:d4:07:
1c:e3:64:50:92:2b:d1:a3:68:81:dc:a3:a4:76:4d:
cb:95:68:a1:45:4b:81:c6:64:ff:c1:63:b9:4b:96:
f5:92:9c:8e:01:1c:56:55:3d:92:49:17:bc:c6:6f:
4b:e4:83:99:08:d9:36:c3:b5:66:4a:68:73:3c:4a:
75:ac:73:0d:43:a4:ba:7e:3e:38:a4:3e:89:4f:50:
a1:d7:b3:7c:7a:84:2e:f9:21:0c:fc:bf:b0:3e:fa:
e1:7b:35:e9:68:0f:24:7d:ed:05:dd:79:90:1f:43:
47:ef:5b:64:9f:b0:53:a9:2e:38:1a:3d:23:20:2e:
84:49:e0:05:71:9d:b1:5c:ec:ed:78:2a:83:12:09:
22:8d:ad:84:7f:19:c5:a0:62:47:70:77:6e:25:40:
39:0d:30:e5:4c:6d:05:6b:c4:a8:04:e5:10:f7:fb:
68:a6:ad:4d:c7:68:94:b7:3b:c8:69:a1:c6:c1:89:
90:a7:d3:bd:be:6c:a2:32:ed:78:29:3a:ef:ca:45:
4d:ac:4e:ac:f2:ee:a9:cb:82:38:1c:ab:ba:38:c3:
2b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:75:F1:14:57:F4:03:13:CB:BB:C0:32:86:E0:CF:D6:38:8C:52:D9
X509v3 Authority Key Identifier:
keyid:E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ee:99:94:7f:f0:14:b1:ba:00:82:23:eb:96:e4:a0:5b:24:
80:d4:c2:d0:51:11:cc:b8:78:44:55:74:35:4a:db:90:87:ae:
85:a1:5c:cb:3c:13:64:9b:34:c4:f3:77:35:58:1b:14:4c:59:
b3:5b:ff:dc:f5:4c:b5:74:28:12:e5:3d:f5:32:b6:e5:8a:83:
9b:bc:ec:5b:90:63:9f:70:09:99:8d:c5:1c:e0:e3:d7:d9:c4:
11:65:cd:76:d5:ad:df:8a:42:1a:d8:8a:36:97:7b:6f:40:15:
4e:1d:1f:1c:67:55:f5:52:2d:fd:49:1d:95:e8:db:59:75:9f:
06:db:36:53:99:bc:ca:c3:d7:c0:9c:d1:32:2f:af:f2:9f:35:
93:27:f4:a7:da:a2:5d:ca:7b:b4:4d:cf:2a:fa:29:50:74:9e:
f0:44:c4:8c:7e:fc:78:e9:d8:41:66:51:b0:4a:35:b9:6a:79:
84:33:15:7c:9e:17:a2:12:c4:00:9a:25:40:5a:a0:bd:42:86:
94:5b:ed:be:dd:74:1a:93:b7:98:30:10:d4:b9:b6:bc:10:99:
0b:d5:e8:3e:10:4a:52:d3:b1:41:c0:6d:96:c7:b1:28:50:af:
0f:b5:78:77:6b:a9:e2:0f:8a:fa:8c:a7:e9:25:74:63:6e:d1:
e5:1d:52:74
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPL7DPzfp+hEmCJlTs/zZ5Pa7cdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQxMTNB
OEJERjZERjAeFw0yNjAzMTkwNTQ3MjZaFw0yNjAzMjIxMzM5MjZaMDMxMTAvBgNV
BAMTKDAzNzVGMTE0NTdGNDAzMTNDQkJCQzAzMjg2RTBDRkQ2Mzg4QzUyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDoBtxiaey3B8CNdI7fscVxR00
kxG3HgbGcFO9HCczlEO783JWXDMSGvLUBxzjZFCSK9GjaIHco6R2TcuVaKFFS4HG
ZP/BY7lLlvWSnI4BHFZVPZJJF7zGb0vkg5kI2TbDtWZKaHM8SnWscw1DpLp+Pjik
PolPUKHXs3x6hC75IQz8v7A++uF7NeloDyR97QXdeZAfQ0fvW2SfsFOpLjgaPSMg
LoRJ4AVxnbFc7O14KoMSCSKNrYR/GcWgYkdwd24lQDkNMOVMbQVrxKgE5RD3+2im
rU3HaJS3O8hpocbBiZCn072+bKIy7XgpOu/KRU2sTqzy7qnLgjgcq7o4wyvNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUA3XxFFf0AxPLu8AyhuDP1jiMUtkwHwYDVR0j
BBgwFoAU4bA/nupxwA9p2Di8HarRE6i99t8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YjNkMTRjYi1jY2MyLTQ2ZDItOGUzMS0xNmY1YmVjMGFjZDgvMC9FMUIwM0Y5RUVB
NzFDMDBGNjlEODM4QkMxREFBRDExM0E4QkRGNkRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQxMTNBOEJE
RjZERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIzZDE0Y2ItY2NjMi00NmQyLThl
MzEtMTZmNWJlYzBhY2Q4LzAvRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQx
MTNBOEJERjZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIzumZR/8BSxugCCI+uW5KBbJIDUwtBREcy4
eERVdDVK25CHroWhXMs8E2SbNMTzdzVYGxRMWbNb/9z1TLV0KBLlPfUytuWKg5u8
7FuQY59wCZmNxRzg49fZxBFlzXbVrd+KQhrYijaXe29AFU4dHxxnVfVSLf1JHZXo
21l1nwbbNlOZvMrD18Cc0TIvr/KfNZMn9Kfaol3Ke7RNzyr6KVB0nvBExIx+/Hjp
2EFmUbBKNblqeYQzFXyeF6ISxACaJUBaoL1ChpRb7b7ddBqTt5gwENS5trwQmQvV
6D4QSlLTsUHAbZbHsShQrw+1eHdrqeIPivqMp+kldGNu0eUdUnQ=
-----END CERTIFICATE-----
Generated at Thu Mar 19 09:22:47 2026 by rpki-client