
$ rpki-client -vvf repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.mft
File: 510BADD365AB1A82795AF2361991094E4847999C.mft (raw, json)
Hash identifier: rRHGXAU23m9l15B79iIGXRmgeSjUQO5AcYT1AtSoen4=
Subject key identifier: 84:0E:D3:56:E5:5C:E1:C6:83:03:9B:0A:EB:1E:73:0A:E1:0A:1A:EE
Authority key identifier: 51:0B:AD:D3:65:AB:1A:82:79:5A:F2:36:19:91:09:4E:48:47:99:9C
Certificate issuer: /CN=510BADD365AB1A82795AF2361991094E4847999C
Certificate serial: 173DF3051504084B56EF60DB547EC4DAAAEA2D3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510BADD365AB1A82795AF2361991094E4847999C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.mft
Manifest number: 0356
Signing time: Mon 23 Mar 2026 03:11:10 +0000
Manifest this update: Mon 23 Mar 2026 03:06:10 +0000
Manifest next update: Thu 26 Mar 2026 03:44:10 +0000
Files and hashes: 1: 510BADD365AB1A82795AF2361991094E4847999C.crl (hash: AIDeKQ2sRBSaYWCWk3u6vP8Uyo1C/hhhZIxL+fljbZY=)
2: 3130332e3232352e3230392e302f32342d3234203d3e20313333333337.roa (hash: eQQaS2GcAKMZzr99CGlwXp93+osvzucp3Pb6cXhQDAo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.crl
rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510BADD365AB1A82795AF2361991094E4847999C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 03:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:3d:f3:05:15:04:08:4b:56:ef:60:db:54:7e:c4:da:aa:ea:2d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510BADD365AB1A82795AF2361991094E4847999C
Validity
Not Before: Mar 23 03:06:10 2026 GMT
Not After : Mar 26 03:44:10 2026 GMT
Subject: CN=840ED356E55CE1C683039B0AEB1E730AE10A1AEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:66:1a:70:1c:dc:f8:c5:e7:64:4d:ed:79:
3f:e1:d1:07:e7:18:1a:8b:10:72:96:90:3a:9b:c7:
e9:d7:d0:94:ae:4d:58:04:d3:44:71:f5:e8:1e:ab:
60:30:ea:23:cc:24:79:cd:81:4b:21:4a:d6:85:18:
44:93:1d:23:85:ae:9e:25:89:07:41:73:6b:37:af:
0a:3d:8c:f3:c7:d6:72:89:d7:32:8a:81:5e:38:0f:
61:1f:95:5a:8f:df:4d:07:db:8c:d3:eb:66:96:5d:
6b:ac:b3:99:93:13:bb:92:ce:c5:44:a3:1e:c0:c7:
a5:cc:ab:50:8b:a9:6a:5d:9e:8c:1c:7e:66:51:b4:
5a:44:5b:99:b1:5b:7e:ec:aa:9f:96:1f:65:7c:e7:
2e:7f:9f:64:10:26:aa:52:fa:fe:1d:aa:b7:aa:09:
f1:10:16:e6:35:48:d5:d8:f2:a1:b5:63:46:27:d1:
a8:86:f8:56:d1:ee:d5:fd:f9:ea:94:33:d7:d8:df:
d4:96:30:8b:53:59:86:44:52:92:ec:44:14:9d:ed:
ea:02:78:01:d5:53:e9:23:10:50:3a:25:74:ee:6b:
bb:e8:c9:a7:76:76:2e:78:57:f2:e1:5f:b2:46:0a:
d1:de:5b:48:86:91:10:4c:62:06:a6:ab:4e:50:ef:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0E:D3:56:E5:5C:E1:C6:83:03:9B:0A:EB:1E:73:0A:E1:0A:1A:EE
X509v3 Authority Key Identifier:
keyid:51:0B:AD:D3:65:AB:1A:82:79:5A:F2:36:19:91:09:4E:48:47:99:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510BADD365AB1A82795AF2361991094E4847999C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:4c:ce:67:6e:84:6b:db:ff:b0:2a:b9:87:8b:10:6d:70:50:
3b:fd:33:ed:1a:87:15:41:c0:cf:d0:f1:b2:58:f4:96:1f:60:
d1:f6:df:05:95:dc:43:22:e1:35:fd:33:03:ad:31:81:a7:1f:
64:90:18:55:97:1f:f7:d3:a6:40:d6:5b:c0:6f:bf:14:78:2b:
7d:40:df:09:bb:b2:ba:67:05:bc:0d:4e:1e:3e:f0:95:25:69:
2f:e3:aa:d8:00:16:9f:bc:f5:f1:08:3e:a2:92:56:9c:c2:87:
69:3a:c3:d8:ea:b7:7e:b1:bf:0b:d0:8e:82:f6:62:0a:a4:d5:
c0:20:d1:52:8c:7d:d2:46:07:01:d3:c1:68:8c:14:b8:94:d6:
8f:40:75:69:8f:03:dc:34:ab:9d:a0:1f:1a:e9:cb:cd:e4:bb:
32:58:a0:52:6a:73:83:3c:50:b0:70:e0:90:82:b5:b8:d7:8a:
43:50:ce:14:9b:68:e7:72:52:8e:66:fb:0f:a0:9d:8a:bd:2e:
53:34:6e:cd:03:30:1a:7a:ce:1d:dd:4d:a2:53:f8:e0:47:6e:
d7:29:f8:e1:d2:06:ec:dd:eb:9c:ea:82:49:26:87:06:4e:b7:
bc:4c:9f:b6:a5:83:7d:64:1e:1d:99:0f:f9:4c:47:a7:42:20:
32:40:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 14:58:49 2026 by rpki-client