
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft
File: E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft (raw, json)
Hash identifier: CBnKOHONWULsdnpyqCGOiY0YoBYTK/MOLnGVMwFibpk=
Subject key identifier: F7:38:7B:58:21:A2:BA:C3:E5:86:B6:77:0E:68:E0:19:18:77:58:05
Authority key identifier: E0:74:B9:AA:71:8C:37:F8:B1:26:24:3F:2E:30:DA:35:F4:3C:0D:D2
Certificate issuer: /CN=E074B9AA718C37F8B126243F2E30DA35F43C0DD2
Certificate serial: 3F00A826D4B42B2ECB1F5BA7EE0BD10309A4B7C4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft
Manifest number: 0207
Signing time: Tue 24 Mar 2026 09:44:13 +0000
Manifest this update: Tue 24 Mar 2026 09:39:13 +0000
Manifest next update: Fri 27 Mar 2026 17:50:13 +0000
Files and hashes: 1: E074B9AA718C37F8B126243F2E30DA35F43C0DD2.crl (hash: gn1s8X2oZi39omVBpYeoHMt+ca9D8ipMokVGlj3CULM=)
2: 3130332e3132362e32362e302f32342d3234203d3e20313530353038.roa (hash: dOmtQ8xQIM/OxqNbVqEyr7os+kU4sc0vVqyQb/jy+M4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.crl
rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 17:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:00:a8:26:d4:b4:2b:2e:cb:1f:5b:a7:ee:0b:d1:03:09:a4:b7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E074B9AA718C37F8B126243F2E30DA35F43C0DD2
Validity
Not Before: Mar 24 09:39:13 2026 GMT
Not After : Mar 27 17:50:13 2026 GMT
Subject: CN=F7387B5821A2BAC3E586B6770E68E01918775805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:01:7b:38:84:9b:db:37:ef:b3:18:84:77:
dd:ff:d7:cf:69:5a:11:24:4f:98:4e:8e:59:a7:2b:
8c:ee:7d:71:89:21:9f:5e:aa:00:4f:93:d8:d4:55:
f3:2e:4a:85:f4:20:7c:87:1c:32:c4:61:09:c0:5c:
ca:fa:d1:8e:1b:2b:2e:8b:55:26:cf:f2:ef:5d:3f:
b0:eb:18:d2:28:4b:4d:b1:55:ef:b0:89:9e:cc:a5:
5b:a4:05:f1:c4:9c:f0:54:4c:31:01:a7:10:7a:63:
6d:69:38:25:be:18:4d:68:89:96:73:83:c0:1d:84:
39:03:a2:cb:ef:d9:f1:19:6f:41:7f:28:df:93:98:
57:11:2c:43:d9:a5:78:ad:44:1b:69:22:11:78:ea:
94:70:bc:04:2c:2c:00:71:ee:96:6e:28:91:39:1f:
28:89:b6:cc:31:3b:c4:44:28:8b:90:87:16:d5:42:
ce:ba:9b:71:31:4c:3c:08:32:9b:ed:74:f6:ed:c5:
73:9b:a4:e2:dd:dd:2f:0b:02:94:1b:2f:4a:7d:88:
f1:9b:ab:b4:85:06:17:48:33:96:5c:fb:43:84:79:
c5:ef:d8:f4:ec:ef:29:8c:ce:63:8d:25:b3:ca:c4:
00:0a:d6:6f:41:fb:08:40:40:b0:a2:d9:ce:ae:11:
24:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:38:7B:58:21:A2:BA:C3:E5:86:B6:77:0E:68:E0:19:18:77:58:05
X509v3 Authority Key Identifier:
keyid:E0:74:B9:AA:71:8C:37:F8:B1:26:24:3F:2E:30:DA:35:F4:3C:0D:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cd24b05-269e-4784-b935-f27665830fda/0/E074B9AA718C37F8B126243F2E30DA35F43C0DD2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:08:cf:a3:91:ac:c8:87:6c:c1:5f:86:0b:a2:49:57:31:1e:
60:8e:cc:29:c7:69:b5:33:2c:66:13:9c:58:e1:4d:96:c1:36:
8d:8d:84:d3:4b:2a:e5:ec:a8:c4:a1:77:45:22:07:dd:fe:e6:
66:28:b9:ec:7a:df:9b:a6:6d:ac:5a:2e:60:37:e5:02:dd:2d:
e9:06:bf:50:94:94:fb:6f:e7:68:57:17:f3:be:20:a3:97:d8:
5d:3b:89:13:c3:0a:09:71:28:76:65:19:ed:6c:bc:e6:f2:78:
66:53:bf:d0:ee:ab:1a:86:43:b5:75:4f:47:5a:cd:9d:b8:4f:
01:0d:56:c3:be:c5:b3:c1:95:3b:cb:bb:ee:8f:79:5c:32:f4:
e2:fc:33:1f:85:2d:d1:8d:76:71:c1:81:85:34:5e:33:bd:86:
0a:fb:19:e0:0d:60:5b:da:08:9a:7d:cc:f0:47:5e:f3:8e:ab:
58:d6:9f:79:ea:95:c5:1a:f5:e3:33:f5:d1:1c:18:47:9c:45:
88:f5:86:a7:ad:9a:83:a4:df:a3:49:78:a9:ed:8b:ea:ee:9f:
5a:03:06:9c:9c:f9:e3:3c:4d:a6:f7:ae:f4:ab:00:9c:f1:e7:
34:59:b6:01:f2:93:08:2d:5a:9a:f4:0e:c2:30:bd:22:78:6a:
e5:36:a2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:32:10 2026 by rpki-client