
$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft
File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json)
Hash identifier: Zb/lsZQdFRK+WcArf/ueOwaoNwMJ4uOaDdx9BNVcJCk=
Subject key identifier: A8:60:66:FE:20:02:95:31:27:B9:36:C0:5C:30:AE:C0:40:13:B6:D9
Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8
Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8
Certificate serial: 603629C1BB8FE26F09DB664F5739149D9F850592
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft
Manifest number: 0145
Signing time: Fri 06 Mar 2026 16:20:46 +0000
Manifest this update: Fri 06 Mar 2026 16:15:46 +0000
Manifest next update: Tue 10 Mar 2026 00:53:46 +0000
Files and hashes: 1: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: 1dTygyk/7ehjmuKZCXq/8/I9EJofLtz0v42TURzqMFw=)
2: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: BP9+uPQRk//uX/xArzDy7Pi4suZlX1J0tIjpIybdn9c=)
3: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: VPkKq5pW4icrUWwOkyNSfwGvVjdptRStLH0drWvxYBA=)
4: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: Us649gKgLXgCXiwIAPzSRfT2vwc2Xrs3/JnrzSYazTY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl
rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:36:29:c1:bb:8f:e2:6f:09:db:66:4f:57:39:14:9d:9f:85:05:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8
Validity
Not Before: Mar 6 16:15:46 2026 GMT
Not After : Mar 10 00:53:46 2026 GMT
Subject: CN=A86066FE2002953127B936C05C30AEC04013B6D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:97:65:a3:45:31:4f:2e:30:21:f1:2c:99:88:
4f:1d:08:46:78:ff:14:48:1f:96:db:75:0c:a5:5c:
03:44:8a:8d:27:ad:e8:a5:7b:2f:2e:2e:61:2f:d5:
79:b6:fb:84:6f:79:ce:f6:d1:8a:cb:93:54:3f:58:
fa:41:1b:90:61:19:fb:b2:f0:94:90:50:61:e3:b3:
4a:22:79:e5:c0:20:2f:b7:db:4c:c6:62:5f:26:44:
ac:24:d5:5d:38:94:26:fe:29:46:fa:19:55:05:b3:
98:42:3c:b7:1f:e2:ee:b9:e7:08:49:cd:85:dc:06:
fb:59:7c:c9:e3:03:4a:e1:23:ab:f5:25:0f:a1:1a:
5f:1c:7c:7f:6c:e4:38:ae:16:08:a3:58:f1:ee:bd:
b1:80:51:32:d1:5c:14:4a:30:25:28:b0:03:5d:cd:
c2:7e:7e:ae:28:f0:f9:a5:c8:b2:47:8e:fd:f8:d9:
fb:81:49:f9:70:02:8a:57:50:ac:7e:63:ab:18:06:
53:e1:ce:01:c5:34:d4:12:a1:7e:40:31:da:8a:19:
08:ca:38:f1:1f:70:fe:38:ea:6a:25:cd:8c:8d:da:
ca:e3:35:ba:6a:6d:33:1e:22:2e:47:2e:7e:99:0b:
91:aa:2a:11:f5:2a:91:8b:e6:89:34:e1:d6:8b:2f:
4d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:60:66:FE:20:02:95:31:27:B9:36:C0:5C:30:AE:C0:40:13:B6:D9
X509v3 Authority Key Identifier:
keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:eb:0c:e7:9a:eb:88:b3:7b:1f:b7:c1:95:ff:78:1b:36:7a:
e1:4e:4a:5d:c2:a5:a2:e1:0a:83:45:28:5a:a8:69:59:fb:47:
c6:fd:29:26:07:bc:f8:c3:44:b2:4b:ae:98:ec:ca:4c:2d:42:
ac:41:40:bb:7f:ad:5f:95:27:5b:d3:b5:37:99:64:1f:1d:dc:
3e:39:65:5f:7e:1d:a9:28:5a:1d:60:68:3f:46:4c:8c:1d:14:
51:44:aa:a5:98:17:36:87:2d:68:38:f1:01:f9:e8:58:79:bf:
4a:7c:5e:1b:16:0d:09:00:a5:9e:e8:83:64:ce:ea:0c:4a:ff:
80:50:9d:3b:e3:0d:05:ea:65:39:74:20:1e:6b:fe:a7:b7:10:
d0:b9:8b:83:0c:0c:06:da:73:9b:a8:fd:6e:c7:3b:01:ec:9f:
ac:62:52:db:e0:f8:bf:f8:17:38:3c:1e:15:18:f4:e3:26:72:
b2:ff:bb:1b:4f:81:d0:ab:c2:26:c3:7a:a7:05:35:dc:d3:55:
72:a7:aa:fc:e4:ac:86:37:cf:9f:d8:78:7a:ab:73:13:fd:a2:
c8:4a:fb:da:af:82:c5:cf:24:d1:79:64:76:5c:65:b2:00:b3:
50:ce:50:cd:a6:2c:ff:3e:c2:07:76:f5:cd:7e:54:c9:cc:88:
8f:f6:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:50:40 2026 by rpki-client