
$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft
File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft (raw, json)
Hash identifier: UEhxzZZL3hDdtEU3tO7Ge0ehpgHBE8IBFYUZHHvC4nU=
Subject key identifier: 18:45:2E:36:B7:AF:66:33:3C:1A:C7:A4:60:23:D3:FD:06:9F:F9:B2
Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45
Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545
Certificate serial: 27982785C5858AE99FABE09D2A20AD406745B879
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft
Manifest number: 0260
Signing time: Tue 24 Mar 2026 19:21:46 +0000
Manifest this update: Tue 24 Mar 2026 19:16:46 +0000
Manifest next update: Sat 28 Mar 2026 06:14:46 +0000
Files and hashes: 1: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl (hash: h91th3mmcGSEWUo9vEqierB/MNqSsp2fhpoIuL/FmdU=)
2: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: ruqE2F34CZN/5KqJhiyDZO8euZHnYhKqfwBiaFPn2lc=)
3: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: SapOMMIVothLtXId44y92PXYWgqYBrvZdRlhJ/EEALc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl
rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 06:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:98:27:85:c5:85:8a:e9:9f:ab:e0:9d:2a:20:ad:40:67:45:b8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545
Validity
Not Before: Mar 24 19:16:46 2026 GMT
Not After : Mar 28 06:14:46 2026 GMT
Subject: CN=18452E36B7AF66333C1AC7A46023D3FD069FF9B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:24:67:8a:5c:7c:0b:20:9a:04:bb:1a:fe:
20:09:fc:6f:e4:7a:d3:0e:38:20:e2:34:f0:d0:52:
0a:6b:12:06:a8:ce:b8:24:da:e3:ec:52:64:2d:f4:
35:7a:ab:80:a9:d4:76:bd:93:e6:da:4a:6d:61:8a:
23:ca:96:06:c1:cc:90:b9:d4:18:eb:bf:78:d2:3a:
47:fc:e2:ad:28:e9:65:61:bc:a9:6a:49:11:17:56:
3a:54:0a:14:c9:6b:3b:8e:bf:58:2c:d4:1d:77:14:
c2:03:2c:db:c3:ed:f3:e1:0e:8d:8d:45:c7:0d:9a:
dd:8b:3e:90:96:f7:3d:16:81:0c:73:b7:1e:55:58:
82:eb:e3:3a:2d:f6:42:dc:c6:de:6a:3b:f5:c2:98:
5e:3e:87:44:73:28:9d:1b:d8:52:82:d5:87:4e:97:
6a:23:53:88:65:f1:88:3d:51:3e:e1:dd:a4:1e:79:
cf:bb:21:9c:d1:b4:72:e3:55:59:0f:87:54:11:7f:
20:65:37:02:e7:77:a4:02:63:1c:ff:03:2c:7e:10:
d8:b4:f8:c5:c8:7e:06:c4:dd:72:a1:c2:3c:26:37:
d3:0a:1e:19:19:49:58:c1:79:07:f4:a8:42:6a:93:
1e:75:94:08:66:2d:27:45:c3:03:d6:59:e3:29:7f:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:45:2E:36:B7:AF:66:33:3C:1A:C7:A4:60:23:D3:FD:06:9F:F9:B2
X509v3 Authority Key Identifier:
keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:52:d1:78:82:5f:4f:3d:34:d3:54:22:be:02:1b:f1:88:0b:
f0:ea:78:ad:84:d6:fc:2f:4d:82:37:6f:b5:67:84:b0:0b:23:
73:b9:ef:f2:1b:2a:2e:6a:ab:29:9e:f6:69:4d:2a:f2:8b:3d:
6e:91:87:a1:0a:b5:f4:e7:dc:aa:71:96:3e:12:9b:8c:23:eb:
d2:05:66:9b:16:05:d9:ba:b7:94:e4:41:33:31:43:e8:89:a2:
15:84:56:3e:55:07:1e:39:d0:ff:fb:03:0c:c5:4f:ff:87:83:
83:91:c3:d0:c1:b7:46:22:6d:e6:50:90:a6:91:b3:5f:ce:5a:
43:1a:92:14:6a:65:ab:09:99:07:f0:9f:f5:26:49:dd:29:f8:
52:99:dd:4a:9f:c3:4c:9d:08:d2:2b:6d:ff:c0:e8:df:bc:e6:
12:28:dd:14:65:2d:11:ec:1d:f0:45:fe:36:f2:27:5f:9c:5a:
a0:3f:ab:2c:c2:a9:c5:35:c2:22:ed:3b:64:2d:5a:b7:08:38:
be:cb:e4:b3:16:b8:4b:fd:a2:34:b4:fc:cb:74:b1:9e:e1:d5:
de:22:9b:57:0e:5a:20:e0:81:46:0c:2c:cc:04:db:b9:36:fb:
c4:0f:e8:56:14:b0:bd:af:05:a2:27:86:bd:be:63:49:80:17:
7f:e2:0e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:26 2026 by rpki-client