
$ rpki-client -vvf repo-rpki.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/E2E2B18618062AFE568198DD60631314C3847291.mft
File: E2E2B18618062AFE568198DD60631314C3847291.mft (raw, json)
Hash identifier: hnsaHIWpMvO7vb4EQ50EPZYKqeL3qcxYBbLTQrg5GH8=
Subject key identifier: 21:B4:5B:B8:68:DA:58:42:81:B7:A2:B5:9E:BD:7A:19:E6:B4:08:14
Authority key identifier: E2:E2:B1:86:18:06:2A:FE:56:81:98:DD:60:63:13:14:C3:84:72:91
Certificate issuer: /CN=E2E2B18618062AFE568198DD60631314C3847291
Certificate serial: 2D4C654EF3C1BA6A5CBB11E8B977E23B5BEC9E71
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2E2B18618062AFE568198DD60631314C3847291.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/E2E2B18618062AFE568198DD60631314C3847291.mft
Manifest number: 01E1
Signing time: Wed 25 Mar 2026 10:52:16 +0000
Manifest this update: Wed 25 Mar 2026 10:47:16 +0000
Manifest next update: Sat 28 Mar 2026 20:05:16 +0000
Files and hashes: 1: 3130332e3139382e312e302f32342d3234203d3e20313530393436.roa (hash: UeZ9eOYWcVd0DxaJpY8g2CeDKU1Ah2XG49dT9AjLY+g=)
2: E2E2B18618062AFE568198DD60631314C3847291.crl (hash: A0XjWhW2bT1tUtA5be3/TvamH88yIxKL4QhC+pOuBNc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/E2E2B18618062AFE568198DD60631314C3847291.crl
rsync://repo-rpki.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/E2E2B18618062AFE568198DD60631314C3847291.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2E2B18618062AFE568198DD60631314C3847291.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 20:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:4c:65:4e:f3:c1:ba:6a:5c:bb:11:e8:b9:77:e2:3b:5b:ec:9e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2E2B18618062AFE568198DD60631314C3847291
Validity
Not Before: Mar 25 10:47:16 2026 GMT
Not After : Mar 28 20:05:16 2026 GMT
Subject: CN=21B45BB868DA584281B7A2B59EBD7A19E6B40814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:de:30:ad:d5:c5:5e:27:3d:ab:0e:4d:21:
2f:61:39:2c:bb:2d:65:f2:0b:ee:4d:04:06:3a:6d:
70:2f:bd:10:a4:65:ef:c0:72:52:12:1a:c1:ae:d6:
26:71:36:44:fc:a1:fc:2c:95:0e:35:2e:ae:a9:13:
6a:25:b5:5f:75:84:94:72:dd:33:3f:0f:52:41:4a:
8e:1b:02:82:fc:77:22:ba:f3:e4:8a:f8:f9:b0:9d:
01:49:c0:4c:1a:f2:e8:04:29:3c:c7:9a:fa:af:c4:
fe:80:2a:e4:c9:f2:c7:ad:b6:22:1b:b7:28:5d:fa:
8d:55:2a:b6:02:4a:50:23:de:a2:44:ac:8c:00:c9:
82:2a:2e:0d:c6:a1:30:69:27:f9:b8:5b:da:2d:00:
8f:90:5f:8f:9e:ac:1f:09:60:5f:c5:06:91:60:93:
01:77:4c:70:55:40:84:ef:bd:e9:82:7a:1d:01:47:
c8:d8:d8:47:61:6d:cd:06:a5:48:3c:79:57:32:45:
67:66:f3:08:b0:f0:9b:02:1a:7a:60:5d:fa:37:05:
69:80:1f:1c:36:20:ce:79:61:a9:d9:1c:8e:6f:0f:
55:4e:3f:ea:46:c2:0e:64:dc:fc:12:02:5f:ab:12:
7d:c8:ca:ed:b4:b4:44:ca:6a:90:c7:16:e1:c1:8b:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B4:5B:B8:68:DA:58:42:81:B7:A2:B5:9E:BD:7A:19:E6:B4:08:14
X509v3 Authority Key Identifier:
keyid:E2:E2:B1:86:18:06:2A:FE:56:81:98:DD:60:63:13:14:C3:84:72:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/E2E2B18618062AFE568198DD60631314C3847291.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2E2B18618062AFE568198DD60631314C3847291.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/E2E2B18618062AFE568198DD60631314C3847291.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c0:9e:dc:86:c9:4a:63:2c:d4:80:67:c4:85:31:fa:93:1f:
b9:9b:71:fd:47:04:88:81:89:fe:69:13:77:c3:96:9c:4b:8e:
f0:46:6c:66:28:ef:6a:91:3f:90:90:db:6c:44:49:4a:7c:96:
11:8c:75:7c:e9:a8:18:4e:7f:1e:c3:97:e9:98:85:ea:63:8a:
4a:47:60:da:76:a6:69:d2:66:84:b0:13:12:3b:90:45:26:2b:
55:ab:b7:72:d5:48:33:cb:d3:68:e4:1e:5e:c9:67:eb:c1:53:
c4:44:9d:5e:e2:aa:2b:5d:4d:cc:f7:e2:2c:cf:cc:7f:89:a8:
cc:b2:f6:b8:71:9d:30:ac:0a:9c:69:4e:1c:06:50:2a:f7:fb:
4f:47:0e:51:88:cc:d5:ad:a1:59:f6:fa:4a:39:69:41:e8:a9:
d3:f3:2a:ec:08:54:0e:c0:ca:03:a6:58:8f:2f:83:e1:48:db:
a5:12:4d:5b:ef:3d:a1:58:51:e0:b6:ff:24:9b:e1:42:01:c9:
f3:ab:79:fb:09:a1:fd:49:a9:b5:c0:99:56:93:c2:ee:2d:f3:
bf:7c:9d:d7:b5:65:44:a1:0e:fb:1d:10:ff:6c:6f:95:58:ae:
c9:ad:ca:f1:21:27:cc:78:f1:7f:28:e9:f9:03:5b:0a:5d:8e:
26:de:00:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:42:13 2026 by rpki-client