
$ rpki-client -vvf repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
File: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft (raw, json)
Hash identifier: HV/t1Pb7ENcmaC+LnmbwXq6CYHQwSc2h/YKGZEUZ18s=
Subject key identifier: 85:FA:57:26:4F:54:2D:72:E4:B0:EE:59:71:13:A7:6B:1E:C8:B3:1F
Authority key identifier: 7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4
Certificate issuer: /CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
Certificate serial: 0BCA6E45B841366A965CC1957F1A84BD3F320936
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
Manifest number: 0204
Signing time: Tue 24 Mar 2026 23:21:20 +0000
Manifest this update: Tue 24 Mar 2026 23:16:20 +0000
Manifest next update: Sat 28 Mar 2026 00:10:20 +0000
Files and hashes: 1: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl (hash: hm7MULzMnjfVbH5K2EV8UiQ6bbndmxBVNVFXQ23mWGk=)
2: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: bUHS7zCDhqnhQezsrNXcG47gU9JfG5NQcO4U+4/bwQc=)
3: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: 0YLohf/ggkakqxRaRFVJUp8vfmU0YPLjnkvCoTzlI1g=)
4: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: PphyhzafZc8USb+ULqaNnnRbeA397pdQzPJ0fXA6bSA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl
rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 00:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ca:6e:45:b8:41:36:6a:96:5c:c1:95:7f:1a:84:bd:3f:32:09:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
Validity
Not Before: Mar 24 23:16:20 2026 GMT
Not After : Mar 28 00:10:20 2026 GMT
Subject: CN=85FA57264F542D72E4B0EE597113A76B1EC8B31F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:3e:e6:e8:98:34:86:b3:cc:b7:9a:92:4f:
f6:d1:c3:8b:cf:27:39:a1:98:15:f8:f5:80:0a:7f:
e2:56:7f:17:b2:2d:b4:e2:d0:dc:05:51:e4:66:de:
23:44:db:6d:fe:cb:7e:fb:b3:97:0c:98:48:70:ab:
ce:59:b1:86:2d:19:e8:3c:17:08:46:7d:e1:d2:e5:
11:a7:9f:9d:ce:8e:4e:3b:2f:20:66:fe:6a:c1:aa:
56:d4:52:27:4f:04:c7:e7:09:d0:3f:81:57:79:3a:
93:eb:42:d3:87:9a:5b:69:5c:36:c6:4d:24:7f:92:
79:5e:9a:0f:e3:c1:b5:40:5f:82:76:80:cd:bf:18:
ac:9d:bf:3e:ff:e5:4d:1f:99:60:39:86:9d:7f:1e:
37:28:e4:bb:73:16:ed:08:9f:9d:c7:2b:bb:f1:f7:
fe:b8:0d:8d:3a:0a:0b:d2:41:1e:c9:fd:2e:60:0d:
7e:29:3b:7a:a9:c3:55:57:d2:18:af:3d:ce:b3:1e:
2e:72:5e:dc:34:48:0a:85:e8:ee:38:25:b0:78:19:
88:cf:ef:f1:37:8c:45:fd:da:c8:8c:fc:41:a6:8f:
41:0f:3e:1e:fe:5a:f2:46:60:64:40:00:47:0d:e8:
cc:c1:c0:29:5f:d2:ba:63:dc:6f:61:c2:10:fe:bf:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FA:57:26:4F:54:2D:72:E4:B0:EE:59:71:13:A7:6B:1E:C8:B3:1F
X509v3 Authority Key Identifier:
keyid:7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5b:1a:30:be:84:f8:72:2c:7d:39:6b:23:e9:d5:22:f8:64:
4e:48:b1:3d:a1:e0:ed:57:60:43:6e:4b:8f:9f:03:1e:c6:ca:
dd:53:59:4b:fd:38:60:01:6a:6a:aa:d5:0a:f9:33:1b:dc:0f:
da:3c:8b:51:a1:e1:b9:8b:3a:9f:11:cd:fa:aa:69:f4:7a:72:
25:74:c5:5c:6f:35:64:ec:0f:37:1c:af:65:6b:15:9f:ac:f5:
3c:20:a9:74:1b:f5:33:3f:45:77:db:12:c8:72:59:0e:02:30:
c8:e3:e7:c5:cf:96:34:44:1a:49:53:41:e8:a7:c6:ab:9e:08:
7c:31:8b:1f:ec:28:23:93:ab:e8:39:be:65:18:8a:15:d0:de:
9f:21:e2:ae:ec:6f:9f:3e:45:5a:a5:80:23:e0:71:6d:e6:e7:
35:47:70:9a:cb:a5:1b:d9:34:dc:6d:26:01:d0:eb:52:58:a3:
3f:a9:03:af:49:eb:06:54:65:f3:49:e8:6f:6c:b1:51:d2:88:
7a:93:3d:f8:3b:3d:0b:77:e4:53:a9:46:45:c3:5a:e6:36:6a:
ea:bf:08:6c:9b:d0:43:63:e9:2c:45:8d:aa:4d:27:7b:1a:5f:
90:40:32:5b:dd:47:06:9b:f7:07:89:07:9a:58:31:8b:bf:0a:
97:3b:34:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:19 2026 by rpki-client