
$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
File: 818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft (raw, json)
Hash identifier: eCFYz5dS4kv7lIRcdrfOGU80QI0IPcyLpVMhb0ZnHMA=
Subject key identifier: 2B:14:D7:F5:F2:24:EA:D5:54:30:DA:E4:4B:6F:9A:FE:22:28:FD:92
Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9
Certificate issuer: /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
Certificate serial: 27914AEDBB2C4FC99E9C86065F2930772C82829A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
Manifest number: 055A
Signing time: Tue 24 Mar 2026 10:42:43 +0000
Manifest this update: Tue 24 Mar 2026 10:37:43 +0000
Manifest next update: Fri 27 Mar 2026 18:14:43 +0000
Files and hashes: 1: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: qNqEjSuCjuvM2nb2P9YufyugF7e/EHHhJHg78hVDerc=)
2: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: SLH6hiLVAcjKJgYGlgSHzMZrDl0w7mu4FSwj+uEfhtQ=)
3: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: oFvKKDxpW/0C/Q3mkSaRj7w7VX6MBfKr//38ErGs2CE=)
4: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: hpPXUQ5gypmdo+ZfR0ZPUxHpoc6PClgxO5mrZ0mqIsY=)
5: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: 3f3jJh3+oWJeudvuDrAqcUf8ITcTw5/zz4360Ggudd4=)
6: 818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl (hash: zPMrW88Sgb/7AIkgyxN0pBdh7GGlnMGDMkIOWHMrT88=)
7: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: klLZJtnV+xWW7YQzH2mIJ1a0TeqcgHLxJAezwqgVxkg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl
rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 18:14:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:91:4a:ed:bb:2c:4f:c9:9e:9c:86:06:5f:29:30:77:2c:82:82:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
Validity
Not Before: Mar 24 10:37:43 2026 GMT
Not After : Mar 27 18:14:43 2026 GMT
Subject: CN=2B14D7F5F224EAD55430DAE44B6F9AFE2228FD92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:3a:84:c0:4d:58:df:ee:7e:1b:10:3b:8f:
25:91:72:52:61:a5:f6:39:a3:32:28:fa:6f:d6:1e:
b9:af:96:84:93:c2:52:55:80:02:17:79:a8:ee:a7:
67:bb:36:6d:db:e1:93:a4:ef:e2:d9:b1:91:03:8a:
bb:62:bf:ae:9f:22:d8:be:fc:72:bc:b7:df:59:32:
f7:91:07:60:70:fc:7d:9e:5e:d9:c2:e2:ad:94:61:
6b:f1:05:2a:55:5c:f9:69:3c:8a:ce:91:8e:a2:c5:
e0:09:a0:fc:90:7f:4c:56:e3:0a:eb:1b:af:fc:d1:
fd:c8:fe:6f:7e:89:f8:19:a9:86:48:9d:73:b0:1f:
a2:6a:4c:af:19:a0:19:5f:00:ef:1a:99:58:9a:20:
10:27:03:79:6e:84:c5:53:71:2e:cf:8d:8f:ee:ff:
21:ab:e4:27:b0:03:e8:34:26:cb:bb:68:ae:23:37:
2a:62:8b:2d:10:f2:9b:25:18:38:b2:64:5c:3e:88:
0f:cf:39:6e:e6:55:95:10:fe:4d:d1:4c:ff:d6:02:
3e:f7:1a:7f:7a:fc:7a:d2:67:c6:62:c6:30:a1:63:
c1:90:6a:aa:6e:14:b1:06:c7:55:39:3a:d1:70:24:
3d:28:fb:dc:56:9d:22:f0:91:a5:1e:2c:95:21:7e:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:14:D7:F5:F2:24:EA:D5:54:30:DA:E4:4B:6F:9A:FE:22:28:FD:92
X509v3 Authority Key Identifier:
keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:00:ff:cd:0c:47:f3:42:96:2a:b6:aa:3b:a8:65:c2:e3:d4:
25:30:1d:2e:8c:47:26:21:d4:91:92:f7:4f:c1:4b:16:f8:3f:
8f:ec:e0:7d:70:d1:b9:59:0d:79:7c:f8:6a:24:42:f6:5e:07:
df:12:ec:22:03:f3:39:9a:b0:38:c8:53:ff:04:09:d3:59:1a:
61:d7:56:33:17:48:e2:3b:f3:7e:37:17:09:a5:f4:b6:96:90:
06:bd:37:c0:db:73:4a:ee:65:6e:bb:ee:d1:75:f6:2c:c3:7b:
f9:30:6c:b1:b6:0d:bc:da:e3:15:c4:6f:fa:b9:e9:c7:f4:07:
79:e9:a5:8c:19:76:4b:47:24:7d:51:97:d5:10:b8:32:a5:5f:
e8:56:5b:f9:fd:4b:67:47:0e:63:71:d2:79:ba:30:84:ff:d3:
0f:1b:8b:d2:8e:0e:11:cb:2f:fe:25:f2:7a:71:41:55:76:ca:
de:5a:07:89:90:81:c8:4e:96:8f:9c:51:81:7b:da:1d:3c:2f:
54:1e:21:6e:c9:53:09:e9:66:56:69:4e:ec:6b:39:f8:c4:d9:
f9:a7:fc:62:5e:fa:bc:72:89:cf:9d:cd:88:46:27:e4:71:ea:
f5:73:7f:7d:cd:bc:37:5d:08:fd:13:ac:b9:3c:27:5c:da:10:
80:86:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:07:02 2026 by rpki-client