
$ rpki-client -vvf repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.mft
File: D79DCFAD73DC86775F136607372499D1F2C9E25C.mft (raw, json)
Hash identifier: khiKq84cvPSt9VUd6ycpcWZqouv76CsnD22L+4U8iGY=
Subject key identifier: BB:0E:3F:98:D3:C3:8C:C3:E2:2B:BE:6F:67:E4:0B:4F:AD:50:7F:90
Authority key identifier: D7:9D:CF:AD:73:DC:86:77:5F:13:66:07:37:24:99:D1:F2:C9:E2:5C
Certificate issuer: /CN=D79DCFAD73DC86775F136607372499D1F2C9E25C
Certificate serial: 18D0B186DB1B8818A8154B7C02418F6CAA38E6AF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.mft
Manifest number: 0167
Signing time: Tue 24 Mar 2026 19:41:35 +0000
Manifest this update: Tue 24 Mar 2026 19:36:35 +0000
Manifest next update: Fri 27 Mar 2026 22:40:35 +0000
Files and hashes: 1: 3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa (hash: YI5TTtJnQG+fGB0QTZOZXBzGC7OWtcOUmujNcoTIZBY=)
2: D79DCFAD73DC86775F136607372499D1F2C9E25C.crl (hash: yB6KpmXJsS2SKoHsE/tmQe9HMTyMHZgmXSVnuPqcFXI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.crl
rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 22:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d0:b1:86:db:1b:88:18:a8:15:4b:7c:02:41:8f:6c:aa:38:e6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79DCFAD73DC86775F136607372499D1F2C9E25C
Validity
Not Before: Mar 24 19:36:35 2026 GMT
Not After : Mar 27 22:40:35 2026 GMT
Subject: CN=BB0E3F98D3C38CC3E22BBE6F67E40B4FAD507F90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:cd:b8:8a:27:bc:ba:c2:06:e7:c8:ce:5d:
92:93:20:8a:6d:26:a3:7b:73:3b:3d:19:57:86:04:
6c:35:e9:3d:32:f2:9b:b2:67:cd:23:2c:cc:9a:93:
4a:c8:3b:5f:a7:0e:1d:09:14:d7:47:f1:68:78:44:
17:46:2b:6f:a8:ec:fe:07:17:0d:08:e7:0d:ef:7e:
51:7c:9f:a6:ee:47:45:99:b2:7e:2d:96:2a:32:83:
7e:86:d3:b0:71:50:78:d0:af:35:6f:b0:a9:1f:d9:
27:5b:d8:c3:b8:50:f2:90:7a:34:fa:23:7d:77:79:
a0:54:91:c5:bd:2d:13:b7:99:bb:16:55:66:f0:41:
71:29:6d:b2:0a:50:03:6f:4a:aa:86:5a:a4:0b:9f:
d1:c0:e3:0f:f7:bf:ae:4f:fe:0e:f2:d6:03:f5:f3:
1c:d2:89:5f:a1:00:97:e8:d5:e7:9a:ca:89:48:16:
63:df:80:00:30:dc:43:f9:98:f6:dc:a4:8d:e6:1f:
f3:9f:2c:e9:60:dc:13:d5:80:6a:de:fd:9e:40:e9:
4b:ad:62:02:95:6f:c7:4b:54:7d:f0:97:85:9e:5a:
bf:e1:69:5d:23:bb:d7:cf:bb:8a:a1:42:5d:24:b5:
2a:c4:82:c4:b0:c9:9f:06:1b:2d:17:e4:cf:9b:3c:
e5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0E:3F:98:D3:C3:8C:C3:E2:2B:BE:6F:67:E4:0B:4F:AD:50:7F:90
X509v3 Authority Key Identifier:
keyid:D7:9D:CF:AD:73:DC:86:77:5F:13:66:07:37:24:99:D1:F2:C9:E2:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3a:49:8c:c3:7c:72:6c:e4:fb:e4:d5:a8:f2:2f:bf:bd:9d:
3c:6a:04:bd:3c:43:56:c2:b6:cc:01:62:ce:4b:2d:f7:6f:28:
df:f9:1a:ce:03:5e:ae:22:eb:6f:93:7c:16:4f:8a:be:02:e9:
4b:7f:62:f9:dc:22:8e:c2:76:72:d8:d5:53:d9:a0:7b:c3:22:
38:40:d2:d6:ef:51:e8:a3:ac:44:e6:0e:eb:ce:82:5c:7e:90:
87:2d:8d:6a:63:2e:83:7f:e4:57:83:8f:a5:1e:ff:63:fc:5f:
9a:ef:28:9f:5e:f1:9e:e4:84:38:45:7f:9f:1c:06:6c:52:d7:
b1:15:4d:e2:df:bd:33:1d:dd:39:4d:8f:fa:cf:4c:80:1c:4a:
04:9e:a5:3d:59:28:93:3b:d5:b1:7d:d4:1d:9b:13:bd:b0:09:
3d:b8:dc:92:a4:00:f6:17:90:25:3d:bc:2d:f1:5a:e1:99:f2:
9a:38:02:9b:27:36:0d:a5:39:e1:f8:1f:f9:10:c9:02:4c:00:
8b:3b:ab:e1:47:26:84:55:71:b9:8c:f0:39:dc:94:fd:c9:fd:
32:43:6a:73:d7:5e:32:e7:57:56:3f:63:13:11:ed:97:8d:72:
fc:b4:4c:67:3b:c0:cd:57:c0:12:c2:d9:df:e4:ce:23:55:a7:
87:88:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:49 2026 by rpki-client