
$ rpki-client -vvf repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
File: 3053FFA7A0123B032FC9458281063C89F007FA98.mft (raw, json)
Hash identifier: BGYWyT32uObTrNH7+e0rhbdGyHXSobch24eIw3wt92c=
Subject key identifier: AD:34:F2:01:F5:62:21:CB:2D:47:ED:10:AC:17:07:A8:81:ED:A6:DE
Authority key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98
Certificate issuer: /CN=3053FFA7A0123B032FC9458281063C89F007FA98
Certificate serial: 413F862D4528B0384CF59BC60471EDD188932043
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
Manifest number: 03D9
Signing time: Mon 23 Mar 2026 05:11:36 +0000
Manifest this update: Mon 23 Mar 2026 05:06:36 +0000
Manifest next update: Thu 26 Mar 2026 16:34:36 +0000
Files and hashes: 1: 3053FFA7A0123B032FC9458281063C89F007FA98.crl (hash: IbuD3B+YwT6uD1n1l+RHS38aZxlVCwryugLwwISfdts=)
2: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: X8fSVyl/ekaFc0qdxtX72tyLH/RXxnJtVkW2HtewxfI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl
rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 09:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:3f:86:2d:45:28:b0:38:4c:f5:9b:c6:04:71:ed:d1:88:93:20:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3053FFA7A0123B032FC9458281063C89F007FA98
Validity
Not Before: Mar 23 05:06:36 2026 GMT
Not After : Mar 26 16:34:36 2026 GMT
Subject: CN=AD34F201F56221CB2D47ED10AC1707A881EDA6DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:05:ee:79:24:55:29:d0:bd:c6:a2:46:d6:34:
7c:1f:9e:ac:45:3a:53:bf:2c:42:07:aa:e7:51:0c:
2d:9d:1d:19:9d:8c:76:8a:93:88:b5:af:4c:1e:91:
1b:c3:0f:e2:57:ce:48:e9:48:1d:99:47:10:3c:48:
41:78:37:58:66:d0:87:a5:72:41:8c:b8:fa:72:93:
65:4e:44:ea:f7:27:07:09:44:b8:8b:4e:c7:32:88:
24:b2:b8:f0:fb:f8:65:b7:b4:9b:1e:9d:7b:62:b5:
08:55:0b:98:b4:5b:4d:ee:a5:26:25:37:16:54:ab:
00:7a:58:fc:7d:0e:e7:4b:e0:0d:2d:15:9f:41:2d:
55:01:59:0e:93:1e:2f:b4:c5:2a:c6:ae:ee:50:c4:
87:44:4a:56:d0:12:15:7d:2f:cd:66:6b:9c:3a:fb:
d0:04:e2:eb:00:2c:02:00:4c:a8:87:47:14:4d:eb:
35:24:e7:8e:17:63:29:0f:c6:8d:a2:52:37:77:79:
06:4f:e0:6a:31:11:d6:63:b1:f9:d5:6f:cc:5b:23:
ab:b8:8a:b5:46:77:d8:ff:78:00:2b:d8:30:a2:89:
f6:9d:36:78:3a:55:e0:2b:94:a4:c6:a8:80:93:f4:
f9:4e:f2:c9:68:a1:ab:dd:99:80:34:66:98:2b:fd:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:34:F2:01:F5:62:21:CB:2D:47:ED:10:AC:17:07:A8:81:ED:A6:DE
X509v3 Authority Key Identifier:
keyid:30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:85:c1:d2:7a:52:da:0f:cc:79:f5:0b:0f:fd:60:f9:92:d2:
9b:99:1c:1e:eb:87:2e:e9:de:fa:b7:87:dc:6a:81:ba:9c:31:
4b:e5:72:22:13:df:0a:9e:d6:ab:d2:4e:0a:8c:7f:ea:7c:bb:
ab:c8:bf:ef:14:89:90:9d:10:1f:00:39:8a:e0:80:ee:34:ce:
ea:e9:63:50:a5:8e:f7:08:a7:15:d4:65:51:94:a4:09:25:12:
94:5b:76:b2:32:c6:4a:bb:a9:11:ed:15:97:4f:d7:d4:74:50:
68:33:24:04:b1:4b:47:cc:b1:6f:2e:9b:f1:17:9c:19:4a:58:
53:8c:eb:05:eb:1a:92:0d:34:f3:eb:92:de:ce:3e:bf:6a:d5:
55:33:32:08:7d:7b:1c:f6:5a:60:48:be:a1:df:78:52:92:37:
4c:b6:e8:dd:a4:0a:86:42:6b:be:31:49:2c:c0:6a:14:be:d6:
e3:be:e8:38:e5:b5:8e:fb:35:d1:84:7f:24:27:89:86:bb:eb:
7e:b7:ce:fa:6a:25:b6:d8:b1:7f:e0:a2:db:5e:e1:44:f9:a1:
3b:1e:8d:86:61:24:40:7e:df:f9:5a:14:de:d5:9c:1a:64:91:
4c:70:1f:37:e6:13:c6:35:9d:4d:85:74:6b:61:d0:54:2a:7f:
6c:61:a5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 01:50:24 2026 by rpki-client