
$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft
File: E3928623409C1C10E292F838F8308E11636E6C03.mft (raw, json)
Hash identifier: /7Ukh0E+igz3m7R+rKOWLMmhZF209VEOQGC8OStCrIY=
Subject key identifier: 51:5E:4F:F4:30:C5:65:0D:16:C6:8C:18:91:2C:D2:6E:5D:21:80:B0
Authority key identifier: E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03
Certificate issuer: /CN=E3928623409C1C10E292F838F8308E11636E6C03
Certificate serial: 529A518F90B5721320228D253A406EDA0BC71B3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft
Manifest number: 010A
Signing time: Fri 06 Mar 2026 18:42:26 +0000
Manifest this update: Fri 06 Mar 2026 18:37:26 +0000
Manifest next update: Tue 10 Mar 2026 01:28:26 +0000
Files and hashes: 1: E3928623409C1C10E292F838F8308E11636E6C03.crl (hash: 809uyk3WJKt1aYz6AJv3Fy1bQNndw3M/wM777lG3DVg=)
2: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: yKi1/CgLy/vSnVRFpQJ8qbRC3Gfhckznl3idTXbJhUE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl
rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:9a:51:8f:90:b5:72:13:20:22:8d:25:3a:40:6e:da:0b:c7:1b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3928623409C1C10E292F838F8308E11636E6C03
Validity
Not Before: Mar 6 18:37:26 2026 GMT
Not After : Mar 10 01:28:26 2026 GMT
Subject: CN=515E4FF430C5650D16C68C18912CD26E5D2180B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:9e:23:32:b7:8c:e4:8f:5e:e6:5b:74:8d:
c6:30:ce:6b:80:a7:76:47:8a:62:5b:9d:b4:a6:d5:
6c:b7:65:2a:44:f4:3e:5d:f5:6f:c1:d4:2f:12:87:
a2:8a:03:35:d4:cf:5b:e2:92:98:1c:1b:31:d0:a6:
62:c1:66:b2:2c:1c:f2:67:b2:91:2a:99:7f:04:19:
96:b0:00:a5:ee:42:a4:5f:2b:07:cd:db:f6:b0:a9:
d9:45:d5:95:42:58:b4:c8:29:8e:5b:f8:30:82:d0:
a0:b4:07:05:be:f3:7b:3a:9b:9d:c4:ba:f0:83:3f:
04:6a:ff:c7:0a:00:5b:86:d6:8b:d1:be:06:ee:92:
a4:54:f6:74:65:ae:fa:79:b5:b3:17:b1:5e:35:a2:
87:99:19:ce:7f:25:35:be:2d:3e:4a:87:2e:23:ff:
41:bb:42:06:56:2a:ad:44:f5:3c:90:66:f6:2d:5f:
c3:6d:0a:95:21:8a:55:c5:97:a1:12:2a:bc:96:2a:
9a:97:7a:b3:01:6a:d6:0b:ab:04:34:01:08:60:c3:
ba:24:89:6b:a0:46:e2:15:48:ec:cc:8c:83:17:24:
cf:26:e2:bb:82:78:a7:aa:69:23:36:b6:47:66:4f:
15:09:a9:9b:9e:04:0f:bb:49:0e:cc:bf:21:6e:d2:
b0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5E:4F:F4:30:C5:65:0D:16:C6:8C:18:91:2C:D2:6E:5D:21:80:B0
X509v3 Authority Key Identifier:
keyid:E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bd:b4:32:99:e4:d8:da:8f:49:de:e1:87:f9:80:4a:c3:f8:
7d:6c:88:c2:24:0c:37:a9:84:3d:98:d5:3e:e6:0c:30:aa:9a:
c2:98:d6:70:fb:42:0d:ac:31:cb:5e:b4:af:fb:2c:8c:25:fd:
29:03:2d:7c:66:8c:36:77:22:76:40:f4:bd:2a:5f:97:dd:aa:
ec:53:63:3e:5d:f4:16:4f:b6:8f:41:d2:49:18:61:84:ca:de:
7e:6f:76:17:f5:3e:44:6c:c7:18:13:03:a4:32:df:e1:50:69:
fe:c5:b0:32:0b:95:3d:74:3d:86:e2:3a:a4:ad:cc:11:ce:18:
35:27:ef:ca:6c:d6:ae:01:a1:50:30:ce:a2:0f:6c:bd:7d:c5:
f8:b1:bd:06:dc:48:a5:34:60:5f:14:ce:d0:07:bc:b7:a4:4b:
45:ed:bc:b7:35:b3:01:c8:d8:0f:ae:74:49:95:c6:43:30:ae:
c1:5e:d7:37:12:fa:83:2a:1f:83:a2:26:03:86:68:fe:0c:4e:
ba:ec:10:7e:58:44:35:93:c1:f1:0c:26:48:ad:d6:e0:c2:ce:
4b:66:e2:2f:1a:d7:df:0c:0d:cf:3d:0c:df:27:a9:bd:53:e0:
c8:bd:81:93:a7:17:2b:fe:71:a3:59:97:be:38:0a:c1:ef:fb:
ab:f0:47:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 02:12:31 2026 by rpki-client