
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft
File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json)
Hash identifier: V7EGfIErdZzMhyJssBIU7kqcL0EMfg9wkg6nlXqXi/w=
Subject key identifier: 80:16:04:5F:0D:3C:8D:8F:6B:98:69:3B:C0:48:CA:E1:03:76:73:0C
Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F
Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F
Certificate serial: 67433652A3F8308EB6AD212ECAFA89EC2469F725
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft
Manifest number: 031C
Signing time: Thu 26 Mar 2026 05:10:54 +0000
Manifest this update: Thu 26 Mar 2026 05:05:54 +0000
Manifest next update: Sun 29 Mar 2026 11:40:54 +0000
Files and hashes: 1: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: IWu36PgrlbrIyJKi1yWtOTjXE0y4uzUHTwZcjUqTWx8=)
2: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: gabb9QAT2IXQ9QdY4HVQDs2nBfxagAKhqav4HwlbSno=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl
rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 11:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:43:36:52:a3:f8:30:8e:b6:ad:21:2e:ca:fa:89:ec:24:69:f7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F
Validity
Not Before: Mar 26 05:05:54 2026 GMT
Not After : Mar 29 11:40:54 2026 GMT
Subject: CN=8016045F0D3C8D8F6B98693BC048CAE10376730C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:a9:f6:4a:3d:d1:18:f0:b9:86:6b:4b:e5:
7d:fb:0e:62:52:23:d6:36:01:4b:5c:d3:92:ea:76:
a1:a3:7c:80:1a:c9:85:39:78:9c:4f:50:e2:80:d2:
01:b0:d1:b2:a0:02:b2:92:f1:3d:14:71:78:f2:00:
e7:16:6f:8c:f5:28:ed:78:bf:51:25:f0:21:8c:d2:
b8:4b:1e:cb:e9:d2:2c:13:0c:b1:04:bb:4b:e0:39:
a9:16:3b:03:fb:5c:ee:fe:2d:48:83:31:37:d4:08:
20:94:43:95:9e:e4:ad:56:31:44:6f:4f:4f:57:0e:
89:f9:1e:87:f5:b2:1a:21:f4:cf:0b:ee:c4:77:52:
42:f2:08:82:f1:96:dc:78:19:27:74:0f:b5:02:09:
2d:c8:06:42:ee:84:2c:0f:3a:8a:7e:b1:61:f2:d5:
ab:c0:65:1c:6a:35:47:c5:97:1c:aa:75:a2:d5:b1:
0d:14:45:bd:65:c6:f0:0d:1e:7c:1d:9f:1c:fa:fe:
70:77:15:e4:d4:0c:75:05:35:33:0d:88:f5:84:83:
bc:5d:c2:5a:78:ed:df:59:26:74:e2:5a:53:e8:1d:
3c:ab:c1:16:b9:a9:88:9a:97:f2:7b:fa:94:33:80:
e1:35:ea:1a:00:a5:ce:df:6e:8f:a6:7e:73:59:0c:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:16:04:5F:0D:3C:8D:8F:6B:98:69:3B:C0:48:CA:E1:03:76:73:0C
X509v3 Authority Key Identifier:
keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d3:0c:3e:81:39:49:16:af:df:23:e4:41:20:3e:92:f0:0e:
0c:89:78:b1:2b:ee:3a:ab:e2:7f:88:2a:5b:28:b5:70:76:73:
f8:77:ea:e8:57:1e:be:43:9d:37:84:e6:2e:09:2b:e9:9a:52:
f6:fb:4f:34:d2:c0:ac:72:c1:cc:f9:bb:ab:a2:60:c3:46:ba:
bb:9c:61:9c:8a:87:89:b2:69:4c:c4:bc:c4:ec:63:d6:bd:39:
ff:2e:60:3f:03:8c:b2:46:ef:ee:60:81:23:b4:88:1b:7b:4a:
23:99:f0:99:da:dc:99:cf:2c:7e:1d:54:60:a5:df:f2:5e:39:
f2:94:1c:a5:63:a8:73:cc:c1:82:ae:fb:36:d7:30:a3:22:6f:
32:bf:0d:c0:77:c9:bf:44:35:55:11:57:0e:fe:fa:4b:d6:52:
7a:3b:4f:43:12:a9:0a:0e:ef:a9:bf:0f:0d:4e:55:27:3a:02:
17:f6:b5:92:28:33:8b:f2:91:f9:6d:eb:a6:8d:6b:8a:5e:a0:
5d:ec:d1:4b:43:94:5d:5d:0d:73:c3:8c:e4:c3:51:24:b9:42:
6c:a6:7a:8b:3f:26:58:6b:f8:08:ef:51:cf:d6:82:61:e0:02:
da:d5:c1:45:66:4f:e5:96:6b:e9:25:90:1c:d7:5a:2f:c6:9a:
3f:9c:2d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:06:26 2026 by rpki-client