
$ rpki-client -vvf repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft
File: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft (raw, json)
Hash identifier: HU8yBdpsygGZI6szxQ7efxgA+KKMh/iOPoYSIyW+b5g=
Subject key identifier: E1:EA:8B:2E:68:46:A4:B0:4E:89:56:58:0C:01:72:5F:08:62:CF:BC
Authority key identifier: 29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69
Certificate issuer: /CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769
Certificate serial: 5786A49CB2964D218182C341A72DDE79D7FD188B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft
Manifest number: 03DB
Signing time: Sun 22 Mar 2026 21:52:38 +0000
Manifest this update: Sun 22 Mar 2026 21:47:37 +0000
Manifest next update: Thu 26 Mar 2026 04:41:37 +0000
Files and hashes: 1: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl (hash: y9YR38UComhhwPGv210fqXS4Q5aMV9rsZOFNgjWJrjM=)
2: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: bN0O+3JGtIOaU62palp9MIrngagfeVADVprJx+0r0Fs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl
rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 04:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:86:a4:9c:b2:96:4d:21:81:82:c3:41:a7:2d:de:79:d7:fd:18:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769
Validity
Not Before: Mar 22 21:47:37 2026 GMT
Not After : Mar 26 04:41:37 2026 GMT
Subject: CN=E1EA8B2E6846A4B04E8956580C01725F0862CFBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:64:cc:ed:d5:0b:b9:57:9f:8a:95:64:4e:
e9:98:22:7b:6b:81:ab:25:d2:93:b7:e9:05:fe:5f:
7f:07:e6:4a:e5:d3:56:6e:7a:fb:6b:1a:4f:bf:ba:
da:fa:51:2e:2b:17:af:d4:3a:12:95:9a:64:d5:62:
42:18:4a:76:3c:3f:ca:aa:54:07:93:3d:02:76:88:
fe:20:d2:33:01:00:51:7b:36:b6:8c:ed:b1:c5:5b:
a4:ae:d0:c6:7d:16:f7:25:c6:22:80:22:f7:42:00:
50:ba:be:e2:21:06:13:87:f1:9a:58:7b:46:86:48:
ca:64:fa:3b:36:d5:1d:5c:1c:66:24:cf:3f:12:af:
31:fb:c7:f6:6b:99:4d:b9:92:b2:86:60:f4:3f:d7:
a4:5f:9d:d1:9f:a8:87:b8:9d:4f:6f:19:65:4d:b3:
99:09:71:81:29:97:84:16:8a:bf:fd:e4:bf:32:54:
5d:d7:9a:62:f1:bc:53:7f:05:96:54:70:6f:46:6c:
d8:66:64:66:08:62:91:28:b4:0d:b8:42:40:11:c6:
62:4c:73:29:0e:fb:2c:39:83:24:cd:b7:ee:fa:64:
a3:4d:0a:04:9e:c7:f8:7a:28:40:08:ac:ae:c1:f4:
c8:56:69:be:38:e0:5a:2e:58:24:b6:49:45:ff:70:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EA:8B:2E:68:46:A4:B0:4E:89:56:58:0C:01:72:5F:08:62:CF:BC
X509v3 Authority Key Identifier:
keyid:29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b7:e3:fe:11:bf:e4:7e:56:23:bd:5e:97:44:9e:04:09:07:
1a:44:29:a0:bb:6d:39:7d:76:11:24:23:9a:c9:7d:fa:cb:1e:
07:d3:5b:28:fe:8e:fd:e1:fc:5e:a6:b1:c7:19:64:69:00:1e:
db:62:0d:41:0a:61:99:5d:e8:20:1f:9b:ed:fd:11:41:6d:9c:
4b:ed:0e:09:b8:ef:df:16:90:5a:bb:a4:d7:f0:ef:bd:53:d7:
86:c8:c6:b4:0a:23:9a:d3:9e:29:a6:b5:4b:54:34:29:20:a5:
a1:27:bb:32:d9:7e:b4:51:69:a0:06:ae:e3:94:1b:92:8d:03:
40:44:de:b0:f6:63:93:59:11:26:19:63:b2:ca:aa:00:aa:2d:
83:6a:10:66:d0:64:f5:30:49:b2:2d:36:40:f4:64:cb:cb:43:
39:ed:73:53:81:c6:12:00:9f:b7:09:3c:66:f0:58:5b:b5:eb:
0a:01:3b:3d:0b:64:d1:19:e3:42:cc:40:62:87:97:ad:cf:4c:
7f:dd:84:2b:d3:04:d5:67:21:8d:d4:aa:61:fc:0f:fa:34:f2:
11:d9:b5:67:8f:d9:86:9e:4f:74:23:9f:4b:70:c0:55:9d:b6:
70:de:aa:c4:aa:e1:d5:2c:26:a4:04:67:91:94:67:b4:09:0f:
d3:44:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 01:51:14 2026 by rpki-client