
$ rpki-client -vvf repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft
File: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft (raw, json)
Hash identifier: iJjaFthj5kXDYXS5xiOMGBYWmTakGFgR6h9sXre6pi4=
Subject key identifier: D6:1B:4B:04:5E:74:62:99:57:AF:36:5C:81:9D:E4:77:F6:B8:D4:26
Authority key identifier: AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06
Certificate issuer: /CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906
Certificate serial: 025F9789D37BFDBC2074AF8A2F1B15246B736E80
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft
Manifest number: 051D
Signing time: Wed 25 Mar 2026 10:52:09 +0000
Manifest this update: Wed 25 Mar 2026 10:47:09 +0000
Manifest next update: Sat 28 Mar 2026 19:41:09 +0000
Files and hashes: 1: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: XAdZjhJ8p/Sfbf/+znyNJnyeiAlF9/1TNV8duJLhiwk=)
2: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl (hash: UcSaunoobPpLnuSPOEwLTLi0Gt9FWDiGvLSCrhxorW4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl
rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 19:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:5f:97:89:d3:7b:fd:bc:20:74:af:8a:2f:1b:15:24:6b:73:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906
Validity
Not Before: Mar 25 10:47:09 2026 GMT
Not After : Mar 28 19:41:09 2026 GMT
Subject: CN=D61B4B045E74629957AF365C819DE477F6B8D426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bf:c4:7a:56:5b:fe:1c:73:5e:ef:62:43:75:
db:a3:c3:c9:d2:31:b8:05:fb:f6:cd:92:dd:11:48:
84:a2:72:e6:03:88:08:ae:d2:eb:c1:89:14:3e:ec:
62:b4:59:55:48:59:0f:75:17:09:c9:3f:5b:27:f2:
7e:10:c0:21:e0:64:ce:66:1c:1d:7e:1a:6b:91:1e:
7a:33:be:31:86:7c:a2:2b:35:a9:df:1a:fe:e9:d2:
40:f0:55:2c:7b:f0:e3:0b:45:b2:0b:52:79:74:06:
1b:c8:94:c0:31:e1:3c:ea:34:10:2c:3b:6a:30:09:
68:81:43:d1:a3:fd:bb:af:ac:f1:6c:8a:d5:8c:ee:
77:34:9f:ff:5b:2b:86:bb:7a:05:2f:87:d9:59:e3:
7e:7d:ae:5c:24:dc:af:1f:b2:18:81:9d:81:68:3c:
cf:1a:a3:37:6e:c5:82:96:c7:6f:3d:2f:d6:e1:80:
47:54:93:7e:70:44:27:01:05:1b:cc:d3:2e:f9:5b:
ab:12:e5:e1:8e:c1:9d:09:9b:3d:1f:b4:80:0c:ec:
b2:68:a1:32:84:d2:f5:bf:7f:86:41:aa:ee:6f:37:
f8:d6:9b:0a:b4:3c:10:b7:e4:f4:f7:7a:e3:34:ef:
49:65:71:0e:27:ea:89:d1:5f:4b:cd:6e:0a:aa:71:
9f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1B:4B:04:5E:74:62:99:57:AF:36:5C:81:9D:E4:77:F6:B8:D4:26
X509v3 Authority Key Identifier:
keyid:AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:46:79:7e:ec:45:c1:40:15:09:f7:55:06:0d:23:e8:94:9c:
cb:c5:f5:23:21:c9:c0:69:30:88:0a:17:45:17:7b:dd:90:f3:
16:1f:85:3b:95:b7:7f:23:15:2c:80:e9:2a:73:03:a8:6b:6a:
33:c8:f7:2b:e0:37:b2:e0:24:dd:37:d7:bc:a0:7c:5a:a4:7c:
b9:30:f2:91:4c:eb:5c:e6:c2:32:22:dc:61:b0:0b:8e:84:af:
6c:70:29:3b:d2:e0:b8:bf:bd:10:da:fe:ea:66:2c:a4:f9:69:
d7:c0:24:c5:8a:56:94:76:c3:30:ee:6e:3a:43:4e:5d:dc:4f:
20:90:5c:80:69:9a:d0:22:df:d6:f9:71:eb:2e:1f:8d:8b:8c:
ce:47:ba:c3:49:b4:fc:6c:01:db:8c:c4:b5:99:f3:44:e7:67:
f4:4b:1c:dc:29:c3:ae:fe:0a:fc:ea:15:fd:d6:13:83:62:e6:
a6:31:5c:33:de:6b:7b:a0:8f:b6:73:08:22:c6:f8:6c:cf:c2:
2c:ef:be:05:de:fb:f7:a4:7f:6e:7a:e0:3f:27:f1:c0:33:51:
d6:bd:9e:a9:6c:24:85:d1:ad:a8:b7:19:d4:74:58:94:66:42:
34:04:50:50:5b:8f:d1:ec:08:1e:bd:07:40:53:f5:66:f4:3d:
55:57:44:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:23 2026 by rpki-client