
$ rpki-client -vvf repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft
File: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft (raw, json)
Hash identifier: ux8QL74zt+uHaWzrbZQa6YMf9zU9EbG/gMoGc+JDXCs=
Subject key identifier: 47:E9:D5:43:ED:F8:38:9D:8C:EB:41:03:80:F8:54:2C:81:61:1F:7E
Authority key identifier: A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8
Certificate issuer: /CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8
Certificate serial: 3E57CDF46A71A25DE345DC31BD1B93AB622773F2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft
Manifest number: 0214
Signing time: Fri 31 Oct 2025 08:51:18 +0000
Manifest this update: Fri 31 Oct 2025 08:46:18 +0000
Manifest next update: Mon 03 Nov 2025 15:20:18 +0000
Files and hashes: 1: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: zE8cXMxW8vFIwxCNk8JxKaXrpgeYvceF9mZckUGnv8M=)
2: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl (hash: A/P82YkobThkaRReqatGeLUZLi+0y+h3Q1YU5tS9wnM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl
rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 15:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:57:cd:f4:6a:71:a2:5d:e3:45:dc:31:bd:1b:93:ab:62:27:73:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8
Validity
Not Before: Oct 31 08:46:18 2025 GMT
Not After : Nov 3 15:20:18 2025 GMT
Subject: CN=47E9D543EDF8389D8CEB410380F8542C81611F7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f8:5d:a8:2a:64:ef:9a:51:d0:23:0f:a4:9d:
ad:32:1f:89:b5:de:b9:90:29:e8:bf:8d:f2:40:8f:
9b:b4:62:7d:02:d2:5d:a7:9f:bf:a2:22:52:77:9a:
78:bb:8a:e3:78:df:4e:38:8e:e0:54:60:43:b4:4e:
08:78:7d:75:cb:db:c3:3f:15:5a:94:78:9a:11:ea:
aa:17:57:a5:b6:f0:87:56:cc:15:ab:33:de:11:d5:
be:1a:d4:47:a6:b8:2e:e3:04:37:62:31:e1:39:4c:
c0:a0:6c:16:4d:3e:6a:dc:7a:1f:be:d1:77:28:a5:
f0:eb:47:96:dd:41:36:55:81:67:ba:ef:71:69:eb:
16:aa:34:39:9e:33:ae:5d:8d:a4:51:c9:ec:2a:c7:
df:dc:d6:0b:db:ab:dd:8d:a6:00:96:68:1f:a6:7f:
db:c5:31:6e:50:8f:87:6c:73:a6:fa:25:2b:f8:5e:
dc:56:e6:5f:e0:00:64:f8:42:84:16:db:14:e5:ae:
88:02:93:be:26:f9:c3:1b:0d:3c:94:f1:a0:7a:c0:
53:e2:f0:52:93:98:63:6b:70:95:11:b3:ae:3c:45:
b0:6f:ed:40:f5:ab:ca:1a:9f:54:fc:46:7b:80:94:
8e:9d:d2:7e:12:a5:e7:ab:5b:f2:9b:10:58:5e:d9:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E9:D5:43:ED:F8:38:9D:8C:EB:41:03:80:F8:54:2C:81:61:1F:7E
X509v3 Authority Key Identifier:
keyid:A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7f:a9:8f:0d:90:e3:88:83:6b:20:58:4e:d1:af:f4:13:5d:
4c:bb:59:3b:d0:af:35:66:3e:d1:94:a7:9d:cb:b9:50:6c:f0:
7e:c4:eb:f8:e8:aa:f5:98:0c:66:56:b1:6d:94:83:6a:81:07:
fd:e2:0c:ad:18:99:d3:d9:a0:ad:33:b6:a7:5b:40:85:78:27:
b9:72:78:59:dd:d4:55:4e:fa:08:e6:16:d1:23:0d:53:cf:78:
68:d9:8a:3a:86:57:87:8f:54:9e:70:ab:67:fe:38:68:a3:41:
d9:98:10:3d:61:f0:9c:b7:a4:41:0d:05:ff:53:2a:c2:cc:c8:
58:76:bd:dc:b4:2c:ad:6a:ca:38:8b:2d:84:84:9d:fb:51:1b:
95:3d:ad:d2:ae:b4:a1:54:5d:43:73:52:c6:4b:9e:69:82:8b:
8c:23:7d:61:f6:b2:c8:9a:e9:aa:fb:04:ad:e9:a7:a0:bb:39:
fe:0b:c5:2d:6f:c0:f4:88:47:56:3b:21:13:0b:93:7f:d1:b0:
12:2c:49:2b:70:de:98:83:c1:9d:59:4c:75:3a:f5:32:b3:fa:
70:27:dd:19:64:30:6b:be:ce:4b:eb:33:de:c2:be:6b:1d:54:
0e:07:c9:69:42:e6:ff:64:43:0f:d9:dc:0d:ae:09:53:bf:70:
cc:d8:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 05:08:10 2025 by rpki-client