
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft
File: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft (raw, json)
Hash identifier: ZEjVkxNc/GwTfI4QwO9q8aGNk47ICrcKUsGWQCKsKZg=
Subject key identifier: 0A:60:EF:B9:B3:59:78:15:61:1A:B2:FA:45:E0:35:FE:35:54:0D:96
Authority key identifier: F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D
Certificate issuer: /CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D
Certificate serial: 13CBA9CCF71CDCBB330125F8E0D947A947499A13
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft
Manifest number: 0274
Signing time: Thu 05 Mar 2026 22:51:18 +0000
Manifest this update: Thu 05 Mar 2026 22:46:18 +0000
Manifest next update: Mon 09 Mar 2026 04:07:18 +0000
Files and hashes: 1: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: BgFgmH5jU+LRrTrgwlopaW2g0oi0zIzrx7nTuzaPyLk=)
2: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl (hash: A6vgdOLMi0OHVB9gB2JEdF7p6gQ/+7IUmIgfkA5W0Bw=)
3: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: McME/dbo6pUSMwDf337mfAJTZsh9zKeBHm2ij6JMlyA=)
4: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: kaLOnVcH2eiN/bRpUUdlc2RBWfunbSbF+3c/cmkKp/Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl
rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 04:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:cb:a9:cc:f7:1c:dc:bb:33:01:25:f8:e0:d9:47:a9:47:49:9a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D
Validity
Not Before: Mar 5 22:46:18 2026 GMT
Not After : Mar 9 04:07:18 2026 GMT
Subject: CN=0A60EFB9B3597815611AB2FA45E035FE35540D96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:7a:62:13:16:dc:e0:3e:6d:64:31:79:58:
aa:42:3f:6e:30:ff:a2:f7:f1:0f:41:c0:ec:e4:ca:
2b:52:89:af:4e:d6:34:47:90:60:49:ec:6f:26:3d:
f2:c7:07:8a:96:f6:cc:77:a7:32:1b:f8:6c:a9:1f:
e9:c2:00:84:14:e0:91:60:f6:ff:98:fd:88:12:f3:
3c:77:40:8c:80:a8:3c:c5:88:ec:e2:58:76:f5:a5:
7b:b6:9d:ea:69:01:ae:66:db:b9:1a:6b:dc:21:a7:
e2:b6:23:a4:e2:be:da:b0:a4:46:e8:14:86:b3:7f:
37:be:3b:14:e3:48:2a:af:81:c2:ce:66:cc:37:da:
30:cc:fd:5a:97:85:af:65:74:7d:fc:a9:66:f7:42:
12:d4:4f:98:57:6e:cd:46:9b:07:37:b5:28:32:82:
1a:2a:4d:ed:84:36:a8:d4:4e:51:86:f3:df:ef:24:
56:4d:35:5e:e2:7d:56:16:5b:f1:c7:90:c6:67:07:
00:a7:bc:bd:2e:d2:85:b2:42:d1:84:11:9c:d6:d5:
f6:63:ad:a4:cd:b8:55:04:02:5b:ba:dd:ba:85:35:
10:0d:03:80:0d:82:a7:79:a2:64:91:89:9e:fa:6a:
ef:82:9c:c2:55:62:f7:35:3c:88:0c:00:d9:92:cc:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:60:EF:B9:B3:59:78:15:61:1A:B2:FA:45:E0:35:FE:35:54:0D:96
X509v3 Authority Key Identifier:
keyid:F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:98:9b:d1:5e:19:8c:df:f2:c0:d7:0e:88:3f:28:41:39:5e:
4e:29:cc:64:92:2b:88:ab:88:d6:c9:e3:00:bd:88:ec:7b:1a:
95:76:cb:f6:06:29:5e:2c:4e:dd:c0:46:8e:23:81:23:4b:bd:
f7:77:b7:68:e2:dc:8a:1a:b3:09:de:eb:48:5a:f6:95:2e:19:
fd:6d:9e:29:74:5c:0b:40:2d:98:aa:59:3e:d3:3a:d4:98:6d:
94:b7:b2:96:49:67:c0:ba:a2:a4:32:96:ba:f6:c1:ae:b7:a5:
90:5b:7d:6e:5e:bc:9f:15:df:81:8f:34:f4:ac:64:1c:ca:21:
fb:e6:2d:a0:5a:17:d0:8d:0b:ff:66:e6:c0:2f:10:7d:71:9b:
40:f9:fc:21:c8:4b:d5:ab:ae:bd:71:86:eb:a7:69:7b:ef:2f:
4c:17:bc:1f:bc:19:95:66:88:a0:a5:99:9c:da:25:62:da:37:
88:8d:fa:bd:58:97:50:ae:cb:4d:22:44:ef:a6:fe:36:52:ba:
16:8f:11:dd:91:a3:e4:3e:1b:2f:d3:61:23:4f:30:5f:c4:ff:
2f:cb:8e:2d:2a:1e:a4:51:56:63:2d:76:62:13:b8:c7:96:fe:
73:86:76:ad:b5:d2:90:57:f7:1b:60:24:41:f3:a6:be:ab:0d:
11:f5:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 02:10:59 2026 by rpki-client