
$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
File: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft (raw, json)
Hash identifier: UrWJp9/LyNO6xYH9uKfaoEdYEF2O/DxD//j5E9MNigc=
Subject key identifier: 61:59:28:B9:19:35:0A:30:1F:25:F1:82:38:81:71:EC:09:50:3D:84
Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA
Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
Certificate serial: 6221B161E9EBECC887BB99427658A6C6E67DA424
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
Manifest number: 0107
Signing time: Tue 24 Mar 2026 02:20:05 +0000
Manifest this update: Tue 24 Mar 2026 02:15:05 +0000
Manifest next update: Fri 27 Mar 2026 13:09:05 +0000
Files and hashes: 1: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: eDVLkqfk43S08o9qz9LRiZEdW7qlzbDriZ0upji6wSE=)
2: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl (hash: ynLJsVThrT4hg6EjtT98W0yCgqna5T8e+yBOcmUaw5o=)
3: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: 1HxtFIC2mDpdIVeFSCE5SBjVAm1XOnzukjpVGUq9Opw=)
4: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: Ys/Ac2N5+uLGmk3R0LquRKwlaYjjmhHi3Oz1JgWuapk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl
rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 13:09:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:21:b1:61:e9:eb:ec:c8:87:bb:99:42:76:58:a6:c6:e6:7d:a4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
Validity
Not Before: Mar 24 02:15:05 2026 GMT
Not After : Mar 27 13:09:05 2026 GMT
Subject: CN=615928B919350A301F25F182388171EC09503D84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:4e:87:ee:48:13:fa:4e:f1:bf:ca:f4:3f:
b6:48:c7:47:28:e7:eb:90:d2:f6:ef:48:17:1f:7f:
87:76:fb:14:53:ce:c0:6f:a5:d9:97:7d:45:5a:a7:
0a:88:fa:6d:f9:42:f1:06:74:78:af:06:95:21:4a:
41:82:f5:66:f3:46:a3:18:a6:b3:ba:1b:3e:fa:a4:
c4:08:63:4a:ad:b6:42:e6:19:66:9c:6e:9b:74:b2:
49:1d:5f:34:67:50:c4:de:34:07:a3:d0:6b:72:98:
64:17:f2:d5:a2:ff:99:90:11:64:7a:23:98:fd:ec:
57:ef:d6:89:a3:d3:07:98:c1:17:1d:29:4a:c6:9f:
54:eb:c0:60:05:e4:5f:ac:65:07:0e:7c:b2:b9:a7:
82:3a:f2:57:a4:76:e8:df:43:20:9f:cb:91:1c:e2:
c5:04:8f:d9:2b:15:36:fb:33:fd:cd:3a:8f:85:e7:
d2:13:d2:15:3c:86:4d:5b:5b:99:b8:4c:e9:38:f7:
20:ab:66:0f:11:95:d4:2e:37:ba:81:44:73:a2:94:
d0:15:bb:03:d5:ff:6d:f8:05:1b:32:d5:af:6a:22:
ec:c0:7a:45:bf:b9:af:62:bc:36:fd:e7:22:f0:a6:
32:18:72:aa:79:44:6e:28:64:84:03:d4:31:61:06:
f3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:28:B9:19:35:0A:30:1F:25:F1:82:38:81:71:EC:09:50:3D:84
X509v3 Authority Key Identifier:
keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:18:28:45:c9:f9:d4:63:c7:df:36:41:97:d1:0b:fd:22:c9:
5e:65:e3:f7:90:93:03:a1:ec:7d:c4:7b:45:fb:bd:c6:11:88:
ed:c9:61:e8:d2:10:5e:39:74:1b:2c:08:8e:82:e5:98:a8:d1:
bf:b2:93:1b:95:53:06:e9:e2:b2:cd:1a:14:66:a7:e8:6c:5e:
9d:ca:97:47:96:34:43:0a:69:52:00:4b:72:4c:bb:3d:c1:c3:
44:e6:01:b6:3d:ac:62:5f:7e:60:cd:26:b3:b7:a2:e8:d1:25:
e3:ea:17:f2:31:e0:66:73:40:13:ea:07:6d:d2:c0:2a:39:fe:
f0:d8:1f:a5:81:fe:5a:0e:cd:23:90:05:1f:c7:77:03:c4:88:
19:46:8c:2e:16:f4:0c:22:e4:20:2d:27:dc:fd:e6:e1:ba:45:
87:72:54:0f:d8:d5:b7:3f:7b:ef:ff:c2:79:7e:42:5d:df:55:
81:ae:1b:67:e7:f9:2b:e2:a7:74:d0:18:a4:9f:40:d6:54:df:
74:d6:55:a3:c5:ff:8d:0f:5f:e3:5e:de:51:70:d7:50:5b:88:
78:ae:93:92:43:26:a6:f8:d9:d7:a5:a0:66:0d:a9:44:ca:c7:
8a:64:fb:c6:c9:4c:50:15:cb:37:92:3e:d5:59:e4:a7:a5:8d:
24:9f:b7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:17 2026 by rpki-client