
$ rpki-client -vvf repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
File: 8137472FE4C7D48501352601D84D624E0EC41C19.mft (raw, json)
Hash identifier: L7SzE7VUm4B9AKfpDFSgkhT+4XcpEbEwJjQqg71+fEg=
Subject key identifier: 2B:DF:F5:AE:2E:BC:90:A4:4D:86:8E:A2:DA:D7:33:2D:C1:70:D6:C3
Authority key identifier: 81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19
Certificate issuer: /CN=8137472FE4C7D48501352601D84D624E0EC41C19
Certificate serial: 20557F83E010ADA40C0BDD6AA91A9900F058353D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
Manifest number: F1
Signing time: Thu 05 Mar 2026 07:50:50 +0000
Manifest this update: Thu 05 Mar 2026 07:45:50 +0000
Manifest next update: Sun 08 Mar 2026 17:52:50 +0000
Files and hashes: 1: 8137472FE4C7D48501352601D84D624E0EC41C19.crl (hash: ib6DoW4NXmg00ew2CG6BUdIK2No6uu2ewZ0jQb5DJVI=)
2: 3136302e32302e37362e302f32332d3234203d3e20313532383133.roa (hash: 2gWgTQ4Z+tGyRrEoZsoKq4rQS9QUc5mKoFU6ARsUw8Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.crl
rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 17:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:55:7f:83:e0:10:ad:a4:0c:0b:dd:6a:a9:1a:99:00:f0:58:35:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8137472FE4C7D48501352601D84D624E0EC41C19
Validity
Not Before: Mar 5 07:45:50 2026 GMT
Not After : Mar 8 17:52:50 2026 GMT
Subject: CN=2BDFF5AE2EBC90A44D868EA2DAD7332DC170D6C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:27:65:52:ce:c3:50:c0:14:e8:b8:01:75:8c:
88:76:93:aa:c0:44:32:7f:c1:d2:d3:f2:95:40:7d:
33:c5:26:e1:6f:8b:9a:6c:78:0e:6e:87:10:e4:2b:
90:79:1f:86:9b:c4:bc:59:7c:b8:1b:d0:47:d6:af:
a9:06:9b:9f:11:43:24:32:c6:0d:b2:4f:98:2c:a7:
e9:46:58:80:79:f7:f2:7c:df:b0:b1:52:76:20:44:
93:da:ea:a5:27:08:d4:c2:e6:e9:82:e3:a8:47:28:
19:1e:bf:61:5c:a5:28:77:fb:ff:a8:e1:ab:16:21:
50:84:f9:a5:6a:42:41:aa:9e:63:8b:cc:67:99:43:
40:b7:5a:1c:6e:5e:5f:75:bb:2c:7e:ae:ca:bc:9a:
09:e5:72:85:f2:c3:ec:cb:25:d5:11:d9:0a:72:07:
20:44:82:83:e8:e6:4c:3d:c0:8f:70:8f:21:83:fc:
29:d3:ba:a0:93:e9:20:12:95:aa:1a:b2:0c:e5:0c:
03:5b:03:2c:2a:40:14:67:6c:39:54:07:6c:45:3c:
1a:04:eb:fd:7b:7b:82:f6:a3:78:bc:f6:3e:b0:ed:
c9:24:1a:72:bb:5f:ab:9f:8f:ec:94:03:0f:dc:6c:
a8:99:fc:3c:9b:e2:d0:9c:a7:ab:ed:ae:e9:84:33:
03:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DF:F5:AE:2E:BC:90:A4:4D:86:8E:A2:DA:D7:33:2D:C1:70:D6:C3
X509v3 Authority Key Identifier:
keyid:81:37:47:2F:E4:C7:D4:85:01:35:26:01:D8:4D:62:4E:0E:C4:1C:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8137472FE4C7D48501352601D84D624E0EC41C19.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c09c9e-fe8a-4989-b5bb-ae419338f873/0/8137472FE4C7D48501352601D84D624E0EC41C19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:71:95:72:c6:74:ed:e3:60:f6:bd:d6:5b:ef:96:b2:ba:20:
a2:5f:02:44:01:61:c1:49:03:4f:4f:4b:64:76:a9:75:59:5c:
31:18:3d:d7:24:fa:34:76:49:7b:99:0d:1a:4c:ad:5d:82:01:
57:53:db:a6:98:da:d2:be:b4:3b:7e:c4:27:f6:3c:45:ec:9b:
c6:f6:62:27:22:8e:80:30:f7:a4:0d:c6:c8:dd:a4:16:b0:7d:
a1:43:bd:32:dc:e1:e2:60:bd:dd:9d:ae:63:54:97:f6:b5:79:
55:6a:d9:33:15:d6:f1:cc:38:ad:4d:9c:5d:a8:e5:15:41:1d:
da:d4:23:91:34:a4:14:01:b3:d7:c2:84:d3:55:28:a4:bb:75:
0d:e1:f3:fe:54:cc:aa:23:15:2d:8b:95:58:d5:e9:e4:6f:ab:
b2:f6:f1:5f:ff:3d:8c:04:19:4b:af:2b:a8:ce:3f:9d:8e:7d:
64:e8:09:36:18:98:c8:e4:56:86:f4:4d:51:4c:5c:e7:71:2c:
8b:4a:1c:11:e1:87:b9:2b:41:48:33:4a:0a:a1:e6:dd:cb:fb:
7c:bd:9a:df:aa:1b:e9:16:e9:69:ff:2f:be:61:6f:ad:40:af:
4b:c8:82:40:d2:51:f1:83:17:c7:2d:31:df:06:88:02:bd:44:
71:3b:ee:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:50:40 2026 by rpki-client