
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
File: 0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft (raw, json)
Hash identifier: cOHCu3mZrgksa/HxlklT2oIdwpMIX+W0D3CYU4XLupE=
Subject key identifier: 04:42:7C:1F:BD:7D:B9:E3:1E:4A:44:FA:8E:20:95:53:6F:9D:47:0D
Authority key identifier: 0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81
Certificate issuer: /CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581
Certificate serial: 6BB3641FFEF937712F03EA78635610928EE1B4CB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
Manifest number: 014E
Signing time: Wed 18 Mar 2026 21:11:30 +0000
Manifest this update: Wed 18 Mar 2026 21:06:30 +0000
Manifest next update: Sun 22 Mar 2026 03:01:30 +0000
Files and hashes: 1: 3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa (hash: N8BYJ8Ja8cI/O8F5jWMsSdJz8j5GkTqxxcCM4rTW7ZA=)
2: 3130332e3235322e3130302e302f32342d3234203d3e203539313437.roa (hash: Q18iWCzyIgnJ03JWHzXheCWpGYNBjtSoC3dIdyCS6t0=)
3: 3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa (hash: MBFnv7ZoP4iaMV1OJ7B+JK9tAnoUgV3W7EEXgSWuTJc=)
4: 0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl (hash: yIU06Nc2Xja/VOvY4MPfSEOiStcp7pTc457xfGpDWxU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl
rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b3:64:1f:fe:f9:37:71:2f:03:ea:78:63:56:10:92:8e:e1:b4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581
Validity
Not Before: Mar 18 21:06:30 2026 GMT
Not After : Mar 22 03:01:30 2026 GMT
Subject: CN=04427C1FBD7DB9E31E4A44FA8E2095536F9D470D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:bb:9c:49:e5:79:71:03:ec:f9:f7:43:ae:
f6:7b:13:76:be:a4:90:26:88:74:c3:04:a2:85:0a:
60:ce:93:e1:8f:0b:a6:2e:fc:6b:ba:a3:43:78:ac:
49:ca:4c:03:7c:49:3f:38:7a:2d:53:a1:25:dc:ab:
de:54:51:54:a8:e8:49:32:7f:3e:0d:60:89:98:49:
44:6b:e9:b4:72:5f:9b:23:08:c3:0b:61:75:43:11:
4e:94:ff:fd:87:02:85:1c:4d:4b:7d:7e:80:e0:64:
9a:a9:d8:21:e0:c6:fc:a2:e6:be:cb:bc:0e:e5:75:
12:6d:97:b1:e0:68:b3:7b:74:c4:0a:d7:6f:80:91:
44:09:41:21:63:18:ed:ad:a3:ca:40:44:2a:f5:14:
30:5d:24:d5:c1:3d:e1:bb:3b:2c:b1:96:a6:a5:6e:
c9:9e:eb:b9:04:9d:66:92:bf:04:6c:44:60:f4:a1:
77:f4:2c:a2:3d:2b:94:b3:79:6f:34:2e:ef:d8:01:
ca:44:f4:3e:24:63:38:85:1e:b3:64:bf:b9:01:57:
57:33:88:f9:af:f9:d2:ba:14:f1:25:67:9b:20:00:
0e:63:33:cf:81:22:a9:af:2f:b3:68:73:22:c0:d2:
ce:43:cb:d0:96:64:97:cd:cf:cc:ce:5e:f6:c2:3f:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:42:7C:1F:BD:7D:B9:E3:1E:4A:44:FA:8E:20:95:53:6F:9D:47:0D
X509v3 Authority Key Identifier:
keyid:0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:77:19:4e:53:15:7d:dd:b7:9b:51:79:9c:0b:5d:e6:9a:2c:
cd:63:01:59:a9:43:80:89:0d:60:ab:25:52:73:57:74:34:24:
3f:41:4e:43:6a:f5:63:7a:b0:5f:54:ca:27:b5:e5:3f:9b:b8:
ee:88:75:fb:e9:7b:f0:bb:be:17:2d:d2:27:a0:f6:fc:1e:7b:
9f:37:52:44:88:a1:8d:78:0d:91:35:aa:2d:92:3f:2d:cd:cb:
a7:be:11:bd:c1:0b:64:db:de:54:00:f4:89:81:b2:df:e7:84:
67:7a:17:ee:80:9c:40:fb:fc:58:4f:9c:1f:95:02:e3:82:77:
57:6e:b4:05:4c:51:c0:33:9f:c0:6f:0b:65:91:8c:71:2e:dd:
a7:76:46:66:bb:d9:ea:54:91:51:79:60:ff:25:f5:3b:9a:19:
c6:88:9b:dc:2f:46:ca:6c:28:9d:14:9d:0b:ea:0b:17:e8:c4:
24:fe:6b:59:9a:a3:74:0b:2e:72:4c:35:75:23:55:b4:06:9f:
f9:4d:45:ff:bc:30:15:1e:51:e8:16:67:17:5c:fd:ad:dc:74:
cf:9b:dc:30:92:f3:b6:3f:44:aa:e7:61:40:30:54:77:a2:b5:
67:f3:ce:1a:d1:7b:6d:5e:ae:82:8b:c2:a8:cb:32:83:fc:d7:
3c:16:43:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:25:40 2026 by rpki-client