
$ rpki-client -vvf repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
File: D6729321F95E264CBE7373469790C77F8B57E268.mft (raw, json)
Hash identifier: ogUb3JtngEG4tim779TGLR+mFGsa7uPvP9rF5/vWmCU=
Subject key identifier: E6:2A:2B:32:E9:D9:4F:CC:32:B6:7C:ED:30:CA:39:05:A6:0A:B1:CB
Authority key identifier: D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68
Certificate issuer: /CN=D6729321F95E264CBE7373469790C77F8B57E268
Certificate serial: 657813F40E18F3F7E63812FDD370FF5507FBB98D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
Manifest number: 030A
Signing time: Thu 26 Mar 2026 06:10:00 +0000
Manifest this update: Thu 26 Mar 2026 06:05:00 +0000
Manifest next update: Sun 29 Mar 2026 15:39:00 +0000
Files and hashes: 1: D6729321F95E264CBE7373469790C77F8B57E268.crl (hash: PKiB1kuVb9PRxKwZFbkee+KFF/MVXMxkIkoO/csDU6c=)
2: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (hash: h9HWpUZjqwuAaP7uxV6EjM70C86M9FZJ3xzAzgOHeaE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl
rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 15:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:78:13:f4:0e:18:f3:f7:e6:38:12:fd:d3:70:ff:55:07:fb:b9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6729321F95E264CBE7373469790C77F8B57E268
Validity
Not Before: Mar 26 06:05:00 2026 GMT
Not After : Mar 29 15:39:00 2026 GMT
Subject: CN=E62A2B32E9D94FCC32B67CED30CA3905A60AB1CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:4d:3c:dd:f8:3d:7a:8d:be:2e:82:d2:52:
da:3c:12:87:d3:a7:cc:a3:23:3e:2b:76:0a:a7:c8:
a6:b6:b9:7c:f6:38:0d:75:ce:ce:aa:91:ff:7d:45:
6f:18:8a:41:ab:79:af:3d:0d:e9:b7:00:0f:9a:2e:
b2:c6:3c:1e:17:e3:01:6e:f5:8e:b5:00:f3:5e:99:
db:f9:1c:e2:60:17:84:7f:17:a0:1e:ad:0b:1a:13:
33:25:2b:8a:0c:60:2e:6d:fa:64:15:28:52:5a:ab:
99:42:bf:29:7e:22:e3:06:9f:a2:b3:f3:ca:79:e9:
ad:06:ae:99:11:14:b9:f9:c9:2c:96:74:48:cb:8d:
92:f0:ec:4a:4f:31:68:e9:20:cb:21:76:48:65:75:
03:b3:aa:92:a9:c6:f9:3b:d6:44:ad:69:ea:9f:3b:
63:0b:79:72:8e:98:1f:ed:fe:53:33:56:8b:7a:61:
87:d2:5d:b1:ad:f6:7b:93:4d:34:52:0a:86:72:0a:
5a:46:d6:98:54:e5:61:44:0a:a8:fb:25:17:1f:cb:
a6:61:89:fe:d2:10:67:25:10:b6:e1:73:e3:34:7d:
2b:7d:10:8f:8b:f2:13:b0:bd:42:1c:1d:b4:2c:85:
cf:d1:96:e2:dd:6e:6e:cb:ef:9d:61:81:43:a8:cf:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2A:2B:32:E9:D9:4F:CC:32:B6:7C:ED:30:CA:39:05:A6:0A:B1:CB
X509v3 Authority Key Identifier:
keyid:D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6a:aa:c1:98:04:d1:ce:7a:2d:8d:c2:81:35:18:21:a4:4b:
f7:ea:28:77:56:9e:74:8d:d1:55:02:2d:29:70:63:e0:20:c6:
6e:b9:d3:5f:b3:e0:d8:c5:21:e9:0e:91:dd:86:f9:49:b1:74:
0b:f1:e1:0e:d5:9a:04:65:91:31:73:35:4a:3a:bf:71:db:80:
0a:b9:b8:af:53:71:0e:6c:0e:d8:92:b0:e4:b4:ec:6c:18:d6:
4f:a0:f0:c3:5d:64:65:46:42:2b:f5:80:c4:8e:78:f4:ad:c2:
ba:d1:f5:7c:8b:29:e2:24:e7:d5:ba:d4:12:a9:cd:e7:43:7f:
83:44:da:a2:45:8c:cc:96:1e:56:d8:b2:69:d7:e9:b8:31:67:
e7:33:2e:e6:b3:3f:9e:77:3d:d4:f1:83:45:1c:38:77:6d:dd:
b4:a5:f0:93:52:15:1a:d7:6e:df:1f:76:86:65:20:df:ae:f7:
4c:30:16:19:2a:f9:5d:c0:13:f3:f1:ec:d6:bf:f7:5d:b8:ac:
b8:77:97:80:6e:16:86:60:fc:81:7b:13:ce:35:b8:44:51:10:
25:15:5e:52:1c:54:e0:29:f8:ff:99:37:2e:dd:08:bc:1c:1a:
4e:7b:50:45:41:91:86:12:f4:59:fe:1a:82:99:57:33:0b:32:
af:ec:66:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:48:28 2026 by rpki-client