
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft
File: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft (raw, json)
Hash identifier: m+v1lMH6mkI4Ea0VtgkypQzLklBw0eqMF5CzmzSy65Q=
Subject key identifier: DB:4D:82:B0:12:89:34:7E:B4:34:38:6F:A5:B4:F5:43:9B:C1:6F:D6
Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7
Certificate issuer: /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7
Certificate serial: 63DE0DB9B9864F5FCC62901D2365773FBCF122B9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft
Manifest number: 0100
Signing time: Wed 04 Mar 2026 07:30:00 +0000
Manifest this update: Wed 04 Mar 2026 07:25:00 +0000
Manifest next update: Sat 07 Mar 2026 09:07:00 +0000
Files and hashes: 1: 3130332e3136392e3134332e302f32342d3234203d3e20323135373237.roa (hash: Gxx1N7C+QbTulu8Y3abVKzpV17eZ/FeVMjAWzNKkBjk=)
2: 3130332e3136392e3134332e302f32342d3234203d3e20313534343130.roa (hash: s2qqo3oU1qGkmrEqC+VMkH+1kS1V5uXeU54SPuAImfg=)
3: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: 4oT7xZVHG5/E0DX/QQMWoNUATmrhrxxUsrgCZ3ThGY4=)
4: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl (hash: pqlCFDbWNl5oX3S6mUdCNmBLXslL5Yk8OC3ozs2Rsgg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl
rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 09:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:de:0d:b9:b9:86:4f:5f:cc:62:90:1d:23:65:77:3f:bc:f1:22:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7
Validity
Not Before: Mar 4 07:25:00 2026 GMT
Not After : Mar 7 09:07:00 2026 GMT
Subject: CN=DB4D82B01289347EB434386FA5B4F5439BC16FD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:0f:27:2b:bf:d4:ad:9b:f5:d5:2a:ca:6c:
45:75:d7:ea:d9:eb:b9:e3:8c:9e:af:7b:9d:ec:b0:
26:b0:18:cf:97:d1:fe:c8:52:98:1a:ee:8e:d5:02:
39:50:60:65:e0:b7:4b:a7:29:8a:97:1b:3c:9c:dc:
5f:f7:d4:08:2d:95:ea:2b:d4:fb:34:db:62:81:cc:
61:21:13:6b:a6:e5:fb:89:db:d2:8e:d4:98:a2:57:
90:75:59:82:87:1a:d0:9d:79:23:ac:32:cb:ca:d7:
d8:4e:b6:d4:22:5f:a4:f4:2d:c4:dc:b5:95:e7:2d:
cf:86:b0:79:0a:df:0c:96:e2:05:f6:92:78:a4:be:
df:3a:aa:d2:96:66:0a:70:23:e6:2d:a3:26:5a:12:
c2:fa:a5:7a:bb:e7:43:b8:69:9f:60:f2:ff:3c:2f:
bf:e3:be:06:a5:d2:22:cb:19:4b:b5:94:8d:f1:ac:
eb:46:4f:b3:b1:70:a3:2c:3d:b1:04:17:46:6a:92:
b3:5d:9a:29:ef:a2:e7:af:c6:5a:ac:2b:33:d5:65:
00:cb:9d:b0:22:90:b1:44:e6:6e:83:90:47:40:b6:
09:cd:fd:c7:b7:3e:d8:c8:d1:6d:9c:9b:d4:eb:28:
e9:38:f6:7c:33:74:f3:38:f5:6f:93:57:c0:d5:d4:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4D:82:B0:12:89:34:7E:B4:34:38:6F:A5:B4:F5:43:9B:C1:6F:D6
X509v3 Authority Key Identifier:
keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ac:5e:39:cd:af:3c:d5:32:cc:f9:3e:26:6f:6d:35:68:d5:
e9:ac:0d:d0:67:58:d1:ac:25:aa:6f:42:31:53:13:31:74:fd:
37:25:ed:54:f5:5c:db:4f:0c:3b:23:fc:03:db:9c:fd:5c:47:
cd:35:1d:43:3d:37:d2:bc:8a:4d:d0:a1:fa:79:7c:da:26:61:
8b:4f:4f:f9:a6:83:b2:12:4f:c1:52:b5:34:dd:03:9c:51:e7:
a2:ea:bd:38:50:0f:92:9d:18:7f:4c:a5:bc:49:d7:f7:00:62:
7d:b3:61:df:cf:80:d5:0b:69:8f:ec:bc:c9:6a:87:d2:d1:4e:
a0:7e:fe:91:4f:79:6a:3b:b3:cd:e3:69:ba:20:1f:be:f7:a2:
58:c6:ca:d8:b8:8e:c5:05:a9:c7:61:b9:e6:19:3d:c2:16:d1:
10:3c:06:0d:70:27:45:5a:99:82:b5:5f:a1:1f:0d:72:b8:7f:
ac:aa:75:cf:d0:04:92:2b:83:de:13:28:85:db:fa:60:0a:33:
c1:8d:5f:f0:87:f5:e8:80:c8:ec:e8:b8:47:d3:84:a4:3f:f8:
5d:f9:ee:e6:b8:04:36:d6:a1:04:68:b6:b9:f8:ae:7b:e5:8e:
14:b1:fe:2c:f7:24:47:9a:8f:5a:16:f1:52:d6:f2:ca:8b:8c:
72:36:3e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:20:20 2026 by rpki-client