
$ rpki-client -vvf repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
File: 1DE04B1502D06C1C133ACE901223884FB36B2638.mft (raw, json)
Hash identifier: XP17ix5J365G43WTZ4PS/uLtn9qMe8q8QX9bzL9dOuE=
Subject key identifier: D3:9B:D8:5F:11:D4:DF:D7:11:B8:FE:2A:7B:28:18:4B:56:A3:F1:BE
Authority key identifier: 1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38
Certificate issuer: /CN=1DE04B1502D06C1C133ACE901223884FB36B2638
Certificate serial: 1E5DD1EE88110AEFD4D196F27437E28F2933C5A4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
Manifest number: 0261
Signing time: Wed 25 Mar 2026 12:31:20 +0000
Manifest this update: Wed 25 Mar 2026 12:26:20 +0000
Manifest next update: Sat 28 Mar 2026 23:11:20 +0000
Files and hashes: 1: 1DE04B1502D06C1C133ACE901223884FB36B2638.crl (hash: V7SlzIMzXcTsLkIjXeqHZfXrTazbXz5/l/YY3i5k8tc=)
2: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: WTpBpvKR890Syqxa6avvQWcRw6GgaVVtjnqm7fq2BQE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl
rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 23:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:5d:d1:ee:88:11:0a:ef:d4:d1:96:f2:74:37:e2:8f:29:33:c5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DE04B1502D06C1C133ACE901223884FB36B2638
Validity
Not Before: Mar 25 12:26:20 2026 GMT
Not After : Mar 28 23:11:20 2026 GMT
Subject: CN=D39BD85F11D4DFD711B8FE2A7B28184B56A3F1BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:fb:0c:3b:d8:5b:4a:a2:83:0f:1a:65:1a:
d8:51:96:9a:fd:7a:78:83:82:d4:ef:ae:f2:0b:93:
6a:18:00:95:76:a0:e9:26:76:96:10:60:fb:df:cd:
7a:63:f4:10:0a:35:30:2f:78:f0:86:0d:1b:25:ac:
45:ab:fd:b9:ce:aa:b8:5e:e6:63:44:d8:cc:8d:59:
9e:9f:08:fe:0a:9a:e8:40:9c:31:4a:88:ce:a6:64:
4c:6f:27:63:33:10:d0:20:a6:82:4a:6b:94:aa:03:
01:8c:ff:24:c3:e3:d3:17:76:3f:74:58:fd:5c:6c:
17:8b:8f:5a:14:a6:2e:42:c9:c3:94:c2:8f:dd:ac:
60:51:b7:3e:be:54:f3:d3:52:66:26:e3:f9:c0:bf:
a5:70:c2:d8:fa:65:ab:d8:b9:ff:2f:89:d2:2c:b0:
9e:2b:aa:87:72:07:d1:1b:22:88:4d:9d:ea:a6:c1:
99:3b:da:40:ab:7f:d6:3f:80:83:a0:64:ea:27:65:
52:7f:da:dd:88:01:cc:e4:ee:88:d2:43:75:28:23:
a3:5f:05:f0:e8:25:ce:ed:eb:d7:70:e9:3f:f4:66:
a9:f0:39:13:71:94:45:85:3e:0c:76:b8:a9:70:4f:
ff:0e:12:a5:60:c1:12:32:39:b7:c5:28:63:7b:9c:
e4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9B:D8:5F:11:D4:DF:D7:11:B8:FE:2A:7B:28:18:4B:56:A3:F1:BE
X509v3 Authority Key Identifier:
keyid:1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:10:9f:7e:52:7c:6d:6c:fe:f4:4e:33:03:89:5f:9a:df:f3:
