
$ rpki-client -vvf repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
File: E44D4DE701D932713536A084F76894A6B0473F5E.mft (raw, json)
Hash identifier: eU3NAGdVjLz9nVaM4QecuOPw/r/vzA7bXbTRk7w7E2Q=
Subject key identifier: 48:5E:60:C2:A5:5E:C0:20:E3:15:47:66:63:9E:04:AD:26:94:F1:82
Authority key identifier: E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
Certificate issuer: /CN=E44D4DE701D932713536A084F76894A6B0473F5E
Certificate serial: 0F2F833D20F4AA6E51A066956B892E1A640C9BD0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
Manifest number: 0288
Signing time: Fri 20 Mar 2026 01:52:27 +0000
Manifest this update: Fri 20 Mar 2026 01:47:27 +0000
Manifest next update: Mon 23 Mar 2026 02:06:27 +0000
Files and hashes: 1: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (hash: otSYaOpWUX7/R5silYI2qFwHrea2Nhn73//fdSkzDls=)
2: 3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (hash: 4c0IK//t9QV9eDZcRuS2szDSLoJBAnWIV4hCGmSoEiE=)
3: 3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa (hash: W4u8P1SQQa3NmSN5ZCqGSVGNmCx4edXu6e4flVOIf2c=)
4: 3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (hash: bl/n5bigRNUdzOdSRBMJ4xavg1ElwqsMKJXdZov+BBc=)
5: E44D4DE701D932713536A084F76894A6B0473F5E.crl (hash: 95BWwS0T92jm/qogTxjdCIaLM0y7Ayc8E3HcaaqocwE=)
6: 3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (hash: 7QCopDe7hDkeVtB42/2nmhBi3ICh26qKFWh8viPiuG0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl
rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Mar 2026 02:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:2f:83:3d:20:f4:aa:6e:51:a0:66:95:6b:89:2e:1a:64:0c:9b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E44D4DE701D932713536A084F76894A6B0473F5E
Validity
Not Before: Mar 20 01:47:27 2026 GMT
Not After : Mar 23 02:06:27 2026 GMT
Subject: CN=485E60C2A55EC020E3154766639E04AD2694F182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:1a:8d:76:61:14:04:a0:d6:9b:04:a7:59:
63:c5:bd:a7:61:2a:5f:3f:dd:ee:0c:d3:95:f2:3c:
e0:17:3c:52:73:47:dd:71:51:c8:da:f6:e0:94:5a:
63:53:8c:93:af:04:6b:8a:1b:29:35:08:ee:ac:50:
68:48:53:4a:55:f6:c8:7f:44:67:5f:01:65:e6:be:
d1:80:82:48:c4:fb:67:04:4d:bb:e4:e9:e8:93:53:
af:ff:3d:c1:78:c0:83:0d:8c:2f:58:b5:f9:91:4b:
77:81:97:90:4d:eb:41:40:36:02:7d:21:fd:39:c0:
d6:f8:1a:a6:03:f8:66:99:56:2b:ee:0e:05:c0:2e:
41:aa:f0:18:1c:77:2e:5c:53:0d:9a:18:1c:6d:e0:
9a:cf:d5:88:c4:9d:e5:ea:fd:d5:12:33:77:ba:a8:
69:db:69:3f:cc:40:f4:47:1f:51:66:9c:cc:21:79:
b2:51:67:7a:62:36:0a:70:0c:af:9d:3f:8d:bd:12:
64:92:88:56:6d:2c:15:06:fb:0e:d8:fd:3a:bb:d8:
36:7d:0a:ba:48:1f:86:79:fc:a1:5a:c6:06:7f:39:
03:0f:6c:fd:b9:21:7d:2d:03:9d:f5:b2:ad:e9:c1:
60:b6:f0:19:fb:ee:e2:13:f3:c9:90:e3:8e:67:29:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5E:60:C2:A5:5E:C0:20:E3:15:47:66:63:9E:04:AD:26:94:F1:82
X509v3 Authority Key Identifier:
keyid:E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:63:5b:e1:a6:76:db:01:48:a7:0e:0c:4c:15:fc:37:39:ae:
58:1c:37:98:4f:09:2b:4f:5b:7f:41:37:7c:67:76:20:49:16:
d3:45:f5:83:8b:a6:d5:dd:e5:8b:44:ac:e9:41:f8:00:99:f7:
9e:d2:e9:2c:36:8f:18:1b:32:09:7e:e0:53:ff:63:6f:6c:8c:
74:eb:87:3a:14:ee:0d:dc:e9:d3:0f:72:2a:b1:1e:30:3c:fb:
92:70:50:f9:92:d0:40:ba:e6:13:b2:47:55:35:fb:44:2e:39:
20:48:ca:c4:42:3b:87:5c:e6:d8:fe:13:f7:a2:43:13:5f:7f:
ec:58:29:a4:94:20:42:c4:ff:7e:8d:70:0d:af:14:5c:e7:1e:
ec:8f:25:f4:db:9c:3f:55:3c:54:51:b3:83:64:79:ba:20:db:
46:8d:00:89:b3:51:7f:2f:0f:00:29:70:15:25:e2:a6:63:8b:
40:2a:fd:cc:96:88:65:58:c1:d6:df:69:43:3f:45:22:ea:90:
b7:1b:99:26:ff:5a:6b:8d:87:bb:c7:3b:9f:a6:84:0c:31:05:
38:ab:92:cd:96:36:4a:cf:e0:64:4e:21:0f:6e:02:d0:1a:78:
3c:bd:14:56:9b:46:17:84:39:b1:de:c5:e1:50:d9:20:16:26:
de:ff:af:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 02:56:49 2026 by rpki-client