
$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json)
Hash identifier: F7kCTV6w/45bvT3N9M4Ow9CN6rFl1OKfoa2+KRjZQqM=
Subject key identifier: 10:82:5D:0A:B4:43:5C:A4:02:69:69:CC:5E:22:58:2C:A3:CD:04:A9
Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93
Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393
Certificate serial: 7C636C7D8AC9E5371144089F05948408F0B15443
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
Manifest number: 0114
Signing time: Fri 27 Mar 2026 02:01:38 +0000
Manifest this update: Fri 27 Mar 2026 01:56:38 +0000
Manifest next update: Mon 30 Mar 2026 11:28:38 +0000
Files and hashes: 1: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=)
2: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ItdPic80wypsThSkca8xGdGFm8YCN4V6loLuyuZH6qY=)
3: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=)
4: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: DSDMDjwM7RLV1Lyu6lXLahpQseCWQVO8lH8ala2ogYI=)
5: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=)
6: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aIfX6W1wJsuWGyj92Zq4X0k5Z/7Dz5tO4tJOY1Wnlo8=)
7: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: 0V0z+LtHyEetsdKzNz3fDG9TWng43zw65Ia1bT84+ig=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl
rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 30 Mar 2026 11:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:63:6c:7d:8a:c9:e5:37:11:44:08:9f:05:94:84:08:f0:b1:54:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295131167768CC78482F796BB58CF5A01A014393
Validity
Not Before: Mar 27 01:56:38 2026 GMT
Not After : Mar 30 11:28:38 2026 GMT
Subject: CN=10825D0AB4435CA4026969CC5E22582CA3CD04A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1c:25:60:52:96:e0:d4:2c:08:d6:97:ba:2a:
cc:a0:d9:e1:39:c2:ee:61:5f:9b:ec:8e:72:5e:90:
08:7e:72:53:1d:fa:a7:ca:78:50:6c:d8:cd:ef:fe:
24:51:a0:4c:33:b1:aa:58:5a:d9:ed:bc:f5:11:79:
2f:f8:a8:7f:78:73:b7:62:47:8a:c9:0a:5c:32:1d:
70:5e:b1:98:47:59:15:74:f0:a5:e1:c8:56:19:2c:
f0:82:15:b3:9e:ab:e3:ac:1c:c8:3f:62:ab:74:ea:
ca:f3:de:0a:dc:33:bc:f8:4b:8f:6b:fb:54:45:7a:
e8:11:f3:1d:0f:50:2c:8f:2e:25:cf:72:e2:e9:91:
ed:03:9f:31:1c:af:83:ad:a3:c6:00:16:ef:d5:16:
96:c9:47:42:e8:1a:5b:78:da:18:65:b3:3a:21:48:
bb:f4:89:28:44:74:7b:c1:5b:a8:90:45:bb:b5:3f:
99:d7:1a:2f:36:ab:23:13:76:45:bb:ed:46:9f:c3:
9f:32:62:ee:99:d2:fe:fe:00:04:70:b4:53:8a:95:
93:79:4d:54:2a:1b:2a:cd:ef:50:b0:f4:22:d2:08:
df:ab:55:04:c3:a5:94:75:a0:40:eb:c4:3e:ce:3f:
d0:66:8c:b8:89:1f:ed:8e:6f:00:a2:1b:73:9d:9c:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:82:5D:0A:B4:43:5C:A4:02:69:69:CC:5E:22:58:2C:A3:CD:04:A9
X509v3 Authority Key Identifier:
keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:20:59:d0:95:31:9f:41:5f:b4:7d:35:04:2d:b6:57:77:30:
7b:0f:10:5b:cd:95:79:b9:65:62:81:18:66:8e:27:36:16:44:
88:7d:cc:5c:4c:45:4c:37:c1:1f:d7:a5:67:1d:55:02:a3:9a:
6e:a3:07:90:82:32:3a:2b:1e:15:22:0f:39:d7:21:40:c5:fb:
12:e7:31:d0:63:60:1d:59:08:71:bf:85:5c:bc:fe:7b:2c:2f:
eb:78:e0:72:41:e6:71:4a:2e:97:cd:a2:40:8b:2f:ad:37:67:
1c:9d:ec:27:00:c2:6a:89:4e:8c:2c:9b:5b:e0:e0:c4:1c:02:
eb:d2:74:3e:d4:92:16:60:15:59:8a:5c:95:3b:4c:05:4e:6a:
1d:a2:2e:01:51:34:b1:b9:b9:11:60:2d:41:a2:91:d0:26:a8:
fc:99:b7:cf:3f:91:6b:57:fe:ed:84:f8:30:e1:1f:c0:8c:b8:
7f:11:6a:8c:ad:1b:4a:d7:58:2b:70:7d:e2:f1:62:74:ee:97:
f9:ca:04:57:0a:31:ab:a5:cf:d5:a6:39:fc:c9:29:ea:c3:c6:
65:56:99:cb:6f:b3:f8:ce:0b:a4:05:bb:6a:eb:9a:03:cf:6f:
83:1a:79:26:57:71:63:82:83:a3:20:95:fd:49:52:54:54:ac:
ff:c3:c9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:42:32 2026 by rpki-client