
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
File: 7D9756BA26383A8A80C65F2856105B0FF5154379.mft (raw, json)
Hash identifier: Biwt441R3nnePtVfEbjCWliSkQqBv9qZYfVr3t6V1yc=
Subject key identifier: 4E:D3:79:13:09:30:03:57:64:5C:92:E7:05:90:27:77:13:04:5F:B4
Authority key identifier: 7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79
Certificate issuer: /CN=7D9756BA26383A8A80C65F2856105B0FF5154379
Certificate serial: 6EF942F2E3DE7BDDB6E06F707B3719243E20E6EA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
Manifest number: 01E1
Signing time: Mon 03 Nov 2025 20:12:19 +0000
Manifest this update: Mon 03 Nov 2025 20:07:19 +0000
Manifest next update: Thu 06 Nov 2025 23:04:19 +0000
Files and hashes: 1: 7D9756BA26383A8A80C65F2856105B0FF5154379.crl (hash: P7hZJGmh9f0968Kc1p82eD7BmokMGIQKwzFcWtPebxg=)
2: 3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa (hash: jmjpTwFqJBkm3124jZo6u0K/VkEahqOKTR/f2jeIcks=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.crl
rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 23:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f9:42:f2:e3:de:7b:dd:b6:e0:6f:70:7b:37:19:24:3e:20:e6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D9756BA26383A8A80C65F2856105B0FF5154379
Validity
Not Before: Nov 3 20:07:19 2025 GMT
Not After : Nov 6 23:04:19 2025 GMT
Subject: CN=4ED3791309300357645C92E70590277713045FB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:02:44:e0:a7:06:8f:0d:31:d4:59:b5:8a:
c7:c5:4c:cc:e7:74:a8:74:84:81:6d:cb:f5:bd:c8:
10:5b:85:3b:66:3c:7e:97:c6:ad:54:42:47:85:d0:
ab:5c:44:c3:c4:05:c6:ee:27:f7:19:c4:2f:1e:16:
f2:35:99:23:fc:b4:4f:31:cb:35:9f:ea:03:4e:16:
07:e2:43:3d:b2:b9:7f:74:d3:d1:b3:04:32:db:b3:
c9:18:bb:22:b8:81:62:94:9e:5f:96:f0:4c:a3:c0:
77:d5:98:5c:46:a8:9d:ad:c3:46:b6:bb:b8:6d:50:
fb:38:37:69:f0:29:a6:5d:d6:fd:8e:c5:30:8d:ee:
df:cd:d7:54:34:c9:ce:d4:1a:cb:8d:e6:a8:8e:96:
5e:e4:93:dc:a0:e1:49:43:43:13:3e:6b:d9:54:87:
d9:20:7a:bb:e8:86:68:c7:f6:27:75:4b:61:f3:cb:
39:54:0f:2f:d4:e0:0c:1d:5e:f2:07:35:a6:72:3e:
b3:ba:4b:8a:9a:3a:92:79:52:39:21:4e:ae:8c:3a:
bb:18:10:75:c0:93:56:32:e5:dd:08:84:67:67:60:
89:0c:23:17:02:75:5f:90:5f:4d:49:40:8b:01:d7:
12:63:52:2a:70:10:1f:bd:b1:97:b1:ba:29:24:f5:
26:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D3:79:13:09:30:03:57:64:5C:92:E7:05:90:27:77:13:04:5F:B4
X509v3 Authority Key Identifier:
keyid:7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8d:8b:17:4b:78:ba:36:17:b5:1e:a2:81:a5:9e:b5:1d:33:
b2:cd:87:54:08:a8:7e:df:cd:2c:c8:5b:14:88:3c:3c:ef:83:
50:57:4d:16:94:77:c0:26:c2:be:16:29:ee:c1:ac:98:85:c0:
d7:c7:d7:41:9a:56:87:8c:60:0f:6c:1b:dc:6f:33:8a:b4:3f:
c8:31:ad:6b:dc:00:fb:43:d1:84:49:e2:c7:3c:36:04:64:a3:
99:4d:b7:95:27:4e:b8:cd:fa:1f:ed:fd:18:b9:47:0b:83:89:
68:63:5e:55:2e:3d:6c:30:8d:b3:01:ea:6e:89:3c:c2:ed:7f:
b8:8f:80:97:d3:0d:7d:5b:f7:7d:ef:ee:39:5d:42:8a:31:cd:
5f:7d:7b:e4:30:3e:51:91:b8:16:17:d1:07:ac:cb:09:20:00:
44:8e:ff:58:bc:57:dd:d8:28:dd:79:8d:b8:84:c4:98:e3:64:
37:97:30:e8:6c:ee:68:d7:33:40:02:10:83:61:1c:86:2e:b5:
6a:0d:5a:bc:6c:be:ca:cd:24:96:cb:6e:65:77:da:2b:26:76:
f9:6d:79:ac:be:05:aa:cc:46:a4:87:2a:e6:fe:12:bc:17:13:
57:ee:e7:92:89:ba:66:60:61:f2:0d:ab:66:74:9d:b1:2b:48:
09:97:35:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:47:13 2025 by rpki-client