
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft
File: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft (raw, json)
Hash identifier: KKHVIvhIlmzhDjwgrR/XClsGf0pwHcVU3qgXx2x7+6w=
Subject key identifier: 53:2B:62:8E:10:69:3B:69:E3:A8:3C:B3:A2:EA:77:8D:19:F7:BF:94
Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82
Certificate issuer: /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082
Certificate serial: 2929C4347559F1EF2AACA18B03D4D9ADF7090BF9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft
Manifest number: 0113
Signing time: Thu 26 Mar 2026 06:02:37 +0000
Manifest this update: Thu 26 Mar 2026 05:57:37 +0000
Manifest next update: Sun 29 Mar 2026 15:59:37 +0000
Files and hashes: 1: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 5hBop//FL91nh6eglb7Afoy10VVM0UIJy8JFCFrZk+s=)
2: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl (hash: ZecsRc3AokFek+U1H7zJJ//SXG10IFUDnjq4XkVCU2E=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl
rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 15:59:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:29:c4:34:75:59:f1:ef:2a:ac:a1:8b:03:d4:d9:ad:f7:09:0b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082
Validity
Not Before: Mar 26 05:57:37 2026 GMT
Not After : Mar 29 15:59:37 2026 GMT
Subject: CN=532B628E10693B69E3A83CB3A2EA778D19F7BF94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:29:0f:1b:c3:90:90:32:23:c1:5e:b7:0c:
75:8c:b4:60:bc:84:8d:59:fa:2c:28:7c:eb:66:52:
df:eb:9b:01:e3:25:6e:a7:17:79:5c:08:03:9d:ea:
1e:2d:a9:3a:d9:68:a0:94:22:eb:8b:96:ad:96:ce:
0f:69:be:9b:96:cf:38:13:0e:1d:99:16:ec:32:0e:
1c:1c:85:1f:cf:d6:a3:9a:6d:23:f0:74:27:bf:2e:
09:21:b5:00:7f:0f:49:a6:dd:05:54:6a:5d:01:0b:
f4:ba:1c:33:e7:55:ea:c0:2a:e6:46:2c:91:1e:a9:
b7:b4:30:ca:c3:c3:4a:5b:e6:13:f4:ef:aa:63:f1:
c3:1c:e4:0d:b1:f8:78:6b:9a:da:67:04:9a:bb:6f:
e0:c6:a8:4b:9d:a9:ee:d1:d8:d7:d4:9a:13:3b:b9:
af:16:f8:42:72:d4:e9:8c:34:4b:8a:69:73:2f:3f:
84:1f:11:35:6f:6b:23:ae:5a:35:c9:6b:4b:a0:d9:
79:2d:71:e7:b2:ab:19:b8:95:55:21:b5:c7:51:b0:
b3:39:36:bd:b1:c2:df:35:93:70:31:da:2d:57:f6:
2f:aa:62:17:52:21:8e:3a:9f:e5:c1:ac:3c:4c:3a:
14:97:02:71:d3:63:35:9d:ee:64:ac:d9:19:87:8e:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2B:62:8E:10:69:3B:69:E3:A8:3C:B3:A2:EA:77:8D:19:F7:BF:94
X509v3 Authority Key Identifier:
keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f6:23:93:e8:25:46:67:af:82:f4:82:57:a9:9e:22:89:6f:
6a:04:ad:b7:7a:b4:38:6c:2b:95:5c:6a:9c:15:4a:f8:26:7f:
e3:d3:ba:0a:15:fb:4f:4a:4a:78:74:e7:58:7a:71:fb:33:5a:
0f:e4:f1:bc:a2:01:54:b7:5c:a9:3d:92:f4:95:aa:fc:8c:ff:
83:04:95:62:34:ad:85:0a:87:89:b5:75:d5:29:f2:5d:ad:48:
ab:7d:50:3c:19:77:a1:31:bb:24:7a:c9:00:ec:81:de:c4:eb:
95:b9:b6:12:81:3f:17:67:36:fb:77:52:e2:7b:b8:32:69:7c:
5c:3c:5f:07:fe:0e:e8:e0:45:99:98:f4:c7:86:1e:cc:8c:9f:
b4:32:06:67:c5:8e:8f:01:45:6b:99:32:6a:a9:66:1a:5f:84:
79:da:6c:32:0d:24:43:bc:44:6c:a0:79:fe:83:14:6c:08:46:
59:4b:da:df:a5:6e:8d:20:f5:ac:20:26:66:58:d4:5c:c4:8d:
8c:70:c6:5e:3b:1a:30:98:98:57:11:27:3a:dc:97:60:6d:37:
88:bc:9d:a5:2b:06:e3:a0:c1:31:8a:11:95:d4:24:21:3d:81:
68:b8:86:c0:e8:14:ef:1d:db:3b:b4:1b:26:33:fc:35:95:cc:
57:a3:98:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:31 2026 by rpki-client