
$ rpki-client -vvf repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
File: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft (raw, json)
Hash identifier: 31J2lGmf7QX3wthD5qgtkbwdsT3ZJ5q183+Ngq0oxV4=
Subject key identifier: B7:1A:7B:A6:50:DF:E5:33:34:A6:33:C3:0F:B9:75:0C:8A:D8:4E:84
Authority key identifier: 7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4
Certificate issuer: /CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
Certificate serial: 51F91CF296AD2CCD1A3CAF1B080E47824B66EDE4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
Manifest number: 0205
Signing time: Fri 27 Mar 2026 00:11:20 +0000
Manifest this update: Fri 27 Mar 2026 00:06:20 +0000
Manifest next update: Mon 30 Mar 2026 10:54:20 +0000
Files and hashes: 1: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: bUHS7zCDhqnhQezsrNXcG47gU9JfG5NQcO4U+4/bwQc=)
2: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: PphyhzafZc8USb+ULqaNnnRbeA397pdQzPJ0fXA6bSA=)
3: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl (hash: j+yvAOelSLyQeywEyVoVXuOhTIxWL9CqRu2MFRLac9Q=)
4: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: 0YLohf/ggkakqxRaRFVJUp8vfmU0YPLjnkvCoTzlI1g=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl
rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 30 Mar 2026 06:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:f9:1c:f2:96:ad:2c:cd:1a:3c:af:1b:08:0e:47:82:4b:66:ed:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4
Validity
Not Before: Mar 27 00:06:20 2026 GMT
Not After : Mar 30 10:54:20 2026 GMT
Subject: CN=B71A7BA650DFE53334A633C30FB9750C8AD84E84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:58:23:26:22:c3:e2:3e:6b:99:de:a2:61:3a:
61:a8:a5:3a:fd:5c:a8:18:4e:a9:7f:81:87:ba:fd:
15:7f:f1:9a:34:99:60:66:8d:a9:04:ea:01:aa:29:
99:4f:2a:a8:4f:3e:01:ce:5c:6a:5c:a4:55:dd:86:
b6:3d:5c:3d:fc:05:7c:b0:ca:8d:c1:55:06:28:5a:
99:7d:fd:1a:ca:fa:44:64:00:f5:e3:a9:4d:9e:15:
29:d6:ff:2a:7f:e6:fa:cf:3a:27:62:38:85:39:05:
04:12:79:24:8b:38:d3:2d:ca:e7:ef:37:67:04:86:
87:01:2e:df:b0:7a:0a:ab:56:cb:91:af:69:41:f6:
55:6c:ac:fd:ab:e2:9d:2a:25:15:7a:6b:f7:e1:c3:
ef:30:7e:23:d1:fc:17:1b:a9:f0:d2:24:65:28:90:
63:eb:fc:90:5a:aa:d4:32:a8:a4:50:f5:36:73:e6:
5e:d5:35:52:9e:d2:d8:4d:b0:4a:01:88:3c:03:a4:
31:a3:b0:f1:19:41:dc:aa:df:74:9e:53:1e:78:29:
73:13:32:56:de:e2:09:4e:82:9e:bf:1b:95:45:c8:
86:f5:3a:8c:a3:cf:4b:0a:55:fa:42:44:ee:ce:a2:
7d:bf:d4:17:d3:aa:7d:d7:e0:38:be:25:3c:b1:c9:
b8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1A:7B:A6:50:DF:E5:33:34:A6:33:C3:0F:B9:75:0C:8A:D8:4E:84
X509v3 Authority Key Identifier:
keyid:7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8e:d6:b8:74:e3:7a:18:09:61:5d:73:95:d4:ff:0d:da:87:
61:d6:00:c1:44:30:6c:56:de:80:a7:0e:31:e3:90:96:9d:f9:
ef:aa:cb:34:84:52:b1:7d:04:98:31:eb:3c:11:5f:a8:3c:ae:
b7:c2:16:10:a7:dd:11:24:23:6d:ab:7a:ab:9c:dd:fa:c4:f7:
fa:df:60:69:24:5d:5b:64:55:2e:78:95:be:89:9b:e0:bb:64:
d1:5c:9c:71:c4:32:a2:77:1a:4d:cb:e8:d9:2f:b7:39:58:c9:
aa:3f:46:44:35:09:ca:6a:83:2d:5e:f4:ba:c7:1b:2c:7c:74:
b0:2f:c6:62:4c:c8:6f:5e:63:c0:be:ed:8a:10:df:df:7c:77:
22:6a:23:49:96:78:e9:1f:60:11:19:ed:c6:be:fd:c2:e9:4d:
7f:16:6c:2c:dd:ac:cd:a6:dd:b4:cf:3a:57:8a:e1:3f:69:a7:
14:f3:2d:56:b9:6d:54:1a:fd:d0:c5:a0:c2:ea:49:9e:eb:84:
96:54:0b:b6:25:46:47:5b:c3:f9:b3:17:a9:18:ad:c9:2b:87:
0b:fe:53:f2:e8:47:50:f5:c2:25:7e:a7:93:d0:01:e7:cc:b2:
5f:00:c4:a7:d2:7c:89:20:d2:42:18:0a:7d:5e:47:b8:9f:5d:
74:36:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:08:30 2026 by rpki-client