
$ rpki-client -vvf repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft
File: 1678F34665D7A5281AECD895B892F07EA136CF72.mft (raw, json)
Hash identifier: i4+IW344x8CRLsbdzpCgHjYg84u6aAfnFBXdosymYLQ=
Subject key identifier: 19:14:AA:24:CC:46:8A:B9:4E:2F:AC:B6:82:88:7C:42:01:DC:DE:F2
Authority key identifier: 16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72
Certificate issuer: /CN=1678F34665D7A5281AECD895B892F07EA136CF72
Certificate serial: 3575BAE5DBCEF7DB130D826781F8530BA368E7D3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft
Manifest number: 055D
Signing time: Tue 24 Mar 2026 19:41:30 +0000
Manifest this update: Tue 24 Mar 2026 19:36:30 +0000
Manifest next update: Sat 28 Mar 2026 01:18:30 +0000
Files and hashes: 1: 1678F34665D7A5281AECD895B892F07EA136CF72.crl (hash: 85IBQNHDaLBQm/CZY2FGnT/bd3a3rjoEz05YX3yrh4U=)
2: 323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa (hash: D6yeTZeAuFxEtqmSKbk3UU6vmrij1x8nL+p5b0eR7L4=)
3: 3230322e3132392e3232342e302f32322d3234203d3e203338373831.roa (hash: KKdgbWLDDouRzCILnrDemBFX6Nv6Y8LRFzPrNN7B8tE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl
rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 01:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:75:ba:e5:db:ce:f7:db:13:0d:82:67:81:f8:53:0b:a3:68:e7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678F34665D7A5281AECD895B892F07EA136CF72
Validity
Not Before: Mar 24 19:36:30 2026 GMT
Not After : Mar 28 01:18:30 2026 GMT
Subject: CN=1914AA24CC468AB94E2FACB682887C4201DCDEF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:18:7e:47:73:e0:9b:30:3e:2a:09:f8:b4:
89:1f:04:a7:9e:2a:6a:f3:cd:98:fb:34:b0:4b:80:
75:ab:dd:0d:c8:f6:56:4c:fd:52:af:89:70:83:00:
ac:54:e5:e8:51:4c:52:93:d6:75:71:01:39:78:4b:
ca:3e:45:33:38:fe:ac:0c:9d:6a:65:4b:d3:c0:b4:
22:4a:07:ff:2b:47:a8:3c:c7:19:54:ee:95:0c:3f:
d4:81:e5:fb:11:7b:32:47:75:da:cd:f5:dc:cd:c6:
25:06:c2:6a:d7:d3:34:2a:1c:9b:6e:8c:07:14:69:
cd:2d:29:55:b0:a2:c3:93:e8:64:15:2a:5d:06:38:
cb:12:84:71:4f:7d:94:f3:0b:dc:c7:d3:64:ca:73:
a4:8b:21:6c:30:2a:c9:98:23:ed:3d:96:ec:d0:a8:
ca:a3:21:3d:be:4d:1a:62:82:a4:c4:e1:0c:83:2d:
cf:47:d4:ab:b3:af:73:8b:1c:1f:7e:41:2a:64:1c:
52:0a:db:a9:7d:65:a8:1e:00:99:2d:aa:36:21:64:
64:0f:1a:86:ba:2f:66:2e:b9:2c:16:b7:67:53:09:
cf:36:33:ad:a0:c2:02:99:4f:b6:2d:02:e4:a5:62:
07:52:28:6b:38:49:8a:92:33:03:c8:f8:fe:72:f3:
50:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:14:AA:24:CC:46:8A:B9:4E:2F:AC:B6:82:88:7C:42:01:DC:DE:F2
X509v3 Authority Key Identifier:
keyid:16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d0:31:aa:94:93:cc:e8:59:cb:b0:4b:88:b6:23:dd:d2:08:
93:1e:4f:38:f1:00:5e:6f:1c:43:48:0f:6f:72:91:89:1c:44:
04:ae:56:00:28:25:55:9b:6b:6f:3f:44:47:d1:88:1b:8b:81:
2f:41:e4:54:cc:d8:41:16:65:2f:be:30:55:d3:af:d4:ee:b3:
6f:af:b3:cb:d4:ef:22:b7:cf:08:11:29:85:26:11:db:cb:15:
4c:c2:c1:ca:fb:7b:8f:f9:45:85:1b:ef:e6:82:4e:ef:14:b0:
27:97:b4:14:f1:a9:58:83:97:7c:32:5d:fa:47:bc:6f:c1:96:
d8:fb:4c:d3:34:cd:74:fc:20:fb:25:5b:de:f7:21:45:58:97:
89:14:e1:ef:af:5d:d4:b9:23:85:d4:94:2c:bc:3d:24:f2:cd:
e1:80:7b:c0:37:77:2b:0c:13:1a:8d:31:72:90:f5:82:5d:16:
96:18:2a:c4:e5:8c:45:0a:4c:9c:11:0e:8f:96:cf:25:69:30:
27:43:d1:5a:ef:9f:01:3d:57:56:9e:1e:03:de:70:95:e4:8b:
ef:eb:1c:3d:13:c5:a2:28:c1:8a:d0:94:3f:5c:ec:a2:13:af:
36:3d:b2:96:a0:52:51:19:8f:c2:3a:c4:96:ac:6a:7a:c8:51:
40:f3:6d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:36:55 2026 by rpki-client