85:2f:be:9e:a0:5d:d1:82:01:e7:dd:7c:13:ad:23:fa:47:ac:
0a:5f:78:e3:c2:55:40:ad:81:ed:77:02:2e:72:b4:a1:77:9b:
89:40:5d:5e:40:a7:a6:0d:e5:da:6b:de:3c:21:73:7a:49:a5:
0c:79:55:39:a3:8f:65:a6:2e:d3:c9:48:d8:40:bb:a6:b0:2a:
72:93:77:a0:a6:dc:f9:f4:29:57:ee:42:22:d1:46:86:87:b5:
44:57:7a:33:26:50:ac:e5:46:dd:2e:55:17:4d:6a:c1:dc:a1:
a9:da:8c:9d:16:46:07:5f:b6:f9:28:e5:53:e9:e0:5f:52:b6:
d0:08:65:75:f9:84:7e:fd:73:0d:e2:2f:f0:ee:12:eb:d3:34:
f7:16:5a:ed:00:d9:86:c2:eb:55:be:be:0a:34:28:d8:0d:06:
76:da:b2:46:03:57:53:8b:44:2f:94:f4:b2:76:4f:56:22:59:
a1:4c:30:7a:e1:91:00:38:5e:95:82:2c:78:8b:ec:6c:4a:c9:
9a:a4:31:f6:83:9b:3b:44:84:bd:53:ba:9c:dd:c3:bc:3d:63:
7c:48:9b:8e:17:8b:47:5a:3f:96:f0:08:7f:47:2d:8d:80:88:
72:31:1b:92
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHl3R7ogRCu/U0ZbydDfijykzxaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZC
MzZCMjYzODAeFw0yNjAzMjUxMjI2MjBaFw0yNjAzMjgyMzExMjBaMDMxMTAvBgNV
BAMTKEQzOUJEODVGMTFENERGRDcxMUI4RkUyQTdCMjgxODRCNTZBM0YxQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3TPsMO9hbSqKDDxplGthRlpr9
eniDgtTvrvILk2oYAJV2oOkmdpYQYPvfzXpj9BAKNTAvePCGDRslrEWr/bnOqrhe
5mNE2MyNWZ6fCP4KmuhAnDFKiM6mZExvJ2MzENAgpoJKa5SqAwGM/yTD49MXdj90
WP1cbBeLj1oUpi5CycOUwo/drGBRtz6+VPPTUmYm4/nAv6Vwwtj6ZavYuf8vidIs
sJ4rqodyB9EbIohNneqmwZk72kCrf9Y/gIOgZOonZVJ/2t2IAczk7ojSQ3UoI6Nf
BfDoJc7t69dw6T/0ZqnwORNxlEWFPgx2uKlwT/8OEqVgwRIyObfFKGN7nOQJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU05vYXxHU39cRuP4qeygYS1aj8b4wHwYDVR0j
BBgwFoAUHeBLFQLQbBwTOs6QEiOIT7NrJjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MmZhYjYxMS04YmUzLTRiNDQtOTU2MS03NTJhMWVkYTA2NWMvMC8xREUwNEIxNTAy
RDA2QzFDMTMzQUNFOTAxMjIzODg0RkIzNkIyNjM4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZCMzZC
MjYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYWI2MTEtOGJlMy00YjQ0LTk1
NjEtNzUyYTFlZGEwNjVjLzAvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4
NEZCMzZCMjYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACMQn35SfG1s/vROMwOJX5rf84Uvvp6gXdGC
AefdfBOtI/pHrApfeOPCVUCtge13Ai5ytKF3m4lAXV5Ap6YN5dpr3jwhc3pJpQx5
VTmjj2WmLtPJSNhAu6awKnKTd6Cm3Pn0KVfuQiLRRoaHtURXejMmUKzlRt0uVRdN
asHcoanajJ0WRgdftvko5VPp4F9SttAIZXX5hH79cw3iL/DuEuvTNPcWWu0A2YbC
61W+vgo0KNgNBnbaskYDV1OLRC+U9LJ2T1YiWaFMMHrhkQA4XpWCLHiL7GxKyZqk
MfaDmztEhL1Tupzdw7w9Y3xIm44Xi0daP5bwCH9HLY2AiHIxG5I=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:03 2026 by rpki-client