
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
File: C58E232004125E8B46AB63B600900D92EB71A3B1.mft (raw, json)
Hash identifier: 5nZYwpjzg03S2yn5moM9ceoQo5FnbuzSI4J2SsJcuSk=
Subject key identifier: DB:4D:1B:BB:9A:65:F0:61:40:B5:FF:76:6F:19:C4:C9:04:11:D0:5A
Authority key identifier: C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1
Certificate issuer: /CN=C58E232004125E8B46AB63B600900D92EB71A3B1
Certificate serial: 61303DB67ABDF1588F659CA296606F0645DBE40A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
Manifest number: 01EC
Signing time: Tue 24 Mar 2026 06:51:57 +0000
Manifest this update: Tue 24 Mar 2026 06:46:57 +0000
Manifest next update: Fri 27 Mar 2026 14:47:57 +0000
Files and hashes: 1: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: gagkqZ1Th9ULC3nGrIkxBLFj551bmKfZ+zY4Ia+9Mpo=)
2: C58E232004125E8B46AB63B600900D92EB71A3B1.crl (hash: EIafS1f/sQJgEpP4yWX+JDCjWKEYW54CowyjCwJWNA8=)
3: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: uU8O3CwjMgf4TqwrU9ZGAuoUWz86Zcgor68D+YzMzqo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl
rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 14:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:30:3d:b6:7a:bd:f1:58:8f:65:9c:a2:96:60:6f:06:45:db:e4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C58E232004125E8B46AB63B600900D92EB71A3B1
Validity
Not Before: Mar 24 06:46:57 2026 GMT
Not After : Mar 27 14:47:57 2026 GMT
Subject: CN=DB4D1BBB9A65F06140B5FF766F19C4C90411D05A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:71:ff:7a:f5:ae:35:b1:ff:b0:13:93:3c:
87:06:b4:bb:b2:a9:dc:54:9b:65:d2:67:d5:03:01:
af:5f:88:fb:90:26:57:9e:d8:98:23:65:17:ba:84:
9f:2f:b5:4a:15:15:0d:7b:e2:a8:f2:63:39:43:88:
8c:2a:f8:93:9f:d2:80:20:90:29:be:ae:e6:25:e6:
dc:ff:64:e2:3c:d0:4f:86:b3:8e:54:fa:13:df:55:
5c:10:49:af:4c:b4:16:a0:02:0d:a9:43:1d:56:a2:
3a:26:81:a0:e9:a7:a9:2a:c1:66:32:dc:6f:b7:72:
71:15:d1:ab:3c:d5:67:20:a2:ad:94:10:b7:4b:95:
bc:f0:b0:cf:f3:b7:fd:a2:55:d1:13:3f:7c:4c:23:
ee:9f:01:c3:f5:87:05:36:a5:e8:f6:c3:2d:bd:28:
10:a5:d6:9c:f2:29:3a:e4:91:c1:83:56:ad:f2:43:
23:9e:fe:3d:da:64:ff:eb:6b:5e:9f:4d:25:ee:8a:
69:c0:1c:99:42:b8:5b:ad:6c:c3:02:cf:93:e0:9c:
49:97:e8:3e:8c:74:9c:d5:1c:58:fb:7a:dc:b2:49:
67:54:1d:26:5c:f6:9f:a3:0a:9a:36:5d:47:5b:cd:
74:80:e4:1b:11:18:0d:b0:84:ad:fb:19:3d:b1:81:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4D:1B:BB:9A:65:F0:61:40:B5:FF:76:6F:19:C4:C9:04:11:D0:5A
X509v3 Authority Key Identifier:
keyid:C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:72:87:4e:c8:9c:5c:aa:66:fd:1f:58:1e:ca:a5:0f:3a:0f:
18:92:90:51:f4:a1:82:92:45:3d:ba:6d:89:80:4c:bd:ae:6a:
97:2a:e8:e7:fe:e9:48:7e:a9:f8:f3:8b:1d:ee:9c:2c:fd:a3:
30:49:bb:a0:bb:3d:d3:e7:82:11:98:4d:12:b7:01:e2:23:ac:
22:79:e0:dc:e0:fb:96:d0:a4:98:76:7b:5d:54:5b:86:8d:45:
7f:54:17:2c:23:ee:bc:45:50:50:1d:49:87:8c:c3:e8:a7:a7:
10:cc:0d:2c:02:f3:2e:e6:35:4b:c9:bb:77:57:6e:9a:4f:fe:
5b:d0:e1:30:a9:03:47:91:38:37:b3:07:23:d9:3e:b3:a3:17:
30:47:69:d6:3d:f8:f3:4b:b9:1d:2d:73:03:c3:8f:4b:9e:66:
02:b1:b3:77:d5:fa:87:b7:0b:8b:38:52:a1:e7:81:af:3c:24:
56:cf:96:cd:77:6c:3a:08:32:da:c7:dc:49:d3:7e:b3:08:53:
0d:8b:e8:c2:1f:ac:b8:2a:fe:9a:95:58:fb:37:8a:36:57:ff:
21:b4:b8:27:80:3c:09:15:e0:27:8d:12:a5:81:fe:4c:06:0f:
b5:b1:06:bd:1f:e6:e1:df:cd:e4:73:d0:bd:88:fb:1f:fc:bd:
44:63:74:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:26:17 2026 by rpki-client