
$ rpki-client -vvf repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft
File: 0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft (raw, json)
Hash identifier: vzAyd6pvu0LxATUNzvhwBYn3APkSOFSeTRQ0YbbrHrI=
Subject key identifier: ED:D4:ED:5B:C9:A4:58:49:73:0B:A6:E2:59:F5:60:56:AC:77:1E:B9
Authority key identifier: 0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9
Certificate issuer: /CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9
Certificate serial: 5502A0D47932452C81ADB0932A37937278DB5CC4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft
Manifest number: 0535
Signing time: Thu 26 Mar 2026 02:51:10 +0000
Manifest this update: Thu 26 Mar 2026 02:46:10 +0000
Manifest next update: Sun 29 Mar 2026 09:10:10 +0000
Files and hashes: 1: 3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa (hash: PA1MZra2kgeTlH2OybXWdKE8fFAmRO6cgL0fnUFICrM=)
2: 3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa (hash: fmJerLM1N0ksnlpj4ELJPPRM1ugJcJpRpXiGiX3LpPI=)
3: 3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa (hash: M2s7m3W15+xAk09EIJ5FeWNhzpPtRKiWLuBNFqsp3KM=)
4: 0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl (hash: oiDQyCC35Pu2abLQga2RuAgSih73AHtJ+aoWJIQ+kd4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl
rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 09:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:02:a0:d4:79:32:45:2c:81:ad:b0:93:2a:37:93:72:78:db:5c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9
Validity
Not Before: Mar 26 02:46:10 2026 GMT
Not After : Mar 29 09:10:10 2026 GMT
Subject: CN=EDD4ED5BC9A45849730BA6E259F56056AC771EB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:08:07:6f:dc:b3:5d:37:bc:b8:21:45:f1:
d3:69:f1:d2:ed:4c:64:d4:35:1c:75:bd:cf:27:99:
04:73:de:95:88:6b:f7:4c:d5:5e:48:fa:89:ca:c8:
56:d1:bf:ff:a5:69:d1:0e:e5:74:1c:6f:78:da:f2:
6f:2a:ef:e9:b7:48:55:29:42:a8:20:43:91:dc:a7:
65:09:c5:18:01:25:47:4b:75:93:15:37:eb:a2:d0:
04:93:58:d8:44:bb:1a:f8:20:41:48:ec:9f:6d:74:
89:c4:ef:89:68:7b:2b:b6:03:42:33:ca:70:82:49:
7c:9d:dd:04:e0:81:3c:83:a1:3d:8a:48:f3:ae:45:
05:26:2a:ef:da:c0:82:86:7b:fd:9d:78:ac:5a:b2:
60:7f:15:be:4c:2c:53:5f:39:c4:25:c0:ae:d9:1b:
47:b5:a2:c2:29:0b:1b:e1:c8:b3:2f:b6:2f:81:c7:
51:0d:de:56:32:bd:fe:2a:30:3a:fb:3e:3d:12:b2:
b1:48:88:6e:a2:76:09:58:90:7d:8b:39:96:82:25:
69:2b:cf:2f:32:31:86:f2:96:55:f8:76:58:ef:b1:
87:d3:0f:24:c4:c5:38:58:bd:1b:6a:ad:f0:53:d3:
a6:cd:86:fd:5a:ac:83:a8:e8:2f:46:9e:57:92:07:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D4:ED:5B:C9:A4:58:49:73:0B:A6:E2:59:F5:60:56:AC:77:1E:B9
X509v3 Authority Key Identifier:
keyid:0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:0e:11:b8:15:29:64:78:4e:42:27:2b:71:6d:72:f9:0b:af:
96:1e:76:4b:6b:db:51:ef:9d:75:ce:dc:1e:48:7a:08:1e:60:
cb:ac:00:db:70:39:3c:1b:2e:7f:92:3f:33:1c:78:55:ed:58:
88:12:b9:2a:5d:f5:c2:f4:a6:ff:47:7e:d5:bc:a1:0d:1a:27:
8e:e6:fb:e4:3d:1e:53:ce:65:36:b2:c7:0c:82:f4:db:cc:36:
c4:aa:14:0c:86:87:5a:48:d5:9d:6f:57:ed:ba:91:19:c7:0b:
5d:ea:f2:a9:0e:d3:82:ee:ba:93:c1:34:88:7f:c5:09:68:48:
e1:da:2f:25:42:51:69:83:72:95:9a:19:14:c7:7c:3f:91:74:
e1:d5:54:87:97:f2:3c:f8:38:90:e3:c6:c6:2d:85:ed:c8:d8:
14:95:59:9b:ab:b1:8f:51:4e:99:2e:98:a4:7e:16:c2:47:6f:
29:d8:82:a8:29:9b:13:54:12:66:75:67:37:8d:08:7c:9a:73:
21:2b:1b:85:54:af:6b:99:b5:f7:fd:d8:59:62:1a:1b:ea:07:
df:70:bf:e6:1b:b5:0f:6a:ec:bc:a3:55:4e:9e:00:f5:1b:ec:
71:15:1a:06:93:23:7c:56:f6:ec:3c:7e:da:8b:7d:6a:f4:d1:
aa:33:7e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:18 2026 by rpki-client