
$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft
File: 1E40BE2B668DAE3E7271E835148386D785E3724C.mft (raw, json)
Hash identifier: s/GcIunJqF07QSxubowjvVi9DLez8TtvKaKUyp1L7h8=
Subject key identifier: F3:D4:23:C5:5B:50:83:13:61:22:8F:80:24:1F:28:98:F9:08:6D:AB
Authority key identifier: 1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C
Certificate issuer: /CN=1E40BE2B668DAE3E7271E835148386D785E3724C
Certificate serial: 7BE431671947B3EA4BE2022A3976357D0AC06203
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft
Manifest number: 011E
Signing time: Tue 24 Mar 2026 13:12:25 +0000
Manifest this update: Tue 24 Mar 2026 13:07:25 +0000
Manifest next update: Fri 27 Mar 2026 20:59:25 +0000
Files and hashes: 1: 1E40BE2B668DAE3E7271E835148386D785E3724C.crl (hash: PfrNj2kvy1jz3gTPBW/WInqJjww8jkU2JV/SMik52yk=)
2: 3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (hash: 6NYs/G1xdGsUC1/WqjKklC2SAb8XsfqjqDKSyuRji20=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl
rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 20:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:e4:31:67:19:47:b3:ea:4b:e2:02:2a:39:76:35:7d:0a:c0:62:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E40BE2B668DAE3E7271E835148386D785E3724C
Validity
Not Before: Mar 24 13:07:25 2026 GMT
Not After : Mar 27 20:59:25 2026 GMT
Subject: CN=F3D423C55B50831361228F80241F2898F9086DAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:eb:fd:b8:ab:b1:85:60:fc:25:4d:5b:e8:
83:fb:6f:6c:38:7b:19:9b:21:d2:3c:ae:15:2c:f6:
a6:74:91:55:f4:31:47:64:9d:0c:4d:52:cd:48:98:
39:93:ff:39:69:d6:37:07:6f:f7:c0:88:e7:c1:90:
a4:ec:1d:5d:22:d1:02:25:a6:e0:76:e0:b0:a6:8a:
fc:34:e0:1e:89:c0:9a:1f:10:34:7b:5c:96:12:d8:
7c:37:d4:0d:c1:a8:23:c9:b9:e2:1b:74:77:38:88:
18:56:b9:f5:55:72:2d:54:7c:26:31:17:cd:93:d0:
3a:72:bd:90:4e:bd:01:97:9b:f1:89:35:c8:32:37:
66:c8:17:45:8c:4f:04:9a:f6:80:3c:96:9e:db:eb:
9f:6b:f3:f9:58:43:5a:71:cd:dd:51:9f:3f:a8:84:
48:5a:51:ff:49:65:f6:a7:39:b0:b8:13:dd:81:66:
29:bf:5e:c7:e6:dc:af:a4:55:4a:2b:81:eb:4f:97:
04:43:51:04:bc:1f:82:3e:f3:c7:a4:41:9c:56:d9:
f7:31:ce:2c:77:6a:91:1c:15:eb:9e:2d:4d:d8:b5:
3b:dc:7e:39:e0:6f:c0:77:d8:c2:80:48:f0:16:ab:
89:c9:2f:7f:bf:d8:ae:95:94:54:1a:44:6c:81:81:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D4:23:C5:5B:50:83:13:61:22:8F:80:24:1F:28:98:F9:08:6D:AB
X509v3 Authority Key Identifier:
keyid:1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:34:9b:8a:1e:f3:13:23:37:f9:45:bb:0a:03:1f:77:26:69:
a3:e4:32:f8:e5:02:14:56:97:bf:28:30:da:a7:92:43:b8:48:
7d:b9:6e:ac:6a:3e:a0:29:70:0b:c4:d1:38:fe:51:0a:18:c3:
a5:04:8b:53:3d:87:31:94:c0:af:a3:2b:b2:21:1b:b9:d3:b5:
ca:c1:f8:8e:53:55:3c:85:fa:46:92:7f:49:e0:2c:1b:13:04:
67:43:a5:f7:61:8c:ae:7f:24:1b:5f:20:fb:b7:fc:59:46:1b:
45:0f:78:ca:99:a8:04:7b:ef:c9:32:74:21:da:31:8b:c3:00:
ab:b7:9a:01:3b:29:52:bf:5d:db:67:2f:0d:56:0b:c9:b2:94:
01:74:f1:e5:8b:14:93:3f:d0:6d:eb:af:19:bb:08:48:ad:56:
0e:88:0d:ae:d2:13:fb:a6:a7:a7:31:fa:fc:da:dd:67:54:2a:
95:9e:73:38:c8:41:4c:1f:0f:6b:b2:82:ba:f9:15:32:e0:cf:
bd:ee:95:1a:2e:31:e5:c3:93:05:02:64:64:08:1a:b7:4f:cd:
ae:6f:fb:25:08:c8:c0:ff:2d:10:5e:c0:cd:17:30:6f:77:e8:
15:1f:d9:a9:bd:39:b0:b3:75:02:0d:4f:3c:48:81:30:d6:88:
7e:00:72:01
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUe+QxZxlHs+pL4gIqOXY1fQrAYgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4
NUUzNzI0QzAeFw0yNjAzMjQxMzA3MjVaFw0yNjAzMjcyMDU5MjVaMDMxMTAvBgNV
BAMTKEYzRDQyM0M1NUI1MDgzMTM2MTIyOEY4MDI0MUYyODk4RjkwODZEQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrPev9uKuxhWD8JU1b6IP7b2w4
exmbIdI8rhUs9qZ0kVX0MUdknQxNUs1ImDmT/zlp1jcHb/fAiOfBkKTsHV0i0QIl
puB24LCmivw04B6JwJofEDR7XJYS2Hw31A3BqCPJueIbdHc4iBhWufVVci1UfCYx
F82T0DpyvZBOvQGXm/GJNcgyN2bIF0WMTwSa9oA8lp7b659r8/lYQ1pxzd1Rnz+o
hEhaUf9JZfanObC4E92BZim/Xsfm3K+kVUorgetPlwRDUQS8H4I+88ekQZxW2fcx
zix3apEcFeueLU3YtTvcfjngb8B32MKASPAWq4nJL3+/2K6VlFQaRGyBgVBxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU89QjxVtQgxNhIo+AJB8omPkIbaswHwYDVR0j
BBgwFoAUHkC+K2aNrj5yceg1FIOG14XjckwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMC8xRTQwQkUyQjY2
OERBRTNFNzI3MUU4MzUxNDgzODZENzg1RTM3MjRDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4NUUz
NzI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl
ZGMtZDY0NTlmZDEzNTA0LzAvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2
RDc4NUUzNzI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABY0m4oe8xMjN/lFuwoDH3cmaaPkMvjlAhRW
l78oMNqnkkO4SH25bqxqPqApcAvE0Tj+UQoYw6UEi1M9hzGUwK+jK7IhG7nTtcrB
+I5TVTyF+kaSf0ngLBsTBGdDpfdhjK5/JBtfIPu3/FlGG0UPeMqZqAR778kydCHa
MYvDAKu3mgE7KVK/XdtnLw1WC8mylAF08eWLFJM/0G3rrxm7CEitVg6IDa7SE/um
p6cx+vza3WdUKpWeczjIQUwfD2uygrr5FTLgz73ulRouMeXDkwUCZGQIGrdPza5v
+yUIyMD/LRBewM0XMG936BUf2am9ObCzdQINTzxIgTDWiH4AcgE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:30:57 2026 by rpki-client