
$ rpki-client -vvf repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft
File: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft (raw, json)
Hash identifier: CZatAyRIGx0TPfmprOxHrwIicNUdSWdupQ+eKX8mzYY=
Subject key identifier: F2:9E:F2:54:E5:DD:79:84:9B:EE:6D:0D:14:C9:83:47:35:90:80:CA
Authority key identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62
Certificate issuer: /CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862
Certificate serial: 42C037AAABD6D608D405581AC2B90B00D59B5717
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft
Manifest number: 0242
Signing time: Wed 18 Mar 2026 15:10:55 +0000
Manifest this update: Wed 18 Mar 2026 15:05:55 +0000
Manifest next update: Sat 21 Mar 2026 17:15:55 +0000
Files and hashes: 1: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: 4o94mrc4fRlBDhHzDJcRb+ENMoJpRlPOPsOhrRbyRi4=)
2: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl (hash: 46b9wAFFfOE4T2hser2uQCFJ5qkM9+8mqd+qdWSXR10=)
3: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: UB8JtipfosdHlml62Xhk5sLTDI0owepm37Luu+44jy4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl
rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 17:15:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c0:37:aa:ab:d6:d6:08:d4:05:58:1a:c2:b9:0b:00:d5:9b:57:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862
Validity
Not Before: Mar 18 15:05:55 2026 GMT
Not After : Mar 21 17:15:55 2026 GMT
Subject: CN=F29EF254E5DD79849BEE6D0D14C98347359080CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:f8:2c:be:9d:af:73:7b:4f:ca:11:ad:ed:
98:39:26:57:7f:06:5e:91:df:e6:f2:1f:6e:d4:8d:
3e:f2:a2:61:ee:ff:8a:f9:86:40:3d:44:f6:98:a8:
d0:52:e3:d2:35:17:0e:cf:fb:64:22:75:05:5a:48:
d4:70:38:1e:7b:21:ac:dd:3c:ef:82:88:46:fe:aa:
d2:5c:6e:5f:54:31:95:f6:32:6a:d6:b8:4b:a5:b2:
81:d5:90:91:4d:fe:92:61:79:f0:9d:0c:16:5a:7a:
8e:63:96:bf:f1:bc:7e:22:e0:a6:48:b9:8e:dd:6a:
9b:b3:c9:50:ff:ea:a9:a7:d1:1a:4e:5a:bd:de:d1:
ec:62:61:06:e8:24:84:20:ca:76:f2:81:ad:d9:99:
9e:0a:6c:9b:70:2b:ed:4c:38:03:5c:41:1c:a2:e1:
7c:82:33:e2:d7:7e:5d:0d:1f:4b:15:40:47:3d:f3:
7c:9e:e0:60:43:25:ac:d2:3e:74:a9:48:a0:14:cc:
76:26:f4:79:45:a6:e0:29:f9:ff:d6:9e:af:d7:ae:
c7:d6:29:d8:f8:92:fd:5e:e1:ea:33:30:02:91:3a:
01:e4:0a:98:88:b5:27:a3:bf:cf:54:86:a9:eb:03:
42:a1:7d:1d:27:6e:aa:f2:af:8e:37:3a:e8:6a:fc:
f7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9E:F2:54:E5:DD:79:84:9B:EE:6D:0D:14:C9:83:47:35:90:80:CA
X509v3 Authority Key Identifier:
keyid:77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1c:78:2f:bf:2f:cd:6d:69:8b:9f:fb:78:a8:08:9b:f4:0f:
88:7b:0e:26:b9:19:75:9c:03:5b:ff:ac:85:5b:db:c5:f6:87:
ea:3a:b8:2e:81:8b:c7:f5:9d:d9:7d:99:71:56:f0:d9:cc:ff:
c9:93:32:26:9d:87:77:1b:d8:ef:b4:bd:34:67:2d:29:89:03:
5d:42:cb:6a:69:89:0f:5b:37:68:41:ef:47:fb:95:a8:0c:16:
76:d1:6d:bc:23:68:72:46:fc:fa:58:21:ea:52:14:cd:bc:0a:
f4:b2:20:6c:48:02:ee:d5:e2:f7:8f:e6:b5:07:bf:cc:c4:c8:
59:ae:e7:4a:3c:a0:a4:1b:e0:ce:13:92:1c:1d:f3:d8:4f:f5:
de:68:86:e6:89:82:05:2a:2b:5d:dc:55:d5:0e:35:a4:dd:be:
fb:7b:73:27:7b:cb:07:3c:3d:df:4c:91:c1:b7:17:af:72:9d:
b4:3f:1f:d3:f7:c8:9f:e6:0e:0f:50:90:a7:14:32:ec:1a:17:
27:3c:16:81:59:54:0c:54:f4:c2:a5:29:74:d0:44:da:8d:94:
5d:e3:b3:20:02:9d:16:8b:81:1c:6f:7e:93:d3:3f:31:09:f1:
e4:86:27:af:3d:3d:78:12:4b:77:dc:c2:06:01:fa:72:fc:84:
63:f7:85:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 18:50:59 2026 by rpki-client