
$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft
File: C07911838F3BCDBB76B01070E127AA00CC27F991.mft (raw, json)
Hash identifier: MeSdhXBpWeWccAkLBMMMv1TTj2aBM4Qh6/0MwzQkHfs=
Subject key identifier: 2C:D2:90:7C:D2:E6:47:63:C1:49:8A:58:02:C0:35:B9:5E:61:D5:45
Authority key identifier: C0:79:11:83:8F:3B:CD:BB:76:B0:10:70:E1:27:AA:00:CC:27:F9:91
Certificate issuer: /CN=C07911838F3BCDBB76B01070E127AA00CC27F991
Certificate serial: 2471CE82F73EE0E59F336BC9585C8FE43EBB8900
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft
Manifest number: 0118
Signing time: Wed 25 Mar 2026 19:42:26 +0000
Manifest this update: Wed 25 Mar 2026 19:37:26 +0000
Manifest next update: Sat 28 Mar 2026 22:50:26 +0000
Files and hashes: 1: C07911838F3BCDBB76B01070E127AA00CC27F991.crl (hash: 8bmsRb7CbnzJ32SuneucfJ/bw2FMyMoOIil39QBI6y0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.crl
rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 22:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:71:ce:82:f7:3e:e0:e5:9f:33:6b:c9:58:5c:8f:e4:3e:bb:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C07911838F3BCDBB76B01070E127AA00CC27F991
Validity
Not Before: Mar 25 19:37:26 2026 GMT
Not After : Mar 28 22:50:26 2026 GMT
Subject: CN=2CD2907CD2E64763C1498A5802C035B95E61D545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:cb:f8:78:41:ac:06:14:5d:a4:ed:4c:c1:
8a:39:d7:26:64:85:39:5a:3a:15:22:98:69:27:52:
79:ba:74:31:1d:a5:3d:ca:1e:08:04:35:5b:57:73:
87:04:a3:bf:62:39:d0:1f:96:db:cc:6f:47:32:4d:
0d:41:63:34:cc:d7:0b:4d:dc:9a:d9:8f:89:cd:d4:
b7:85:89:92:f0:85:74:a6:15:70:57:35:7a:64:61:
a3:11:63:2e:a3:c1:3e:cc:82:a4:b4:0f:69:63:40:
23:b6:03:ad:f6:a6:28:1b:d9:db:04:e6:d9:aa:dc:
1e:76:77:a7:db:5b:9b:e2:47:35:a1:16:e0:7a:fe:
48:17:e0:b5:d0:5e:e8:1a:21:60:43:84:a4:5b:b8:
b7:4e:f2:53:fc:1d:7c:47:cc:1d:74:3e:ac:15:7d:
6b:2c:c6:ea:ec:a2:06:b4:9f:95:e8:11:3e:ad:c7:
1c:37:fb:c9:f7:c9:c8:56:e4:a2:a7:f3:78:be:ce:
ed:0d:e2:8e:7b:e2:b4:ae:d9:92:58:2d:f8:fc:0d:
0f:11:76:fc:a9:6f:01:4b:b4:4c:e1:4a:b0:3a:ea:
08:8d:a7:73:04:fc:2f:7c:60:63:87:70:ef:41:e4:
1a:8d:a6:f3:a0:97:54:64:c9:02:e3:18:66:be:d0:
f5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D2:90:7C:D2:E6:47:63:C1:49:8A:58:02:C0:35:B9:5E:61:D5:45
X509v3 Authority Key Identifier:
keyid:C0:79:11:83:8F:3B:CD:BB:76:B0:10:70:E1:27:AA:00:CC:27:F9:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0b:1a:96:52:e6:c4:63:10:7b:bb:ee:59:ea:6c:d0:21:bf:
