
$ rpki-client -vvf repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft
File: A385F006CB4A332AED2E94013E7482A62617F17F.mft (raw, json)
Hash identifier: skvHH/yZEYUg7Dk+GhqprZiKOfi84pyupqAWoJoC0nM=
Subject key identifier: C7:D3:07:97:44:6A:1D:C8:D9:BA:61:36:46:06:65:22:6A:59:FA:54
Authority key identifier: A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F
Certificate issuer: /CN=A385F006CB4A332AED2E94013E7482A62617F17F
Certificate serial: 700CE0F3E796DA66E16CE36F140CC09AC0AE63FE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft
Manifest number: 03CB
Signing time: Thu 05 Mar 2026 14:11:40 +0000
Manifest this update: Thu 05 Mar 2026 14:06:40 +0000
Manifest next update: Sun 08 Mar 2026 22:03:40 +0000
Files and hashes: 1: A385F006CB4A332AED2E94013E7482A62617F17F.crl (hash: MA4plKoMkHql5wwV+9scCwQPQSz4rrtMIkDThJOxtL4=)
2: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: bFimiAzva9LShsHLA11pXQ0Ytb437eF/rz76mDmBlA0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl
rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:0c:e0:f3:e7:96:da:66:e1:6c:e3:6f:14:0c:c0:9a:c0:ae:63:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A385F006CB4A332AED2E94013E7482A62617F17F
Validity
Not Before: Mar 5 14:06:40 2026 GMT
Not After : Mar 8 22:03:40 2026 GMT
Subject: CN=C7D30797446A1DC8D9BA6136460665226A59FA54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:9c:ef:9f:9e:d3:42:45:b5:1a:b1:80:50:
68:48:cb:65:3f:35:97:8a:98:63:f0:4d:b5:49:3a:
c8:8d:3e:f6:79:69:a8:87:5e:28:9b:d2:2f:49:c2:
a1:12:d9:70:16:1c:6a:15:c8:03:f8:a0:f7:b2:61:
d5:f5:a3:cc:b3:99:71:24:9c:03:2b:17:67:b7:87:
99:d3:e9:d6:23:fb:62:db:3c:26:a3:44:82:3c:cc:
56:99:1b:06:2f:5f:28:05:f5:f9:c9:14:02:30:bd:
79:ab:34:6a:2d:f7:54:b6:c5:89:31:3b:ab:5f:1c:
c6:d6:ec:94:0f:87:6e:23:e3:6c:33:55:f9:e5:04:
54:a3:74:c3:e7:20:3d:86:4e:86:d2:48:39:ee:1d:
d6:02:6a:32:4b:7d:a0:0b:7b:49:8f:12:ae:16:84:
06:15:44:92:e5:c4:38:cf:d8:35:4f:76:fc:ab:6b:
6b:1b:4d:e7:7b:84:17:8f:47:b9:71:65:2f:b3:6d:
11:fe:5c:dc:b8:fd:de:9e:a7:95:ce:13:20:14:c4:
83:69:17:20:c5:57:c2:e8:44:9f:dd:61:33:15:6c:
b7:36:0a:64:12:24:6d:e4:a8:2e:f2:4e:98:5f:23:
f3:b4:f8:98:14:4c:4b:3b:04:3f:a7:ad:36:45:fa:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D3:07:97:44:6A:1D:C8:D9:BA:61:36:46:06:65:22:6A:59:FA:54
X509v3 Authority Key Identifier:
keyid:A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fa:be:a7:e0:91:0c:6e:e3:6b:8e:d6:2e:31:85:44:6e:e9:
d1:04:be:f2:da:95:29:85:05:b6:6c:82:38:23:3a:67:1a:e8:
8a:3e:2b:9c:22:4d:61:2d:30:cc:7e:a1:e4:53:95:58:c9:3e:
c2:a1:5a:41:60:b9:37:e2:be:30:80:44:4f:52:a3:a9:11:6b:
58:8e:ff:47:0a:0e:26:8e:b7:d5:0d:b5:29:24:12:90:57:fe:
41:09:3f:31:f9:59:12:e1:31:eb:80:1f:76:89:f7:f2:8e:08:
30:c9:af:91:9a:49:43:10:88:66:82:ac:78:c4:fc:db:76:ab:
c7:5c:72:ec:11:0b:7a:f8:fc:25:a0:93:a6:c7:9c:c1:15:90:
7d:95:4b:84:bc:16:ed:b8:b5:d0:0b:7b:4b:5f:4b:6b:ff:68:
00:42:99:6b:c3:6c:ef:fe:12:9a:74:73:d4:2f:dd:a3:65:3f:
14:df:c4:87:4e:3a:93:f0:0e:aa:4e:08:67:21:be:88:ec:56:
45:2e:3f:fb:a3:5b:a5:b3:d2:48:5b:45:8a:e5:ce:78:0d:d9:
e4:6d:e0:cb:68:d9:ec:26:cd:51:04:51:50:ae:2b:88:44:89:
c9:2c:44:b0:1b:9e:1c:77:87:40:a8:b3:b6:51:26:e3:c8:81:
25:8a:56:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:03:47 2026 by rpki-client