
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft
File: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft (raw, json)
Hash identifier: 4DxO84t1p9EZBM2SPVSgWm9ui4qzrAsAwdcVEuZym4c=
Subject key identifier: 22:D4:21:9B:8A:CE:36:78:EA:E2:85:24:9C:97:56:22:44:39:73:EF
Authority key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33
Certificate issuer: /CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633
Certificate serial: 33DD2FF09D58AC8E49BC2A6BF6527E6ACB0420D2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft
Manifest number: 0233
Signing time: Sat 07 Mar 2026 16:50:58 +0000
Manifest this update: Sat 07 Mar 2026 16:45:58 +0000
Manifest next update: Wed 11 Mar 2026 01:53:58 +0000
Files and hashes: 1: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl (hash: 76VkDa4OdQRJb1IC1rEj9rwU/jTdNI1OWw181Fv210g=)
2: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: Ad9vTNOJwKofaap6S433q9PQ++RzqFFroze72orM9pE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl
rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:dd:2f:f0:9d:58:ac:8e:49:bc:2a:6b:f6:52:7e:6a:cb:04:20:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633
Validity
Not Before: Mar 7 16:45:58 2026 GMT
Not After : Mar 11 01:53:58 2026 GMT
Subject: CN=22D4219B8ACE3678EAE285249C975622443973EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:86:d7:39:8d:17:7d:9c:be:cd:8e:00:ee:
8e:ac:f2:55:26:88:b8:71:ec:2f:5f:08:d2:48:7a:
51:07:94:82:1a:9d:e6:c9:fd:d6:53:04:ef:b1:7a:
88:31:76:fc:b0:e8:ea:59:66:1e:3d:76:cf:d4:f9:
2b:37:ca:76:ec:f0:3f:77:30:ce:9c:a5:4a:39:97:
38:80:e5:3b:8d:20:2e:6b:c5:83:83:54:53:4c:2f:
25:47:61:54:75:51:60:95:dd:0c:d8:87:aa:c8:27:
32:04:fe:c5:2f:08:06:13:47:17:f6:c6:f9:1e:7a:
b4:65:32:b2:22:77:92:ac:0d:a0:76:cb:0e:95:d0:
95:9c:5e:b0:86:4d:2f:3b:62:f0:41:31:dd:86:84:
16:8b:3d:07:ed:8c:71:7c:4d:b2:3a:10:f3:47:23:
4f:c7:85:c7:e9:4e:92:d1:60:17:58:67:38:64:3e:
56:65:c1:88:df:f0:86:1c:f4:69:d4:4e:29:2d:7a:
21:27:64:62:e0:8b:33:02:2e:c6:17:df:6e:16:67:
b0:d2:05:3e:dc:2b:fb:56:0a:6f:23:6b:f9:2e:fc:
ce:ab:e0:ca:65:f0:a2:50:aa:54:4f:f3:28:05:3d:
ee:7a:22:12:ed:29:c8:89:9b:4d:6f:86:a0:47:2e:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D4:21:9B:8A:CE:36:78:EA:E2:85:24:9C:97:56:22:44:39:73:EF
X509v3 Authority Key Identifier:
keyid:1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ea:29:f0:ee:82:58:af:28:8e:ef:81:ac:44:59:84:64:41:
7e:ed:c2:86:b5:12:ff:60:b7:34:9d:f7:e1:5b:bd:30:48:ba:
dd:23:a4:1c:eb:08:7b:0a:d9:2d:73:7f:72:25:60:65:67:8a:
80:b0:88:87:f6:c7:02:1f:79:62:01:e5:0f:95:6c:84:e6:14:
f8:0e:2e:f2:49:ff:59:92:82:e6:f9:03:be:a9:fc:99:2e:91:
15:38:83:3c:8e:c6:41:5c:96:ba:52:e1:1f:db:8c:e6:69:99:
70:3b:b1:3b:37:2b:e7:08:c0:74:53:2a:19:72:51:c6:af:b9:
ac:8f:d9:f1:7f:14:fb:92:2f:a9:6b:2d:9d:b1:ac:91:14:1d:
3c:0a:03:39:81:9e:3a:45:37:80:65:53:f5:38:ff:43:81:c4:
f8:3a:ef:98:cc:13:50:cd:6a:e4:5e:0a:ed:98:83:3f:89:cb:
a5:2d:ad:b3:58:d6:dc:12:d1:06:2d:48:1d:38:54:fc:fb:e3:
01:b7:1e:63:c0:01:93:51:ad:43:55:e8:bf:7a:6f:2b:74:4c:
fd:04:70:99:2e:e9:06:50:22:46:95:33:c0:70:c4:78:97:ea:
d2:ac:f3:08:b3:5f:b7:4e:cb:c3:74:62:0d:27:0b:54:d5:b6:
84:d1:6e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:04:03 2026 by rpki-client