
$ rpki-client -vvf repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft
File: 79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft (raw, json)
Hash identifier: bnWALUq6xdlD1vi4s5I2DboIfjQ1L794QoKN680zjPQ=
Subject key identifier: 5B:99:7F:0C:FB:EA:53:56:E2:5C:76:3B:0E:8F:B6:1B:8D:1F:99:88
Authority key identifier: 79:D1:59:5B:22:C9:0A:C2:75:A4:09:0A:F3:BE:0A:EF:66:5E:A8:1B
Certificate issuer: /CN=79D1595B22C90AC275A4090AF3BE0AEF665EA81B
Certificate serial: 3743D0799C73D54A0A0F819F3D1365AF84221926
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft
Manifest number: 2F
Signing time: Wed 25 Mar 2026 18:11:34 +0000
Manifest this update: Wed 25 Mar 2026 18:06:34 +0000
Manifest next update: Sat 28 Mar 2026 18:53:34 +0000
Files and hashes: 1: 3130332e34312e3136392e302f32342d3234203d3e203633353130.roa (hash: YbMzsklhUnNFLiUL3eUvckWsyku5p4eRcoUqgAfUbbs=)
2: 79D1595B22C90AC275A4090AF3BE0AEF665EA81B.crl (hash: UtQ9xAQtdiqpIlvU6a8kOD2aMqLornXr9Z8IJeUHSq4=)
3: 323030313a6466303a62363a3a2f34382d3438203d3e203633353130.roa (hash: kNYG7SAIiKgSyZG2fQIJ5rRy8D++wscSmsfqJ/JMAnk=)
4: 3230322e342e3138362e302f32342d3234203d3e203633353130.roa (hash: IUKB7IZZcAxdadF7KgMG0SMyWM3kl7UBq8kwg4xktxk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.crl
rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 18:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:43:d0:79:9c:73:d5:4a:0a:0f:81:9f:3d:13:65:af:84:22:19:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79D1595B22C90AC275A4090AF3BE0AEF665EA81B
Validity
Not Before: Mar 25 18:06:34 2026 GMT
Not After : Mar 28 18:53:34 2026 GMT
Subject: CN=5B997F0CFBEA5356E25C763B0E8FB61B8D1F9988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:fa:cd:71:1f:11:6c:65:0a:7e:d1:2e:ce:
62:6c:02:69:f8:ca:c0:6e:c2:a1:c4:79:cd:31:18:
3c:c9:c4:dc:11:17:c8:22:5f:83:ac:8c:3c:ac:6f:
4d:1f:8e:6d:2c:e2:7b:ce:e2:64:d9:d2:87:79:6a:
67:74:6f:80:af:52:24:9e:98:59:fc:51:6e:00:48:
26:d5:ef:15:6a:2f:a9:3d:42:e7:cf:55:a5:56:d8:
da:76:d4:7f:21:12:e0:bf:70:76:5b:fd:26:c3:a3:
b4:ea:6e:bf:7d:b9:e5:87:94:8b:b2:c6:19:50:94:
65:ca:2e:2c:01:a5:d0:79:fc:a8:f2:de:7d:be:a3:
df:7e:a7:4b:74:f4:1c:0d:78:61:5a:ff:85:94:61:
58:c8:4d:86:97:ac:5d:f5:ff:0e:e5:3d:1f:84:3d:
9c:2b:c1:6e:5f:ba:72:3f:a9:94:43:fa:9d:09:8a:
85:db:e1:b5:f8:1f:15:f6:6b:1f:c4:ac:96:7a:cb:
25:5f:6b:04:b0:4c:0f:bb:ba:e1:2a:ea:dc:74:dd:
b6:7d:02:fd:ad:46:da:9e:36:d6:4f:a2:ef:58:7e:
b2:ce:44:fb:97:49:e0:2d:fe:a8:d0:07:c0:ff:e5:
f5:80:ac:99:b5:c6:46:8b:58:ae:fc:55:92:c9:8a:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:99:7F:0C:FB:EA:53:56:E2:5C:76:3B:0E:8F:B6:1B:8D:1F:99:88
X509v3 Authority Key Identifier:
keyid:79:D1:59:5B:22:C9:0A:C2:75:A4:09:0A:F3:BE:0A:EF:66:5E:A8:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:01:45:9b:38:d7:39:fa:26:67:ec:08:11:7c:35:ef:aa:31:
52:7e:f0:38:17:a5:8a:6f:14:31:5f:85:3e:f8:9b:d4:9b:10:
15:c1:a3:49:e9:70:97:4d:67:59:3a:39:1e:1d:ab:ac:74:87:
d3:9d:4b:0e:f9:1d:02:52:b7:21:7a:a4:ba:7c:7b:f8:4a:43:
62:9e:88:f3:5c:cb:00:d5:8d:86:7b:a1:18:d5:3b:2f:d9:f7:
2a:b5:3e:49:4a:97:2d:c5:d3:c0:95:58:6c:b8:ff:ce:08:ad:
d0:65:f3:71:00:d9:1d:53:37:f0:84:14:6f:55:f1:0b:82:20:
a0:21:a7:50:ef:41:45:88:60:75:43:fe:fa:12:c0:1b:78:31:
40:89:01:8f:c4:ab:22:1c:cc:15:c4:86:0b:12:16:99:55:17:
f7:38:92:f6:e5:ac:70:43:b2:4f:da:c3:b8:2f:cc:a9:e1:f7:
fc:9b:95:69:4a:8d:8a:9f:b8:29:03:24:50:0e:9e:26:ee:e6:
dc:4c:7e:c6:4f:08:3c:23:ae:93:81:f7:96:ac:02:89:d7:d8:
88:67:be:84:b1:74:b9:7b:53:3d:3e:93:4d:34:51:1c:15:4d:
f8:bb:9f:e5:3c:71:d6:20:8e:cb:a6:ef:e9:25:9c:a2:5b:96:
93:ea:33:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:04 2026 by rpki-client