fb:14:42:1d:05:39:81:b7:09:95:57:3f:f8:af:24:01:04:31:
3a:9b:fa:82:b2:5a:d3:0a:5b:71:e1:e9:92:b3:f5:8a:8e:7b:
6b:f1:c2:73:d1:eb:06:86:a6:d2:96:83:31:8d:d2:fd:dd:1d:
91:b7:08:2a:72:71:4c:39:95:23:18:58:ed:07:57:cd:27:3b:
56:50:06:1e:fe:d3:53:93:e4:55:94:19:5d:cc:df:7d:d8:ff:
37:ba:96:93:06:25:03:34:ba:93:44:e6:a2:b1:cb:d7:2e:d9:
2b:c2:9f:31:af:93:8d:b4:63:93:50:22:ad:8c:e8:7b:d5:7c:
25:64:07:d0:67:af:d3:ca:19:61:1e:49:c2:42:b6:71:be:ab:
b3:a2:06:14:8f:53:91:1b:39:3d:4f:a2:9f:de:ec:f1:a5:16:
e8:c3:3d:a4:8a:a5:29:ee:3b:08:88:91:6c:f2:2d:5f:e1:bf:
13:d6:ee:da:d2:23:0b:cf:10:c5:52:9d:78:3b:24:1e:f2:d8:
fa:1b:3e:f9:c5:f9:92:99:fc:d8:1b:4a:2c:29:30:33:71:f9:
6b:78:8e:9e:03:f2:42:d3:10:26:98:d1:89:26:23:52:cb:11:
36:55:e8:6a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJHHOgvc+4OWfM2vJWFyP5D67iQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FBMDBD
QzI3Rjk5MTAeFw0yNjAzMjUxOTM3MjZaFw0yNjAzMjgyMjUwMjZaMDMxMTAvBgNV
BAMTKDJDRDI5MDdDRDJFNjQ3NjNDMTQ5OEE1ODAyQzAzNUI5NUU2MUQ1NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIRsv4eEGsBhRdpO1MwYo51yZk
hTlaOhUimGknUnm6dDEdpT3KHggENVtXc4cEo79iOdAfltvMb0cyTQ1BYzTM1wtN
3JrZj4nN1LeFiZLwhXSmFXBXNXpkYaMRYy6jwT7MgqS0D2ljQCO2A632pigb2dsE
5tmq3B52d6fbW5viRzWhFuB6/kgX4LXQXugaIWBDhKRbuLdO8lP8HXxHzB10PqwV
fWssxursoga0n5XoET6txxw3+8n3ychW5KKn83i+zu0N4o574rSu2ZJYLfj8DQ8R
dvypbwFLtEzhSrA66giNp3ME/C98YGOHcO9B5BqNpvOgl1RkyQLjGGa+0PVhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULNKQfNLmR2PBSYpYAsA1uV5h1UUwHwYDVR0j
BBgwFoAUwHkRg487zbt2sBBw4SeqAMwn+ZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMS9DMDc5MTE4MzhG
M0JDREJCNzZCMDEwNzBFMTI3QUEwMENDMjdGOTkxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FBMDBDQzI3
Rjk5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm
YjktZmQzOWYwOTE2NjlkLzEvQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FB
MDBDQzI3Rjk5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALoLGpZS5sRjEHu77lnqbNAhv/sUQh0FOYG3
CZVXP/ivJAEEMTqb+oKyWtMKW3Hh6ZKz9YqOe2vxwnPR6waGptKWgzGN0v3dHZG3
CCpycUw5lSMYWO0HV80nO1ZQBh7+01OT5FWUGV3M333Y/ze6lpMGJQM0upNE5qKx
y9cu2SvCnzGvk420Y5NQIq2M6HvVfCVkB9Bnr9PKGWEeScJCtnG+q7OiBhSPU5Eb
OT1Pop/e7PGlFujDPaSKpSnuOwiIkWzyLV/hvxPW7trSIwvPEMVSnXg7JB7y2Pob
PvnF+ZKZ/NgbSiwpMDNx+Wt4jp4D8kLTECaY0YkmI1LLETZV6Go=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:25:53 2026 by rpki-client