
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft
File: E07D333345CD7D30F1DC10D98F6E73457739DF18.mft (raw, json)
Hash identifier: ept91z4CbNrBgD6haKzTXnGXaW2KXqu/aZdATKuY0ks=
Subject key identifier: E7:48:EE:0F:AB:AB:5B:CE:9E:03:A9:EC:FC:FA:C3:22:7A:CE:30:DB
Authority key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18
Certificate issuer: /CN=E07D333345CD7D30F1DC10D98F6E73457739DF18
Certificate serial: 30B2A2AEF5BF55A0A2509ACE9B0ADE90EAF1DC86
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft
Manifest number: 0308
Signing time: Sat 07 Mar 2026 21:02:24 +0000
Manifest this update: Sat 07 Mar 2026 20:57:24 +0000
Manifest next update: Wed 11 Mar 2026 02:20:24 +0000
Files and hashes: 1: 3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa (hash: Vl/OOphd8TYP/hah6fsBqUcpI92+W6WBwIY9PUcjWfo=)
2: 3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (hash: S9fTdkfTps/6Q59nCYC/yJ1+TjRvCvo04elHUxM7Yz8=)
3: E07D333345CD7D30F1DC10D98F6E73457739DF18.crl (hash: Sx58bIbSv4+U3MZpc3XD0UZtXn0qUOEmUgb+nbwI45E=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl
rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b2:a2:ae:f5:bf:55:a0:a2:50:9a:ce:9b:0a:de:90:ea:f1:dc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18
Validity
Not Before: Mar 7 20:57:24 2026 GMT
Not After : Mar 11 02:20:24 2026 GMT
Subject: CN=E748EE0FABAB5BCE9E03A9ECFCFAC3227ACE30DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:13:b1:c3:b6:48:fe:60:09:b4:d9:7a:5e:
e0:e8:ac:42:c7:c9:16:5b:16:33:2a:2d:8b:c1:4f:
4c:da:7a:1a:fe:98:58:6d:99:1c:f7:f8:d9:a8:42:
a3:d1:cd:45:dd:c3:96:4c:1c:aa:9f:9b:d4:d0:c3:
ce:a0:37:f1:94:d4:31:cd:c7:8b:1f:4c:bb:13:fa:
f5:7e:61:24:76:cc:85:95:eb:d0:5b:fb:3d:b2:4f:
38:a8:78:8a:b2:56:3b:fc:55:6c:a7:2d:e0:3f:14:
ee:1b:bc:4f:a7:8e:c8:d8:1c:2e:0c:7d:2a:e0:ce:
0a:f4:33:8a:76:88:65:16:19:27:3b:a0:70:22:06:
d6:01:3f:7d:da:f5:55:66:bb:85:c9:4e:6c:70:d4:
55:16:bb:38:9d:ec:7f:aa:d6:53:bf:7f:92:48:6c:
5b:19:02:21:44:ee:ad:a7:59:94:fa:dc:00:86:9a:
40:05:dd:84:c5:22:ba:b9:77:07:76:04:68:35:62:
99:7b:e9:61:91:1d:d8:fb:86:8e:5e:71:c4:fd:39:
40:5c:e4:83:a9:69:27:99:1f:c9:32:de:24:56:e0:
4a:56:0f:ea:85:d7:4e:33:89:9e:40:dc:d3:d6:87:
ad:b1:07:38:71:eb:39:16:dd:92:12:80:e2:31:96:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:48:EE:0F:AB:AB:5B:CE:9E:03:A9:EC:FC:FA:C3:22:7A:CE:30:DB
X509v3 Authority Key Identifier:
keyid:E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a8:3c:c6:1b:4b:46:26:74:a3:30:12:9c:d1:6d:1c:e8:58:
be:64:a7:3d:d8:92:a1:cd:13:e9:93:8f:e6:7a:45:02:3b:0b:
bf:1e:59:b7:1a:fa:3f:14:ae:81:dc:22:b8:63:59:54:05:d3:
56:01:54:06:0d:0a:d7:f1:d7:10:6c:7f:29:04:7d:0f:19:44:
fc:1d:67:86:8f:5c:6c:0e:63:69:dd:1b:2c:9b:c3:61:c7:8a:
85:e1:85:9d:66:b5:52:2a:62:89:64:23:ea:cf:0d:7e:83:63:
8a:57:c2:a0:3b:7f:af:5b:3d:d7:fe:fb:55:cc:9f:a8:a8:09:
5f:10:b1:2b:1a:36:61:1d:80:b5:f8:f4:99:32:3a:58:9d:d8:
d4:42:ba:cb:2a:e3:d0:1b:e2:60:6a:b0:b9:02:55:f6:73:57:
b1:4b:1c:6b:2f:ab:fc:07:3b:c3:20:b2:41:b4:15:6c:e7:9f:
b7:f5:9a:1e:a6:f8:4b:b1:fc:37:dc:2b:0f:cd:50:83:5f:0a:
d5:14:46:23:d0:f3:9b:f8:9b:99:43:55:80:62:33:c0:71:a9:
9d:5b:a8:fd:90:49:04:78:f8:7c:af:7d:86:c6:cb:82:6c:1e:
79:7f:c0:9e:74:10:0a:da:8c:f6:f0:be:25:b7:49:67:8b:10:
3b:47:8c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:58:14 2026 by rpki-client