
$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
File: 2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft (raw, json)
Hash identifier: cBH2omfdE+ciX2htpXpuoxRPv9w0kcmKZQwyDMMlmJQ=
Subject key identifier: BC:71:4B:0F:10:B3:3C:D3:53:85:FA:46:73:BF:16:8F:69:69:72:C1
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Certificate issuer: /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial: 54F6C1CD3FE59DCD9ECCFCC41030843AF175F3AF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
Manifest number: 3B
Signing time: Wed 25 Mar 2026 11:12:41 +0000
Manifest this update: Wed 25 Mar 2026 11:07:41 +0000
Manifest next update: Sat 28 Mar 2026 23:08:41 +0000
Files and hashes: 1: 3135372e38352e3230392e302f32342d3234203d3e20313339393934.roa (hash: a5X2+ok8mE8xIf3a1VXtJJWHKpTDOaC8E6A5dn4gMkI=)
2: 3135372e38352e3139372e302f32342d3234203d3e20313339393934.roa (hash: 6+g3imB+eHfRhzSR9gW7ZpkaEhVwSzA1W8HoDvKHSeI=)
3: 3135372e38352e3231392e302f32342d3234203d3e20313339393934.roa (hash: f6iL9tEJkQO1bs46Ao4OKswxppdslT/68Bc+VzoJ1s4=)
4: 3135372e38352e3232302e302f32342d3234203d3e20313339393934.roa (hash: yK3XLDzOi+3m97HSvjAuRym3VylO4T3Tk34vYu8HFO0=)
5: 3135372e38352e3230362e302f32342d3234203d3e20313339393934.roa (hash: iiwS82zB9GxKCjKKyiKUK9GjzAqb1QNfmgk+53pJJDQ=)
6: 3135372e38352e3232312e302f32342d3234203d3e20313339393934.roa (hash: b+FAAT7iaq5DKHJcCl3/hr6S30G0F0UGhSvK5RqcPJA=)
7: 2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl (hash: YWOZ3KFegipILnlkbiAQeY9/LwoTeSQM8VQZ5d97+Lo=)
8: 3135372e38352e3231382e302f32342d3234203d3e20313339393934.roa (hash: JxNUwXomc2PJWhbNmfjfM/+4dWebsLp22rxFUnq2rVE=)
9: 3135372e38352e3139382e302f32342d3234203d3e20313339393934.roa (hash: Twzik8Cr8Z6GaxaxOvOAZBrEeZoz8eVQdZRr/dR1PG8=)
10: 3135372e38352e3230382e302f32342d3234203d3e20313339393934.roa (hash: 8hC+akllTPtDtyoAEK0uLN3M/kVK/RND27v1DAQHUIA=)
11: 3135372e38352e3230372e302f32342d3234203d3e20313339393934.roa (hash: 4KKjhMIe91G+a6neiFRcO44kLZOptvWX510XN+PTeyQ=)
12: 3135372e38352e3231312e302f32342d3234203d3e20313339393934.roa (hash: JqdOGYBPvLrCBXO4ixUiBnEK5jA64JvcsWEfLgRkKvs=)
13: 3135372e38352e3231302e302f32342d3234203d3e20313339393934.roa (hash: 4RrZyrtYl0/TzFkzL5joH6DE+UbN40H36/1ByWbo5dY=)
14: 3135372e38352e3231332e302f32342d3234203d3e20313339393934.roa (hash: SN9jtmwRx4rq3d9zDrgwZg575vEhTqfD0x01M8MKZ3I=)
15: 3135372e38352e3231322e302f32342d3234203d3e20313339393934.roa (hash: o5QFNroTfR8vlfsQq1I5A5R9aNMvpQaRACO8I+AaU5c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 23:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f6:c1:cd:3f:e5:9d:cd:9e:cc:fc:c4:10:30:84:3a:f1:75:f3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Validity
Not Before: Mar 25 11:07:41 2026 GMT
Not After : Mar 28 23:08:41 2026 GMT
Subject: CN=BC714B0F10B33CD35385FA4673BF168F696972C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:19:0c:8a:f5:a2:25:58:e7:87:2c:25:fd:8e:
a5:4e:ec:a8:48:5d:0a:22:eb:75:f4:de:b2:13:40:
4e:10:b0:80:bb:d7:35:8c:df:db:00:fd:d0:22:d4:
de:04:07:7d:a1:76:8d:ad:67:d1:55:ea:4b:e9:80:
08:88:cd:73:8b:92:63:a2:95:79:56:64:96:69:28:
0b:b1:e7:29:3b:d3:33:5d:42:86:aa:9c:6f:64:c4:
11:3a:94:0f:3c:eb:16:28:38:ef:9d:cb:39:74:8b:
89:5c:a3:58:61:72:2c:e6:97:40:38:e6:07:e5:e0:
fb:26:ce:ca:4e:61:b3:47:d8:de:22:47:99:41:11:
60:4f:10:7f:94:d4:56:e0:28:a4:95:f9:53:0d:33:
f0:41:09:c4:ba:7d:4a:02:2a:78:1b:77:a6:6c:15:
a3:0d:c2:aa:86:bc:2d:98:6d:75:c6:91:ff:a5:3f:
45:b9:9a:37:4c:13:41:0d:a7:f5:e7:4b:78:c6:d2:
a7:49:5d:b6:49:4b:de:61:a2:ea:0b:04:06:98:b4:
97:8b:a5:37:34:53:a8:94:73:98:e7:aa:71:5f:c7:
3d:26:c1:c9:9e:59:90:ae:72:28:4c:10:9d:39:44:
90:7d:11:85:5c:a0:56:ec:c7:08:07:3f:1d:c6:c8:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:71:4B:0F:10:B3:3C:D3:53:85:FA:46:73:BF:16:8F:69:69:72:C1
X509v3 Authority Key Identifier:
keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:af:b9:ed:c7:00:b9:44:a5:df:50:d0:ec:ea:c7:38:c1:c5:
40:65:31:5a:61:fa:7f:2d:b1:b5:9f:72:b8:57:1a:b7:65:11:
7b:a0:6f:3b:10:2a:45:75:4c:8f:41:0c:4b:98:e5:e3:50:fe:
e1:f6:db:06:cb:13:e2:db:f4:48:45:0b:ac:ab:4d:a6:fe:ae:
ef:f4:13:15:4e:b5:02:dd:fa:ca:0a:b2:ae:1b:cd:33:9f:73:
29:03:a0:a2:81:0c:3b:f2:aa:73:87:ad:e3:d6:48:35:81:8c:
65:de:b9:f1:ee:d1:5d:b9:d7:96:86:89:17:e9:6e:9e:e6:9b:
2b:bc:a4:cd:f5:be:bf:8d:25:96:80:8f:23:85:2c:ca:b1:74:
90:85:22:e6:e5:01:b1:97:e3:59:81:63:6d:ef:78:c1:30:ca:
49:6f:10:b3:8e:e8:19:01:7d:aa:14:17:1b:dc:8d:5c:ff:57:
9c:1a:b1:40:2f:6e:d3:a6:bb:cc:22:a7:79:ac:eb:4e:81:f2:
49:cc:86:1f:af:eb:e9:c1:15:aa:6e:81:a8:59:b5:a5:bc:dd:
b3:34:99:af:fc:b5:b8:c7:1c:d0:76:ee:81:88:9e:69:13:8e:
b0:e3:45:f0:e5:d9:0f:7a:a0:5e:a9:ef:4d:01:53:dd:20:9c:
90:6f:7b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:36:39 2026 by rpki-client