
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
File: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft (raw, json)
Hash identifier: Mrd4qOrBMeCcYkEHuyT/Tl3/DcrmH6ZzPMFi6MqLP08=
Subject key identifier: 3B:15:14:1D:31:AE:62:43:BC:75:1E:8F:0D:1A:B6:9C:AC:83:FD:18
Authority key identifier: A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82
Certificate issuer: /CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782
Certificate serial: 6760D22061E7078227F22636F9825AB0B1FF23F2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
Manifest number: D4
Signing time: Sat 07 Mar 2026 13:30:52 +0000
Manifest this update: Sat 07 Mar 2026 13:25:52 +0000
Manifest next update: Tue 10 Mar 2026 17:27:52 +0000
Files and hashes: 1: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl (hash: SnUnntr3KPkkVG2JSebSXHJS1oCwxHlRkEW5ScKepp8=)
2: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: +4jn9yUTCERVA3g9fI3ooLPb8eRAkmcilsOk4E3ZshQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl
rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:60:d2:20:61:e7:07:82:27:f2:26:36:f9:82:5a:b0:b1:ff:23:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782
Validity
Not Before: Mar 7 13:25:52 2026 GMT
Not After : Mar 10 17:27:52 2026 GMT
Subject: CN=3B15141D31AE6243BC751E8F0D1AB69CAC83FD18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:df:f1:df:d4:d9:47:eb:47:b2:9d:5b:51:
d7:a4:b5:68:77:30:0d:94:10:99:e5:b4:46:83:a6:
39:39:db:f5:35:4a:01:c8:d8:2f:95:8d:4e:98:c6:
b0:aa:6c:18:4f:78:35:99:e2:a0:a2:03:57:53:69:
2a:d7:54:36:c0:59:f7:a5:8c:5a:56:0d:e8:ad:97:
00:34:da:38:11:f0:e1:f8:dc:a8:dd:7c:55:a1:a3:
a6:7c:d0:09:0a:8d:cc:b4:86:04:61:28:07:4d:69:
16:ce:98:48:42:94:06:4a:2b:5c:1f:1a:2e:49:46:
cc:18:2d:00:26:ce:10:c8:c8:ca:8a:4d:20:66:74:
4b:43:d0:fc:43:35:b1:76:54:04:90:61:8a:c9:63:
1d:a5:25:03:66:45:41:66:80:66:9e:c4:da:e6:82:
17:0b:9e:c3:96:45:ab:50:ca:d3:a1:b2:c5:db:3d:
f7:7e:ab:9b:51:37:dc:c1:07:e4:c3:6d:1b:0a:f2:
6c:6b:75:4a:0f:b4:e9:7c:5f:a5:62:fb:df:65:f3:
a8:ba:f8:23:35:02:ab:e3:6d:ac:23:17:16:fc:77:
32:af:01:9b:e3:bf:25:32:c1:db:6f:86:52:05:24:
5f:a4:d3:85:7f:ba:ed:e1:01:66:0f:2a:af:5c:d0:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:15:14:1D:31:AE:62:43:BC:75:1E:8F:0D:1A:B6:9C:AC:83:FD:18
X509v3 Authority Key Identifier:
keyid:A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e6:a6:11:ca:f6:c6:ba:6a:13:94:27:29:7b:7f:4c:13:89:
e0:35:07:e5:0e:50:46:0d:45:f1:b5:51:66:3e:e2:22:f8:7f:
fb:84:44:7b:d1:b8:3b:20:07:36:ea:78:af:7f:d5:c6:51:f0:
90:43:6c:7f:a8:da:9d:79:95:e9:cf:e8:26:dc:17:d6:2c:ec:
59:b7:57:8f:83:91:a8:12:18:72:e7:65:b7:9e:78:fa:1f:3f:
3f:05:a1:b5:82:d2:32:be:98:2b:d2:6c:aa:f1:18:0c:fb:b8:
ce:0d:42:26:2b:94:83:ca:c1:76:20:64:85:ca:c7:1c:89:28:
d3:b7:14:97:1b:63:5c:bc:23:58:49:f3:71:01:33:ce:f1:21:
03:dc:a6:5b:47:1d:3d:f6:18:55:3a:74:eb:5f:e6:65:43:d8:
ed:12:9e:ea:c7:8c:1d:6d:d6:03:66:f4:77:d8:8f:25:74:5b:
66:73:c9:a0:45:a8:33:10:5b:27:1b:31:0f:81:9a:e3:eb:c4:
43:b6:42:57:27:4f:17:6e:a8:49:9a:c5:5d:ce:32:d4:5f:40:
1a:1d:10:c5:4c:e5:d0:cd:bc:37:42:ef:f8:a9:5f:1e:a6:75:
12:01:52:d4:9d:e0:27:b8:73:f6:cc:e6:b0:62:e6:83:2e:07:
d6:8e:f9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:35:37 2026 by rpki-client