
$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
File: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft (raw, json)
Hash identifier: NWBevQ44+le4WfoUA2OhkjfjIXQMp2ayqHZvw/2dLg4=
Subject key identifier: C5:08:63:A6:09:6C:B9:73:14:D6:CE:FD:7F:1C:91:E3:47:A7:4D:6B
Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28
Certificate issuer: /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728
Certificate serial: 44978C95694E147F42A4F46AE6CEBF7F4D77B5DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
Manifest number: 01F8
Signing time: Tue 03 Mar 2026 07:01:47 +0000
Manifest this update: Tue 03 Mar 2026 06:56:47 +0000
Manifest next update: Fri 06 Mar 2026 09:53:47 +0000
Files and hashes: 1: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl (hash: AKUTME00XoKjH21UbwGvwob+Ty7AOPMFOBjzxAUgh6w=)
2: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: iiGr+PopU6Hz3cnQVhQvXlHgSkixhRPRwZ/ZW4Nmfrw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl
rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Mar 2026 09:53:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:97:8c:95:69:4e:14:7f:42:a4:f4:6a:e6:ce:bf:7f:4d:77:b5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728
Validity
Not Before: Mar 3 06:56:47 2026 GMT
Not After : Mar 6 09:53:47 2026 GMT
Subject: CN=C50863A6096CB97314D6CEFD7F1C91E347A74D6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:f5:e1:fa:48:29:62:47:89:4e:7a:d8:1f:
0d:e6:1f:50:6c:13:0f:60:c4:48:e8:b0:34:b2:11:
5c:1b:8c:1c:6f:5c:c8:99:f9:eb:17:91:f2:a7:9e:
a2:c1:90:ff:1d:dd:44:23:32:1a:b1:0d:27:14:d3:
8f:d4:b2:d5:f5:1b:94:a2:5c:20:f0:65:72:a5:a9:
0c:3b:61:87:42:6f:7f:32:c4:bb:aa:f1:20:5a:b7:
ee:c6:a8:e7:f4:7f:06:a5:89:06:7e:ca:66:24:c1:
94:84:0a:49:13:1b:ca:fd:fb:7e:f9:2f:ed:96:64:
3a:0d:cf:bf:a2:64:3a:cc:d3:3c:f0:e8:be:e1:c8:
21:c9:60:0e:a3:83:6c:b2:68:71:9f:a9:e8:2c:6f:
5b:d6:19:36:0d:f7:ea:6b:d0:2c:09:0f:cc:42:41:
2f:8e:01:4f:9b:98:e8:cf:53:82:32:f7:06:5d:f8:
c5:4e:66:7a:98:70:40:3a:98:ef:cb:28:b5:49:1d:
e3:df:bd:d1:5f:79:df:49:08:1b:d7:86:3b:3a:2b:
84:0b:8e:7f:1f:d8:33:e8:5b:be:df:cb:bb:86:c8:
bc:55:68:16:26:3e:ce:7b:c0:f5:ab:ae:73:d0:f5:
0e:3e:31:b4:ac:be:8a:e3:6f:b2:60:27:b7:48:26:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:08:63:A6:09:6C:B9:73:14:D6:CE:FD:7F:1C:91:E3:47:A7:4D:6B
X509v3 Authority Key Identifier:
keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d3:b5:03:b8:a7:8f:aa:de:96:c9:ab:38:ea:2d:0e:f5:35:
47:4f:57:83:b7:49:47:38:a3:ed:48:0e:f2:be:90:09:6d:bb:
fb:d3:03:71:60:d1:9d:87:b8:86:6f:76:3c:65:ed:96:b9:5a:
34:3b:a2:7c:d3:2b:37:52:54:67:6b:7f:f6:e7:8f:9b:a7:87:
4b:dc:34:c4:28:9b:83:9e:1c:43:08:f9:f1:62:19:c0:f3:35:
cf:25:54:e5:15:32:75:b5:fc:3b:a3:fe:e2:ce:e3:84:27:10:
55:6f:6e:7c:51:2c:c7:ea:39:57:6c:02:f1:9b:60:a8:17:e7:
d2:e6:ca:0a:b8:47:a3:08:11:84:0f:e1:94:df:25:68:50:cd:
66:94:27:93:b5:9e:10:92:98:9d:72:76:2a:a6:ec:de:b1:20:
43:94:b2:9d:e0:a5:dc:0a:c2:cf:5c:6d:f8:c1:55:9c:58:90:
49:86:ab:1f:30:a9:de:a8:01:3e:ea:67:f6:90:6a:cb:de:de:
6a:a5:d3:09:1f:38:ee:8b:24:33:e7:de:61:fe:2c:5c:eb:38:
9e:5f:7c:fc:45:04:33:58:54:27:67:60:7f:26:2b:cc:e7:ae:
11:f8:3b:fc:9e:42:29:3c:46:08:fd:64:d8:42:6b:d3:ec:5d:
ab:c4:8d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:07:53 2026 by rpki-client