
$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft
File: 7F6E3BF22135CE510C383A9D95C74D2175B70558.mft (raw, json)
Hash identifier: AwOT1x6rkPOxP+2YTrA0An7fKI2UCAb4EibfgSmEs5s=
Subject key identifier: DA:03:FD:E8:16:DD:A4:55:92:EE:82:70:6F:54:CB:01:28:94:60:DB
Authority key identifier: 7F:6E:3B:F2:21:35:CE:51:0C:38:3A:9D:95:C7:4D:21:75:B7:05:58
Certificate issuer: /CN=7F6E3BF22135CE510C383A9D95C74D2175B70558
Certificate serial: 5E451CD191E0854BCC50E02045FFB7CD115315D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft
Manifest number: D0
Signing time: Tue 24 Mar 2026 18:21:28 +0000
Manifest this update: Tue 24 Mar 2026 18:16:28 +0000
Manifest next update: Fri 27 Mar 2026 20:59:28 +0000
Files and hashes: 1: 7F6E3BF22135CE510C383A9D95C74D2175B70558.crl (hash: VynIxBgVvS+vXj4/cJldfL6Wc8q29867ZfUANEg1b8I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.crl
rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 20:59:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:45:1c:d1:91:e0:85:4b:cc:50:e0:20:45:ff:b7:cd:11:53:15:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F6E3BF22135CE510C383A9D95C74D2175B70558
Validity
Not Before: Mar 24 18:16:28 2026 GMT
Not After : Mar 27 20:59:28 2026 GMT
Subject: CN=DA03FDE816DDA45592EE82706F54CB01289460DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:a0:0c:ba:c4:22:71:fe:a2:f0:8b:1a:51:
04:f3:a8:63:d4:4e:1b:ef:3c:d5:2f:36:52:2e:46:
1d:9c:40:06:48:7c:0d:51:ce:af:47:e3:29:8d:4f:
3f:9a:69:f8:ba:3b:e9:eb:1e:1f:1d:0c:52:0e:dc:
ac:d0:12:20:5e:0e:9c:a9:34:7d:84:6d:76:92:ea:
3d:2e:29:a4:8c:d2:b5:63:b3:2a:d9:ae:f0:ce:2c:
64:cf:72:ff:17:32:36:8f:d6:98:f3:5e:c1:24:f1:
31:54:3d:79:05:37:57:02:a7:d4:fe:8d:b8:4e:a6:
76:f4:00:2c:c4:e0:18:3d:91:c6:af:af:35:0c:36:
85:44:ab:40:96:7b:45:f6:33:96:c7:33:24:62:24:
d7:4d:16:e9:78:ae:ad:7e:94:b3:70:16:87:65:40:
52:61:e4:e7:85:f8:fb:2e:46:4a:58:ac:2c:b6:ed:
11:60:c8:43:f2:65:cb:1b:37:13:35:1a:d6:5c:b1:
67:d0:92:c7:67:ae:06:46:75:88:5a:1e:c5:5a:83:
20:e2:30:be:b5:55:fe:f8:1a:2c:f8:32:68:45:74:
ff:50:a2:24:30:01:18:55:46:9f:09:2b:4a:fe:d4:
be:82:d1:63:40:16:c8:37:2a:93:cd:1a:fb:8f:8d:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:03:FD:E8:16:DD:A4:55:92:EE:82:70:6F:54:CB:01:28:94:60:DB
X509v3 Authority Key Identifier:
keyid:7F:6E:3B:F2:21:35:CE:51:0C:38:3A:9D:95:C7:4D:21:75:B7:05:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b7:81:51:fe:c7:b2:65:65:f0:eb:6c:33:f2:6d:8e:a8:ab:
b5:8a:18:34:8d:a4:f0:ee:e2:63:e0:3f:4d:56:80:02:0b:ba:
be:78:c7:d2:e7:6c:f6:e7:67:78:5a:00:73:f5:95:f0:21:0d:
24:51:3c:e4:1e:9d:05:71:96:eb:15:8d:00:00:13:2d:e6:6f:
1a:3b:8c:76:8e:3a:4f:d6:6d:1f:c4:75:ef:c0:d6:a2:69:7f:
7a:81:1b:d5:ae:65:16:ec:14:3d:94:b1:71:97:0a:51:af:8c:
b1:d5:ad:f4:b2:fb:4a:dc:97:c8:6a:1a:c1:e7:4f:57:32:42:
75:8c:c1:79:b4:94:02:9a:4e:80:4f:45:60:1b:43:64:72:65:
c6:26:1f:f4:54:3a:80:da:1f:0c:c9:d5:73:79:23:cb:45:1a:
0c:1a:41:43:f1:2d:bc:10:78:af:69:20:c7:c4:41:3b:6c:6e:
74:7c:0f:57:de:44:44:70:e9:48:92:c4:cc:4b:cd:fa:9f:e9:
aa:75:9a:51:35:66:57:17:d6:9b:c1:ac:16:60:78:d3:39:3f:
4e:4e:c2:a9:ec:f3:85:6b:f0:1c:e7:95:c5:8c:83:70:d0:d9:
9a:f6:f8:4e:59:33:cb:b4:99:fe:05:b1:67:7b:15:ea:73:2f:
9f:7f:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:58 2026 by rpki-client