
$ rpki-client -vvf repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
File: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft (raw, json)
Hash identifier: bdpOFvUgJu6wPN19A53rBRSmbvB1BW9n1/+6ANDMzAw=
Subject key identifier: 2E:66:51:11:29:BA:76:74:3A:EF:50:A6:69:16:AF:89:08:DE:8D:48
Authority key identifier: 7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4
Certificate issuer: /CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
Certificate serial: 4CDEB1E6A9D3AF6E0DE33AFA8C432A1C04F162C9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
Manifest number: 0201
Signing time: Wed 18 Mar 2026 00:31:21 +0000
Manifest this update: Wed 18 Mar 2026 00:26:21 +0000
Manifest next update: Sat 21 Mar 2026 02:23:21 +0000
Files and hashes: 1: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: 0YLohf/ggkakqxRaRFVJUp8vfmU0YPLjnkvCoTzlI1g=)
2: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl (hash: OQx1ubU7VRMcWfZwKMWxWsPwbGb7PIHOrexI0qnDu9s=)
3: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: bUHS7zCDhqnhQezsrNXcG47gU9JfG5NQcO4U+4/bwQc=)
4: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: PphyhzafZc8USb+ULqaNnnRbeA397pdQzPJ0fXA6bSA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl
rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 02:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:de:b1:e6:a9:d3:af:6e:0d:e3:3a:fa:8c:43:2a:1c:04:f1:62:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
Validity
Not Before: Mar 18 00:26:21 2026 GMT
Not After : Mar 21 02:23:21 2026 GMT
Subject: CN=2E66511129BA76743AEF50A66916AF8908DE8D48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:2d:3d:b1:4a:5f:30:a2:7f:19:94:94:26:
59:8c:3f:e9:23:d7:71:0a:7d:d5:d9:51:8c:d1:10:
3c:57:89:bf:87:2d:66:c0:a2:c5:62:0a:99:0f:3b:
fc:8b:fe:95:dc:ab:fe:16:0c:bc:7c:55:2d:a8:7d:
96:52:d2:ef:05:45:0e:8f:6d:2f:48:11:3e:8d:b8:
1f:fb:90:19:eb:6d:7c:2b:88:5e:a4:0f:8c:13:79:
4b:2d:36:fa:da:71:d2:06:ba:fd:c1:fc:cf:ec:e3:
66:88:a8:f9:20:88:34:78:a9:8b:c4:54:ab:ca:ac:
2e:48:1a:e4:75:14:d9:73:a8:17:57:f0:0d:f0:d1:
91:c4:86:cc:db:d8:44:10:35:f0:2f:2f:9f:21:01:
01:52:7a:aa:a0:3b:cf:17:9f:ec:22:59:c2:d8:a6:
e6:a1:62:e5:c5:e8:47:98:58:eb:41:36:b0:9b:67:
b0:78:b6:61:99:9b:b3:8a:23:0a:9b:8c:b9:2b:94:
0f:93:1c:11:bc:aa:b4:4a:53:cf:c5:9e:d1:f8:4d:
27:d5:5b:51:2e:bc:73:47:1f:0b:fd:cd:ae:24:94:
cb:7b:57:88:01:51:80:32:8c:f6:f0:c0:2d:d6:c7:
23:1c:14:4a:fd:ec:73:55:41:59:ae:0b:40:6b:9e:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:66:51:11:29:BA:76:74:3A:EF:50:A6:69:16:AF:89:08:DE:8D:48
X509v3 Authority Key Identifier:
keyid:7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b5:70:8e:9d:2b:30:90:1b:b9:ea:ab:ce:86:8e:bc:35:99:
39:ca:40:6c:01:7d:c5:cc:30:b8:8b:1b:33:19:45:12:b7:3b:
77:e3:4d:e4:a8:c1:f6:36:e5:ce:31:1e:94:ca:b9:d1:73:8e:
f0:d9:61:d0:3b:87:62:9d:e4:b9:47:42:b3:66:48:25:c1:e3:
8c:60:98:60:b1:34:df:db:29:df:38:f7:58:eb:f9:40:de:e6:
6f:b3:82:4e:ec:50:15:bf:89:b4:c7:3c:18:7e:c4:ea:3e:3c:
27:9e:e2:27:0d:3b:d7:9f:38:d4:b4:05:42:f4:46:ee:37:89:
ee:ac:47:7c:7e:ec:39:66:3f:95:e3:da:b3:67:b9:54:ad:f5:
8d:f4:3c:4a:f5:49:9a:08:a8:c6:33:1a:e3:07:91:d6:ca:16:
6d:2e:bd:57:28:28:7e:f8:78:cc:aa:07:93:ea:c0:6d:4b:67:
5d:b3:7c:dc:a4:64:4a:fe:07:b8:c0:66:60:fe:da:6b:e4:1d:
4f:eb:95:11:ad:f6:6c:00:44:cc:ac:dc:11:e8:d0:c3:6f:c1:
12:ca:aa:a4:e3:13:07:8f:34:03:6d:09:5b:48:2b:b9:34:50:
b9:bd:d4:82:62:6e:b3:b6:c2:1e:60:26:62:8a:48:8f:f1:f6:
2f:d7:6e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:42:34 2026 by rpki-client