
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
File: 7D9756BA26383A8A80C65F2856105B0FF5154379.mft (raw, json)
Hash identifier: PP6CsCjg+4ZwXI71pdoMEqD2T2YKBbrV7GUUrt7TLfI=
Subject key identifier: 69:8A:36:25:68:EC:46:1F:BF:81:20:5F:A0:62:DD:27:B1:FB:74:66
Authority key identifier: 7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79
Certificate issuer: /CN=7D9756BA26383A8A80C65F2856105B0FF5154379
Certificate serial: 5BEA4B99A16E9683D496D7E07F24EDE3A3F59BCF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
Manifest number: 0220
Signing time: Tue 24 Mar 2026 13:12:36 +0000
Manifest this update: Tue 24 Mar 2026 13:07:36 +0000
Manifest next update: Fri 27 Mar 2026 17:53:36 +0000
Files and hashes: 1: 7D9756BA26383A8A80C65F2856105B0FF5154379.crl (hash: ljWMdo8tahiBFbvEcaMzIzlJpnHnCSS8edG9NWpMVoI=)
2: 3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa (hash: jmjpTwFqJBkm3124jZo6u0K/VkEahqOKTR/f2jeIcks=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.crl
rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 17:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ea:4b:99:a1:6e:96:83:d4:96:d7:e0:7f:24:ed:e3:a3:f5:9b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D9756BA26383A8A80C65F2856105B0FF5154379
Validity
Not Before: Mar 24 13:07:36 2026 GMT
Not After : Mar 27 17:53:36 2026 GMT
Subject: CN=698A362568EC461FBF81205FA062DD27B1FB7466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:0b:da:4a:b1:3a:bb:49:16:a8:b8:da:0d:
c5:ce:72:ec:f8:1e:91:6e:10:62:2d:6a:a6:bd:b0:
6d:06:57:e9:64:5a:e5:48:8e:81:96:43:46:e5:56:
71:30:42:3e:d9:9c:1d:2c:e6:40:c4:b9:a3:68:0e:
95:20:f1:a2:08:db:b9:74:65:cb:3b:91:89:87:d6:
bd:ab:d4:a0:03:f8:d9:d3:1c:f8:a0:fd:9a:ff:78:
0a:79:b0:7a:8c:c8:ab:00:32:10:0a:e4:72:66:59:
3d:82:ef:b3:72:65:95:82:b1:c6:52:38:11:0a:67:
d2:33:08:f2:3c:5f:64:3a:94:4a:e6:31:5d:9a:cb:
13:2a:48:91:bb:44:3b:18:6f:30:0c:de:b3:4c:4b:
0b:08:f7:b2:5f:72:b5:94:9a:58:10:f5:3f:06:fc:
0c:9e:88:74:06:fd:88:2b:cb:14:13:29:ab:ca:22:
30:3f:a4:e9:eb:a5:04:3b:38:1e:fb:63:29:95:a4:
1f:f0:69:26:75:dd:fa:46:95:7d:58:7d:7e:49:5e:
a2:2e:0c:b2:42:c8:8d:c1:a1:e3:c3:e0:2e:2f:3d:
a1:a7:82:b7:67:54:fc:86:a4:4e:4d:51:dd:04:40:
9f:f1:7d:ae:0b:76:9e:01:b8:cf:dd:46:4a:be:75:
10:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8A:36:25:68:EC:46:1F:BF:81:20:5F:A0:62:DD:27:B1:FB:74:66
X509v3 Authority Key Identifier:
keyid:7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b9:15:45:bc:17:2a:ce:07:eb:05:1f:91:3f:f4:9a:14:f8:
b0:c2:a2:08:07:f3:e4:4a:4a:55:87:14:85:9d:e7:a5:6d:d9:
fd:b8:80:f9:8f:ff:57:02:42:c5:df:25:5b:f7:c2:be:57:5d:
a4:d4:16:d4:78:b1:c5:cb:9f:d9:51:76:b3:1c:25:fd:31:29:
c6:27:6b:ef:ed:75:8b:29:3a:8d:32:82:c4:e9:9c:66:65:5e:
27:48:8a:00:a3:a4:14:9f:f1:48:dc:3f:81:75:ec:61:6b:ea:
b1:bc:cc:7e:e4:a4:c6:74:84:7a:bd:39:d1:6c:91:87:52:e8:
aa:c4:11:83:68:9a:27:87:54:0e:39:07:2c:20:7c:fb:78:c7:
dc:80:b5:f1:bd:4c:83:d0:f2:e5:df:8d:f8:2c:3a:6d:20:54:
a2:34:a4:5d:fd:9d:5b:ac:8c:1a:de:19:cc:5c:bf:25:ad:32:
e9:80:0f:b2:80:3f:22:c9:8f:f9:72:d0:79:24:ea:00:95:04:
32:1e:63:a8:5e:e1:e5:6a:c7:b0:a0:0e:32:4a:a1:88:13:96:
df:57:42:db:a1:56:23:63:50:62:40:b9:c1:67:f3:83:06:99:
1d:42:75:ea:07:6f:25:7f:50:d2:8f:9a:76:1e:f2:bb:b2:ab:
4d:36:c1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:46 2026 by rpki-client