
$ rpki-client -vvf repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft
File: C380A411E3CE15C60336341BB4B0994B307B920D.mft (raw, json)
Hash identifier: qQkT/ujZoGgfJeqLOVv4MgL23Yht5L2zDJg6UZCuI/k=
Subject key identifier: 5C:E3:98:BD:CD:19:1C:D6:87:EC:5C:99:9E:8D:32:55:CB:BB:B2:70
Authority key identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D
Certificate issuer: /CN=C380A411E3CE15C60336341BB4B0994B307B920D
Certificate serial: 66182C9378CEFD822DEA884B719D24F20D503B5E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft
Manifest number: 044C
Signing time: Tue 24 Mar 2026 23:32:19 +0000
Manifest this update: Tue 24 Mar 2026 23:27:18 +0000
Manifest next update: Sat 28 Mar 2026 05:15:18 +0000
Files and hashes: 1: C380A411E3CE15C60336341BB4B0994B307B920D.crl (hash: W3uChr3CdHj19ST9/QiuBS6/OvgLKuAgF1LcwiBcb+o=)
2: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: RAP4Y3UNMM22dRDZbSXvZfkAeFFl21PNSif0XVosalM=)
3: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: 2rrLsC09Wk5In+nn3fns2W2xhNn/o1UykNLInh2ZFNs=)
4: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: KoXVL6WzAZujvpo00umxzYa6CA8boG1qF0govC2qVVE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl
rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 05:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:18:2c:93:78:ce:fd:82:2d:ea:88:4b:71:9d:24:f2:0d:50:3b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C380A411E3CE15C60336341BB4B0994B307B920D
Validity
Not Before: Mar 24 23:27:18 2026 GMT
Not After : Mar 28 05:15:18 2026 GMT
Subject: CN=5CE398BDCD191CD687EC5C999E8D3255CBBBB270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:03:ad:13:93:0d:44:13:f3:61:2e:5c:2f:
0e:3c:83:6f:90:b0:a3:45:fd:7f:75:ae:85:f0:1b:
dd:8f:ad:94:ce:e4:83:7e:3a:ff:f3:68:4e:3e:2c:
be:47:df:35:9f:0e:50:26:8e:11:6b:3b:8b:f2:7b:
1a:f9:3a:56:7c:1d:74:5d:b7:d6:ef:16:4b:c8:04:
e6:f3:9e:7a:c7:47:c5:62:2a:00:b1:3c:d1:64:11:
d3:06:51:22:30:48:00:d8:31:61:e9:9a:a4:a7:2d:
a8:c5:4c:2b:33:99:81:f1:2a:f8:a6:ca:f9:20:a4:
b1:07:d2:fb:37:1f:dd:00:a1:4b:72:30:d0:86:d5:
fa:8f:87:90:25:f3:a2:3c:d3:2d:65:7e:ce:64:0b:
3f:a3:6e:4e:22:4f:fb:1d:fd:4b:b0:e2:38:6c:92:
04:5b:1f:c4:75:2a:7f:77:de:8b:da:3c:81:0d:0f:
2f:b3:1f:51:cc:2c:98:dc:45:fc:a0:4c:1a:0e:9b:
48:04:16:88:18:cb:e9:cf:ab:69:31:18:4a:a1:1e:
c6:40:7c:ee:20:1c:45:bc:d4:03:67:3d:62:51:4f:
87:9f:e3:f9:e2:ce:c9:ac:6a:27:b8:22:d1:2f:f1:
1e:31:47:be:08:93:a1:dd:c4:78:64:86:c1:61:34:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E3:98:BD:CD:19:1C:D6:87:EC:5C:99:9E:8D:32:55:CB:BB:B2:70
X509v3 Authority Key Identifier:
keyid:C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:25:6b:32:2a:62:64:87:1d:a9:9c:58:36:4f:76:66:a5:95:
6b:49:2b:2e:49:04:41:24:24:d4:7d:a9:ce:90:cb:d2:94:26:
ca:60:71:aa:d5:fe:50:ad:53:0c:f6:67:f2:95:b0:05:a2:35:
68:fb:77:ed:08:24:3f:e5:70:cb:3d:b9:4d:1b:74:0b:47:15:
8c:29:c5:e0:e4:70:83:34:e9:93:8c:3f:d5:6d:60:b3:fb:aa:
9f:c9:a1:8b:f3:59:23:b5:63:19:f4:ab:34:50:bd:fd:7f:eb:
a9:e9:8c:64:be:57:37:aa:82:ad:8d:8e:06:44:f8:ca:c2:20:
ec:64:2c:93:ee:d1:b4:db:0e:43:e7:ab:8f:17:c9:3f:61:a6:
c0:fe:89:4a:aa:a1:b8:95:56:f3:56:36:39:f8:3e:5a:1e:4d:
b6:a4:8e:76:fc:17:60:ee:81:28:3b:55:4e:ff:7c:34:78:37:
88:d5:aa:2d:b4:90:60:85:dc:b9:ca:7a:15:71:fb:68:ba:09:
66:20:67:65:07:aa:52:06:f6:8a:ed:d3:52:fc:fe:86:d9:8f:
39:bf:61:c0:ce:0f:21:de:84:1d:08:bf:af:23:af:9a:93:a1:
c1:2b:38:c0:02:3b:58:63:6d:ba:0a:2f:39:4a:b3:05:0a:59:
cc:6f:8b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:50 2026 by rpki-client