
$ rpki-client -vvf repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft
File: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft (raw, json)
Hash identifier: EDECWWR9MSKhpemZCot+ukAiI1OEfZtrp7YC6dJLxGo=
Subject key identifier: 52:E1:AF:8A:DD:89:65:AF:E0:9A:B5:EF:4C:CD:21:FB:0E:A6:59:7A
Authority key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE
Certificate issuer: /CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE
Certificate serial: 489E43E391E3884147D7963C04A311FE5DE033DC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft
Manifest number: 03DB
Signing time: Mon 23 Mar 2026 02:41:08 +0000
Manifest this update: Mon 23 Mar 2026 02:36:08 +0000
Manifest next update: Thu 26 Mar 2026 04:29:08 +0000
Files and hashes: 1: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl (hash: hd3tGTm/csrQpIwyvrokz9Kixx31TRRxjbyMim5THxE=)
2: 3130332e3136362e36362e302f32332d3234203d3e203137393935.roa (hash: LeAX921PuFORgks79ePG8mv8iLwlKYZRHuQBuRA29no=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl
rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 04:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:9e:43:e3:91:e3:88:41:47:d7:96:3c:04:a3:11:fe:5d:e0:33:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE
Validity
Not Before: Mar 23 02:36:08 2026 GMT
Not After : Mar 26 04:29:08 2026 GMT
Subject: CN=52E1AF8ADD8965AFE09AB5EF4CCD21FB0EA6597A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:a3:9c:29:e5:d3:12:5b:83:65:b3:07:d2:
1b:02:b4:af:cd:f8:ab:41:11:ac:1f:ab:e4:a3:68:
99:bd:a8:4b:80:56:19:0a:5e:10:09:61:90:99:6c:
3e:b6:65:f8:5b:0f:4a:d7:1f:58:e0:8c:f2:cf:d2:
7a:b1:2e:6d:36:4b:9f:84:f1:64:94:14:71:2c:6e:
8f:79:76:9e:91:5b:10:aa:0f:a0:37:59:49:00:3c:
5f:f1:76:e5:fa:8b:f1:7d:fc:06:d5:85:ba:62:45:
47:0e:ef:6e:9c:a1:6a:cf:8b:48:e7:67:5a:5b:f2:
b4:ef:74:5e:e3:1c:de:07:2d:11:3b:cf:00:8d:03:
c3:bf:56:06:0c:e4:2d:c2:c0:31:a7:8c:92:87:f2:
b2:00:a4:56:9b:6b:4b:25:51:a6:ab:fe:74:fa:96:
48:67:ef:6a:9e:07:c5:bd:e6:b2:16:fd:94:2a:92:
82:af:70:b8:78:2f:e2:af:b9:02:26:cc:f8:fa:6e:
75:ec:8b:35:2f:e7:f8:53:bb:bd:fc:55:11:d2:fd:
1e:1b:4a:57:8a:a3:68:1c:46:05:2b:6b:d9:af:07:
4d:eb:aa:5e:cb:4f:b9:2c:ac:a7:37:34:cd:8c:3e:
d1:88:26:c8:0f:35:bb:37:32:03:40:79:07:df:73:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E1:AF:8A:DD:89:65:AF:E0:9A:B5:EF:4C:CD:21:FB:0E:A6:59:7A
X509v3 Authority Key Identifier:
keyid:03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5e:bd:14:9b:44:3c:ce:2b:7b:b7:2d:ba:d6:2e:1a:15:55:
