
$ rpki-client -vvf repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft
File: 1678F34665D7A5281AECD895B892F07EA136CF72.mft (raw, json)
Hash identifier: MYdvyP6wLOYegaySS1ZWMckLdI6z4zofV1lPBtZMfwo=
Subject key identifier: 74:34:31:5C:FE:28:90:76:5D:07:E2:B7:3B:7F:7F:1F:1C:9E:B6:3C
Authority key identifier: 16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72
Certificate issuer: /CN=1678F34665D7A5281AECD895B892F07EA136CF72
Certificate serial: 06274BA8D6EB4FF5BE4CD8FF1E3185B3F98F8F08
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft
Manifest number: 051E
Signing time: Mon 03 Nov 2025 03:11:18 +0000
Manifest this update: Mon 03 Nov 2025 03:06:18 +0000
Manifest next update: Thu 06 Nov 2025 09:11:18 +0000
Files and hashes: 1: 1678F34665D7A5281AECD895B892F07EA136CF72.crl (hash: k+gfxVLg1GdArP/mpM/hl1tDrPeWO6muLyL3Rj1q6j8=)
2: 323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa (hash: D6yeTZeAuFxEtqmSKbk3UU6vmrij1x8nL+p5b0eR7L4=)
3: 3230322e3132392e3232342e302f32322d3234203d3e203338373831.roa (hash: KKdgbWLDDouRzCILnrDemBFX6Nv6Y8LRFzPrNN7B8tE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl
rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 09:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:27:4b:a8:d6:eb:4f:f5:be:4c:d8:ff:1e:31:85:b3:f9:8f:8f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678F34665D7A5281AECD895B892F07EA136CF72
Validity
Not Before: Nov 3 03:06:18 2025 GMT
Not After : Nov 6 09:11:18 2025 GMT
Subject: CN=7434315CFE2890765D07E2B73B7F7F1F1C9EB63C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:11:4b:52:67:98:0e:bb:ce:e0:93:8d:5e:
24:c1:f1:a0:06:05:d9:cb:ee:d1:52:a2:e1:c0:84:
59:32:01:c5:cc:14:15:c8:c8:dc:a0:0e:d6:11:a5:
9b:80:71:1e:60:8c:7f:df:e8:7e:3c:0e:22:11:a2:
83:0a:ab:d2:a2:29:f3:4e:13:cf:10:80:b6:61:82:
c7:93:b7:71:64:71:e8:3d:0e:47:85:1f:56:64:c0:
b7:cd:4c:aa:4d:83:27:fd:9a:02:fa:a7:02:54:5e:
04:69:87:07:a2:6f:ca:1d:90:72:2e:f3:f3:de:0b:
9d:12:6a:5b:e5:16:5f:6c:56:ca:ae:92:c6:61:69:
d0:41:fb:06:23:1e:64:83:16:61:38:e7:02:3f:4c:
9c:90:d9:4c:ca:07:b8:6b:bd:f5:29:43:80:3a:8f:
9c:23:df:55:42:85:a9:2a:5a:c0:85:fd:05:ca:41:
b0:2c:67:1c:96:ec:a5:aa:db:4e:e5:03:ce:e2:f8:
fe:b1:84:c1:46:21:bd:d0:59:6d:5c:6b:9f:fb:8f:
8f:c2:22:7e:ac:01:87:ee:9a:d9:5b:72:ed:ff:3d:
c8:e0:b6:b0:e3:1f:01:25:c3:d3:41:f3:47:d0:42:
9e:a1:5c:a2:da:fe:b8:24:4f:d9:25:ae:31:9c:01:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:34:31:5C:FE:28:90:76:5D:07:E2:B7:3B:7F:7F:1F:1C:9E:B6:3C
X509v3 Authority Key Identifier:
keyid:16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:85:d5:27:f6:01:e5:fb:70:3e:e1:8d:9f:da:3e:6c:8b:b8:
20:66:be:ea:06:74:ff:37:15:8e:1a:98:ba:bb:16:1d:3b:6e:
b9:95:5a:65:36:d2:ec:43:f5:84:f8:ca:5a:bc:39:96:e2:76:
b2:85:97:06:b3:1a:cd:4f:30:02:d2:b1:fe:a0:b7:05:9e:25:
aa:0b:07:e5:68:f9:14:ff:e7:2a:cb:da:21:55:d3:88:f5:bd:
b3:3b:3f:63:d9:5d:6b:9c:8d:7e:5b:d6:71:1b:7e:fa:0d:e5:
5f:89:44:f8:73:34:20:6b:ce:f1:56:2c:ee:7c:c4:70:b4:d7:
72:82:27:2d:98:ea:6f:99:a4:11:47:06:d2:96:08:5d:8c:f4:
35:7f:68:30:58:1c:fc:ca:ed:49:61:3f:89:2f:e0:4e:e1:dc:
b2:18:c3:e4:44:94:14:60:54:2c:75:29:c9:e4:d4:cd:09:03:
9b:44:a6:46:46:1a:9c:79:c3:e1:1c:fa:fe:d1:97:81:00:82:
e1:aa:e0:39:ab:e0:b6:8f:40:9b:11:ee:4b:f4:23:68:34:4d:
fd:23:2a:df:d2:63:31:fd:c8:bf:16:9d:7b:b1:3e:2c:90:eb:
18:19:54:1c:5c:59:96:40:a3:16:e2:1e:06:2a:a8:24:28:3e:
7a:b2:cb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:36:57 2025 by rpki-client