
$ rpki-client -vvf repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
File: 743D7544160232918AB5AB2CD90221B4C4E978E5.mft (raw, json)
Hash identifier: +b3vgY5yYhD2LwMHsjk9bkEMsxx124cZV7P+2viKKcA=
Subject key identifier: A1:B3:25:B1:1D:54:7D:A8:58:3B:F1:92:DE:6A:86:53:93:58:05:D6
Authority key identifier: 74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5
Certificate issuer: /CN=743D7544160232918AB5AB2CD90221B4C4E978E5
Certificate serial: 3F3089C32279F37E165C694D9A786271D9BA97C7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
Manifest number: 01EB
Signing time: Thu 26 Mar 2026 08:41:11 +0000
Manifest this update: Thu 26 Mar 2026 08:36:11 +0000
Manifest next update: Sun 29 Mar 2026 15:30:11 +0000
Files and hashes: 1: 3130332e38312e3235342e302f32342d3234203d3e20313530353533.roa (hash: O6AiiOFEwGMgZxev69IgPIlcJDgXQoSXIvEt086XR7k=)
2: 743D7544160232918AB5AB2CD90221B4C4E978E5.crl (hash: Y0KO6jej9E4/kTdUlPtOV17nMLN8KTdAbaISKNS2r1I=)
3: 3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (hash: 6WBleXSX0c07tXo+dC+vbRCMKLXoYLwo1rSzqObcWfU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl
rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 15:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:30:89:c3:22:79:f3:7e:16:5c:69:4d:9a:78:62:71:d9:ba:97:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743D7544160232918AB5AB2CD90221B4C4E978E5
Validity
Not Before: Mar 26 08:36:11 2026 GMT
Not After : Mar 29 15:30:11 2026 GMT
Subject: CN=A1B325B11D547DA8583BF192DE6A8653935805D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:41:ca:4b:ce:83:78:be:78:30:17:d9:60:77:
95:be:2a:0f:3c:1a:72:87:45:09:5a:39:1e:0a:de:
b9:4e:98:35:95:3c:94:f7:6e:4a:c7:d4:78:e7:b5:
6e:48:74:5e:46:2f:04:41:7e:9d:ca:ae:2a:62:23:
25:fc:a0:55:be:b3:23:4a:3c:61:e9:90:14:97:25:
bf:9f:38:11:9c:19:4f:17:54:90:8c:dc:29:f8:39:
c4:2d:ec:8f:1d:5a:16:f5:0b:17:70:f6:96:5b:a8:
47:8d:95:c9:c2:52:b9:d8:d8:8b:d1:af:8d:fd:3e:
21:b9:2f:31:74:1c:cb:a5:fa:ad:fd:c3:ea:ce:89:
ab:2a:53:2f:aa:fb:d5:b2:04:33:90:d3:46:7d:72:
4f:19:e4:48:2a:4f:c0:3c:2e:ab:25:c3:6a:3e:16:
dc:93:3d:67:b3:72:f6:c3:ef:42:36:4a:f6:a8:4d:
94:d8:ab:b1:97:b8:1d:de:eb:c8:73:ca:6f:93:48:
13:d8:cc:50:b1:d3:08:1d:df:dc:fc:9c:21:57:7f:
ed:5f:da:f3:3c:37:42:c5:ed:91:4e:29:18:6c:a4:
fe:6d:de:f0:58:6f:ce:9c:7f:f8:54:51:a3:c7:51:
6a:eb:9a:7b:ec:e9:ba:28:bd:fe:e5:ce:54:28:d9:
9a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B3:25:B1:1D:54:7D:A8:58:3B:F1:92:DE:6A:86:53:93:58:05:D6
X509v3 Authority Key Identifier:
keyid:74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:eb:86:cf:58:36:27:6f:e7:8c:f6:37:4e:90:13:8d:6e:e0:
59:e1:0c:3f:d9:a5:ba:ed:33:5d:e1:f2:14:98:65:9c:a7:3d:
2d:dd:58:80:a0:4e:f2:6e:eb:ff:ad:e7:b9:06:79:29:9b:49:
9f:77:e8:28:5d:d1:99:80:58:bb:f2:44:34:6e:0b:bb:3f:1a:
78:6d:93:2f:53:4e:cb:95:89:16:68:6b:e3:5f:9e:f9:2a:32:
b7:1c:79:52:d3:70:b1:b1:35:2c:3a:a5:e3:39:b8:9f:4e:0e:
06:06:bf:2f:dd:61:f4:12:9b:6b:ca:af:b2:5e:f8:24:ee:a8:
c9:58:02:27:ca:00:3d:81:43:c1:ce:c7:11:2b:ce:07:4e:cc:
65:af:45:9d:8e:eb:aa:c3:3c:27:dd:90:82:07:d8:9b:94:e2:
98:c4:6d:a0:8a:84:8b:d3:a3:36:e6:97:65:3c:d7:c7:6a:81:
68:06:b3:17:2e:c6:93:91:93:7d:2f:af:98:a6:c5:b4:f5:be:
22:1b:c8:e8:a5:fc:91:89:f1:98:df:d7:fc:2c:90:92:b3:02:
38:68:c7:ce:37:42:7d:57:0f:fe:13:20:81:e6:ee:13:d8:e2:
a0:cf:3e:93:73:4c:29:96:dc:85:21:09:bb:46:b4:8e:64:cc:
f6:76:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:25 2026 by rpki-client