
$ rpki-client -vvf repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft
File: 993D6DBC0B37BB59CEA86CE024A349353C57D366.mft (raw, json)
Hash identifier: rrWPbamPLVE4agmIR51jYsaXDeMCzlEQwXcx8Xuobxw=
Subject key identifier: 59:8A:47:5A:16:AB:CA:42:B6:D4:50:8B:56:28:13:34:78:48:44:A4
Authority key identifier: 99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66
Certificate issuer: /CN=993D6DBC0B37BB59CEA86CE024A349353C57D366
Certificate serial: 6A007D1AFEE24091A0BFE474A5F3158F29D6D6E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft
Manifest number: 0220
Signing time: Wed 05 Nov 2025 05:22:02 +0000
Manifest this update: Wed 05 Nov 2025 05:17:02 +0000
Manifest next update: Sat 08 Nov 2025 06:19:02 +0000
Files and hashes: 1: 993D6DBC0B37BB59CEA86CE024A349353C57D366.crl (hash: SQiZjAyMZUE3REajUB8PKvuiMX81fcwhFouDnajX/po=)
2: 3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (hash: cdGAeUhe3kIPmDecWgpPKnokA1KeiEEUi4vBzlg/GUY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl
rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 06:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:00:7d:1a:fe:e2:40:91:a0:bf:e4:74:a5:f3:15:8f:29:d6:d6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366
Validity
Not Before: Nov 5 05:17:02 2025 GMT
Not After : Nov 8 06:19:02 2025 GMT
Subject: CN=598A475A16ABCA42B6D4508B56281334784844A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:ed:e3:d8:fd:71:a9:e8:04:82:32:69:c1:
cd:90:cc:1f:1b:05:a9:31:d9:c9:8e:89:95:bc:8f:
a5:25:52:da:89:1c:08:7e:89:ab:15:d6:f1:46:f8:
cb:0f:ca:d0:56:4e:a9:3e:41:50:24:20:47:52:46:
c7:d5:a5:b1:60:7c:6d:14:8f:42:8f:5b:b0:8a:17:
9a:71:f3:63:4c:62:3b:f5:44:52:14:87:3d:24:38:
6f:89:35:6f:91:42:a3:ca:86:29:79:b4:71:98:73:
52:d7:ed:c0:56:a6:ec:26:02:07:e0:f3:3d:e5:4f:
cc:83:ac:d5:33:5d:5f:60:9b:5c:35:44:87:d4:39:
ba:bc:14:6c:52:45:31:69:ee:f6:95:be:52:f9:0b:
02:f9:5e:04:29:68:8e:39:fb:c6:85:fc:8a:22:eb:
42:f4:b1:49:82:72:05:d7:9d:21:ea:18:40:c8:ca:
13:b2:cd:93:c1:f6:6a:5b:06:5d:3e:1f:f2:c1:19:
f2:4b:81:c3:e1:34:45:a6:05:65:ea:60:56:5d:b1:
fa:82:0a:a1:27:bf:6c:a6:fa:1e:86:74:0c:21:92:
51:5d:b7:0e:27:25:9f:82:c6:de:34:dd:0a:7c:3f:
2b:0a:34:4c:7e:9d:9b:e7:ce:21:9e:90:19:a3:1e:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8A:47:5A:16:AB:CA:42:B6:D4:50:8B:56:28:13:34:78:48:44:A4
X509v3 Authority Key Identifier:
keyid:99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4d:c9:78:9c:ad:d1:8a:ff:c7:2d:07:90:7b:ea:13:e3:eb:
7f:96:46:07:a7:76:d3:a8:f9:6c:3b:79:b7:88:4f:85:76:f8:
24:e3:ba:7c:5d:2e:2e:c8:0c:65:73:5a:d6:42:b8:c1:dc:b8:
11:0c:34:ed:35:9d:90:33:aa:66:77:05:e8:d3:a4:c8:4e:10:
83:7c:70:07:11:56:1e:89:9c:ff:40:42:0a:45:ad:a8:53:2f:
48:ca:06:65:38:1e:3f:f0:85:30:ea:a7:56:12:bf:23:79:05:
c3:10:4f:a4:be:27:d4:93:14:32:32:3f:80:29:b3:62:be:fc:
ca:ca:3c:13:b1:51:dd:d1:2a:67:13:58:5f:46:ec:07:10:c5:
6e:f7:35:62:58:99:3c:51:56:98:f2:d8:29:92:57:cb:20:bf:
16:f0:a6:3c:1f:57:2c:8a:b6:99:d1:45:47:2f:2d:da:2b:af:
01:03:f1:f3:cc:69:f5:14:51:b7:1b:af:d5:21:fc:a2:40:d5:
4e:41:8b:77:e1:17:30:1c:5f:ed:10:a7:54:1c:85:e5:02:5f:
34:03:77:c6:0c:eb:76:9e:cf:0b:fc:a4:89:b6:34:4e:2e:e6:
74:24:f4:c2:f8:d7:3e:1a:ec:89:92:1a:66:58:37:56:c6:8c:
aa:e0:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:51:34 2025 by rpki-client