
$ rpki-client -vvf repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.mft
File: E0EC18AE1077112F303C479717B7E1EAA868E35F.mft (raw, json)
Hash identifier: lYe09oMxRYovDs+DNSKUI63a7wpfvrWe2mM9EHyylpE=
Subject key identifier: 32:D5:DB:64:DD:B5:F5:C1:AE:37:26:F1:F7:D0:1B:84:F9:17:FC:A0
Authority key identifier: E0:EC:18:AE:10:77:11:2F:30:3C:47:97:17:B7:E1:EA:A8:68:E3:5F
Certificate issuer: /CN=E0EC18AE1077112F303C479717B7E1EAA868E35F
Certificate serial: 478796B6D0479D99A530446DA3F90F94A18D8672
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0EC18AE1077112F303C479717B7E1EAA868E35F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.mft
Manifest number: 0181
Signing time: Wed 25 Mar 2026 21:42:13 +0000
Manifest this update: Wed 25 Mar 2026 21:37:13 +0000
Manifest next update: Sat 28 Mar 2026 23:33:13 +0000
Files and hashes: 1: 3130332e3138362e33342e302f32342d3234203d3e20313439363837.roa (hash: iFIOjwBtj1k6jrBAXZlZrv1rFkh0HszvE5iJysrcroI=)
2: E0EC18AE1077112F303C479717B7E1EAA868E35F.crl (hash: +GJSnNou3BdZrrtO9VzYL39527Zc80rknGbAVGcD5sQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.crl
rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0EC18AE1077112F303C479717B7E1EAA868E35F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 23:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:87:96:b6:d0:47:9d:99:a5:30:44:6d:a3:f9:0f:94:a1:8d:86:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0EC18AE1077112F303C479717B7E1EAA868E35F
Validity
Not Before: Mar 25 21:37:13 2026 GMT
Not After : Mar 28 23:33:13 2026 GMT
Subject: CN=32D5DB64DDB5F5C1AE3726F1F7D01B84F917FCA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b8:21:ba:ff:68:27:9c:32:54:90:60:fb:cd:
d4:88:03:25:bd:89:d4:d7:3c:78:cc:45:88:17:36:
89:97:3c:14:3a:38:11:0c:6b:c4:29:03:ee:15:6f:
d7:b7:aa:a8:00:69:c0:82:27:50:b4:f8:28:ab:f6:
bc:25:96:6b:09:c7:50:e1:81:ef:f9:05:4e:87:3f:
80:6f:71:80:ee:bb:32:fb:c9:55:49:d9:5a:21:72:
36:e2:86:7e:15:21:df:7a:ab:d5:0b:2b:0c:69:ad:
af:24:61:a8:2d:ff:99:5e:43:bc:74:38:db:c6:a9:
3f:10:98:1e:f1:a8:50:24:e7:a7:fc:d9:58:1d:b4:
8a:cd:26:41:04:42:7d:3f:10:2c:4d:81:4e:5e:31:
56:d2:f6:f4:aa:c5:d1:c0:0d:2b:9d:cc:24:78:a6:
e0:36:36:ee:6c:0c:3c:4c:53:ee:fc:e9:28:c5:9d:
70:44:11:d7:14:9a:c4:db:92:4f:a5:0b:91:17:ff:
80:d2:8b:22:20:60:44:47:10:ed:aa:98:f3:90:56:
f5:80:4c:71:b9:ce:20:df:ad:01:83:85:f1:01:fb:
ef:47:d5:47:88:e9:92:de:62:85:5f:32:af:e9:79:
cb:0d:cd:46:41:3a:83:29:01:7a:43:99:fa:38:5f:
88:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D5:DB:64:DD:B5:F5:C1:AE:37:26:F1:F7:D0:1B:84:F9:17:FC:A0
X509v3 Authority Key Identifier:
keyid:E0:EC:18:AE:10:77:11:2F:30:3C:47:97:17:B7:E1:EA:A8:68:E3:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0EC18AE1077112F303C479717B7E1EAA868E35F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/E0EC18AE1077112F303C479717B7E1EAA868E35F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:28:dc:55:43:00:7a:1c:ca:c6:27:55:c9:eb:ed:89:e1:36:
51:fd:ee:4d:69:d5:f9:f3:5a:fb:4d:d8:da:84:b7:c5:07:cb:
db:69:3c:8f:f4:39:5f:39:63:7c:fa:27:b5:5c:50:f2:29:79:
95:32:94:07:16:2d:df:74:d0:c7:a1:80:c7:6f:d4:37:dc:11:
32:bf:68:06:7e:e6:cf:e0:1a:af:48:78:fb:01:54:75:37:3e:
7e:a1:de:c7:9b:fe:e3:0b:42:a2:21:39:d5:95:be:d3:24:2e:
18:03:14:1b:7e:7d:20:f1:4e:fe:ae:5a:75:1c:12:3b:98:f4:
ba:38:78:82:02:d1:de:4b:c4:be:cc:cd:5c:a6:35:b6:2e:92:
87:fc:ba:b3:67:77:82:ab:53:6f:f0:1d:c6:1e:39:35:a2:57:
90:54:88:49:09:5c:b1:6e:1a:2a:eb:e7:8b:c0:5e:80:60:31:
a0:e9:9c:76:f0:79:72:5e:6c:61:f7:13:9c:ff:60:1b:67:b4:
a7:b4:ba:1d:f8:f6:ca:5b:63:a1:ed:99:94:d1:30:1e:da:94:
17:48:4e:a1:1b:87:34:50:a7:d1:56:48:9a:37:0d:e1:e9:d1:
de:69:44:9d:18:02:6b:d2:7a:48:4f:86:7e:80:62:bb:d5:17:
b8:e3:df:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:11:24 2026 by rpki-client