
$ rpki-client -vvf repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
File: E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft (raw, json)
Hash identifier: bUGMR8yHMu1roh5e9nqBcNJZAImPduqMlxg5IoQkjKk=
Subject key identifier: D7:A3:0D:8E:0F:B9:80:8B:E8:4F:38:11:D1:B3:4D:AD:42:BC:DD:B4
Authority key identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
Certificate issuer: /CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
Certificate serial: 135F75A09E52A66FBEA32520BB2A4AC1C8814541
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
Manifest number: 01E8
Signing time: Tue 24 Mar 2026 07:11:00 +0000
Manifest this update: Tue 24 Mar 2026 07:06:00 +0000
Manifest next update: Fri 27 Mar 2026 16:23:00 +0000
Files and hashes: 1: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: zEzMYkfJbPhYg1XrDRlczjsI6WELvU+Gubjsh7Kk50s=)
2: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: t5FEbOLpmmiM+pm5xNk45bS+68qbBIUF8y4AW5jVQqc=)
3: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: jjOKgEY4cHLUUknUayo2MUdvkFMhoUI35zEMGYK64MQ=)
4: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: 2f4uu7IrkIZq7UTq+ptH1NLF5HW0iMlWBn9DqvPnp4U=)
5: E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl (hash: LJfwAp8Yx66Aa97NzHWMeRYWshLwi5S3XwsIhhlsWmA=)
6: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: PfXBdlYDWEtVezNTe8gChl6D2vjrU0fVmVCcz01D0ac=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl
rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 16:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:5f:75:a0:9e:52:a6:6f:be:a3:25:20:bb:2a:4a:c1:c8:81:45:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
Validity
Not Before: Mar 24 07:06:00 2026 GMT
Not After : Mar 27 16:23:00 2026 GMT
Subject: CN=D7A30D8E0FB9808BE84F3811D1B34DAD42BCDDB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8b:a6:e5:59:e2:48:86:60:aa:a4:1f:4a:1c:
4d:96:bb:6a:97:8f:82:50:1b:e6:6c:9f:5e:98:88:
a3:29:aa:a0:42:08:22:bd:0b:a4:50:62:c0:18:0d:
80:c7:7a:d2:63:a4:df:9f:e7:82:18:9f:97:7c:b2:
17:f8:87:a8:3b:39:7f:e9:c7:69:ba:36:0a:03:49:
4e:6c:e5:0f:14:fc:16:4f:3b:54:5c:8f:b8:e1:51:
16:34:1e:f8:fd:bd:e7:e7:5d:b2:09:94:2b:e5:35:
17:fd:a7:30:ac:1b:25:2e:a7:4c:c0:58:6a:22:70:
b4:34:6c:ba:3d:ee:5a:99:26:8d:a9:16:bf:e7:1d:
45:fb:26:69:4a:18:29:32:26:d5:b8:a6:ce:f1:8a:
6a:4d:e1:18:82:c8:05:56:d6:15:42:22:0a:61:ff:
fb:e5:11:66:3b:32:35:1d:87:24:70:43:ee:6b:f5:
f9:e7:6c:08:85:1b:be:aa:a3:e3:64:0c:92:a3:e6:
d6:0e:0d:85:22:93:a6:b6:ad:64:14:66:0e:3f:ce:
b3:17:6f:2c:79:76:f0:c2:f5:5f:14:d0:d1:20:fd:
14:af:0a:a1:e8:7c:af:bc:a0:9d:33:9d:2e:89:20:
d7:4f:27:4a:f7:85:eb:ec:14:f1:cd:6e:ca:a9:e2:
2b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A3:0D:8E:0F:B9:80:8B:E8:4F:38:11:D1:B3:4D:AD:42:BC:DD:B4
X509v3 Authority Key Identifier:
keyid:E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:12:1d:66:45:5d:19:84:c8:15:2d:19:1e:d3:15:c3:0c:0e:
e3:ba:37:8c:ae:48:d3:86:ab:b9:39:87:49:1c:4c:6e:ce:df:
c1:ca:4d:58:e4:1c:7a:9a:7f:26:f0:19:d5:3e:ff:af:a6:bd:
82:7d:dc:c1:cd:9a:9f:47:fa:0e:61:3c:5a:17:90:80:cc:e0:
e5:09:53:59:8b:82:f5:a1:5e:69:22:78:03:f9:bb:be:a7:fa:
a2:a5:1b:40:7a:5f:90:51:3a:af:fe:3e:a9:9c:eb:c8:10:f0:
dd:bb:37:30:22:52:5b:84:88:ff:54:e7:f7:16:f3:c1:49:23:
98:d2:60:88:c7:e6:c1:b0:c3:13:7b:b2:02:cd:57:83:3b:f9:
64:c1:d7:0b:34:74:86:ad:e8:7e:c2:4e:c3:49:bc:42:a0:bd:
4a:7b:26:3c:ff:e1:3e:a9:39:9e:c5:65:4a:f0:39:ab:4d:34:
8d:16:77:56:4b:99:7c:4b:26:8c:15:e0:e0:33:81:35:da:27:
65:43:da:0a:5f:d9:6f:22:97:03:27:d6:31:fe:24:78:43:08:
a8:3e:81:b3:dd:ca:a8:17:01:45:7c:f8:e4:f2:a3:33:6b:98:
6d:45:fa:9f:af:20:8c:2d:bc:34:1d:e2:60:0d:89:78:cd:7c:
0a:63:6c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:17 2026 by rpki-client