36:67:1f:a0:e5:92:59:a7:8c:76:8a:fd:85:81:0c:34:95:99:
74:df:c4:73:6c:e9:a0:4e:bf:2a:5a:a9:48:3b:08:87:b6:93:
eb:6e:c5:47:93:4e:6f:5d:45:9b:9c:92:55:fe:af:20:f1:56:
48:d9:eb:81:f2:f1:b0:8f:b3:5d:ca:77:70:f9:b3:a1:d3:81:
4a:dd:38:2a:7c:0c:33:6c:67:81:06:e0:0b:ec:95:0d:83:19:
94:da:7f:49:ab:58:72:90:c4:a2:1d:f9:3d:67:74:e6:00:87:
c3:eb:b5:bf:f1:94:f5:0c:55:37:a9:11:b0:42:70:84:e2:e1:
ca:b7:49:dd:4d:27:2b:00:7b:41:ef:82:b2:17:87:b2:9a:a1:
8a:94:13:79:eb:3f:e3:0f:ec:df:7b:8a:1b:b9:08:4b:7d:f0:
f1:53:70:f1:d5:7e:d3:29:ee:27:b4:8f:ac:1e:f6:57:d4:9c:
24:68:11:fc:be:49:d4:e9:e5:6a:3e:64:c1:18:df:d0:5a:54:
74:4d:1d:5d:f8:22:09:04:a2:09:36:1b:33:70:16:3c:6c:3c:
19:3f:b7:6e:f9:19:e4:27:b8:64:1e:60:2c:4f:8e:41:98:b3:
8e:aa:d7:5a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSJ5D45HjiEFH15Y8BKMR/l3gM9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5
NzE0MjZGRTAeFw0yNjAzMjMwMjM2MDhaFw0yNjAzMjYwNDI5MDhaMDMxMTAvBgNV
BAMTKDUyRTFBRjhBREQ4OTY1QUZFMDlBQjVFRjRDQ0QyMUZCMEVBNjU5N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAaOcKeXTEluDZbMH0hsCtK/N
+KtBEawfq+SjaJm9qEuAVhkKXhAJYZCZbD62ZfhbD0rXH1jgjPLP0nqxLm02S5+E
8WSUFHEsbo95dp6RWxCqD6A3WUkAPF/xduX6i/F9/AbVhbpiRUcO726coWrPi0jn
Z1pb8rTvdF7jHN4HLRE7zwCNA8O/VgYM5C3CwDGnjJKH8rIApFaba0slUaar/nT6
lkhn72qeB8W95rIW/ZQqkoKvcLh4L+KvuQImzPj6bnXsizUv5/hTu738VRHS/R4b
SleKo2gcRgUra9mvB03rql7LT7ksrKc3NM2MPtGIJsgPNbs3MgNAeQffc1PZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUuGvit2JZa/gmrXvTM0h+w6mWXowHwYDVR0j
BBgwFoAUA+9BScXbB6w0jljk2jm93ZcUJv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NTdlNWIwZS01OTY0LTQ2M2YtODA0MS0zMzdmODA1NTY0M2MvMC8wM0VGNDE0OUM1
REIwN0FDMzQ4RTU4RTREQTM5QkRERDk3MTQyNkZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJEREQ5NzE0
MjZGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU3ZTViMGUtNTk2NC00NjNmLTgw
NDEtMzM3ZjgwNTU2NDNjLzAvMDNFRjQxNDlDNURCMDdBQzM0OEU1OEU0REEzOUJE
REQ5NzE0MjZGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEVevRSbRDzOK3u3LbrWLhoVVTZnH6Dlklmn
jHaK/YWBDDSVmXTfxHNs6aBOvypaqUg7CIe2k+tuxUeTTm9dRZucklX+ryDxVkjZ
64Hy8bCPs13Kd3D5s6HTgUrdOCp8DDNsZ4EG4AvslQ2DGZTaf0mrWHKQxKId+T1n
dOYAh8Prtb/xlPUMVTepEbBCcITi4cq3Sd1NJysAe0HvgrIXh7KaoYqUE3nrP+MP
7N97ihu5CEt98PFTcPHVftMp7ie0j6we9lfUnCRoEfy+SdTp5Wo+ZMEY39BaVHRN
HV34IgkEogk2GzNwFjxsPBk/t275GeQnuGQeYCxPjkGYs46q11o=
-----END CERTIFICATE-----
Generated at Tue Mar 24 01:50:18 2026 by rpki-client