
$ rpki-client -vvf repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
File: E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft (raw, json)
Hash identifier: kLUcn90sSSb9UXTjbl+9Q5iVvgVXY2zOLSA0UmUsWLE=
Subject key identifier: 51:3E:EB:0F:3D:89:81:C5:C9:A4:B6:90:BE:CF:68:48:AD:61:BA:25
Authority key identifier: E6:E7:10:DA:CC:1F:6D:6D:D9:D7:8F:A6:11:7E:43:62:66:42:E6:F6
Certificate issuer: /CN=E6E710DACC1F6D6DD9D78FA6117E43626642E6F6
Certificate serial: 3D0E9DD4BAE34D0C96EC3A778909BDB620CD5C96
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
Manifest number: 0149
Signing time: Thu 26 Mar 2026 07:01:04 +0000
Manifest this update: Thu 26 Mar 2026 06:56:04 +0000
Manifest next update: Sun 29 Mar 2026 12:57:04 +0000
Files and hashes: 1: E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl (hash: ohWlU7r1LqjM30QLhy+T/Oq0jEgy5Rd5rMAlOhMmwZg=)
2: 3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa (hash: lACmpGVHsyrMldz7jGg52ZaHGDv45aSE8H1uNtq/C7Q=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl
rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 12:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:0e:9d:d4:ba:e3:4d:0c:96:ec:3a:77:89:09:bd:b6:20:cd:5c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6E710DACC1F6D6DD9D78FA6117E43626642E6F6
Validity
Not Before: Mar 26 06:56:04 2026 GMT
Not After : Mar 29 12:57:04 2026 GMT
Subject: CN=513EEB0F3D8981C5C9A4B690BECF6848AD61BA25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:fb:d4:9f:92:93:7d:85:b3:ff:f7:6f:5c:
6b:77:c5:27:d0:b0:2f:7f:36:a8:43:95:41:89:1b:
dc:39:02:33:a0:d5:cc:67:6b:df:cf:48:e9:23:98:
e3:3a:6a:85:c5:5f:19:43:db:df:81:0f:4c:a2:09:
0e:7b:84:c9:7b:69:32:7c:b7:8f:79:7f:a8:69:a9:
bf:c1:c4:10:4d:b9:8d:7a:bc:c8:db:a1:25:44:5e:
b4:4e:27:bf:70:69:be:fe:4c:72:d4:a6:44:52:4b:
e7:73:7b:b7:9f:52:0a:3f:da:47:7f:2c:ba:9d:53:
60:7e:6a:16:62:e9:f7:8b:e3:a1:bf:db:3b:22:c1:
70:95:9a:88:ea:bc:0d:f7:5f:38:28:d9:0c:61:b6:
b4:d1:f4:5e:78:a9:54:44:b2:b9:2c:d4:e1:26:d1:
84:bc:fc:2c:cb:5b:3e:86:ca:34:30:74:b2:a4:6a:
bc:39:aa:9d:7b:2f:b5:fb:de:37:56:ca:b1:97:12:
96:72:5b:1a:0b:f4:08:9d:be:f8:25:42:a5:b5:12:
3f:13:e3:cb:45:22:15:37:a3:c7:c8:af:9a:1d:4b:
37:45:22:8b:78:ca:b9:5e:14:2d:c7:04:01:b4:e7:
c6:6d:31:89:a7:11:e5:3b:f1:0b:f7:a7:21:02:9e:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3E:EB:0F:3D:89:81:C5:C9:A4:B6:90:BE:CF:68:48:AD:61:BA:25
X509v3 Authority Key Identifier:
keyid:E6:E7:10:DA:CC:1F:6D:6D:D9:D7:8F:A6:11:7E:43:62:66:42:E6:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:41:e4:35:b8:b3:ba:e6:d4:86:e1:8f:d4:78:09:d7:04:e8:
f0:8d:30:e3:80:34:65:60:5a:04:e6:52:1c:30:fa:77:aa:f7:
ef:13:71:45:c9:ae:d1:f5:1f:43:ca:5e:73:78:b7:9e:2e:f5:
f3:ef:48:96:70:54:0c:8a:38:cd:d0:18:47:68:88:db:c2:4d:
46:d1:8c:e7:e0:ea:d1:35:87:be:23:3a:af:6a:dc:60:7c:42:
64:1a:33:0b:6e:06:d9:90:ac:da:63:39:a7:3e:56:f9:47:95:
39:f6:43:09:8f:ce:a2:a1:cd:09:08:89:ad:da:9b:90:88:64:
98:25:7f:4d:30:74:37:15:b5:a6:01:c4:d3:d3:e0:51:c0:bc:
4f:c1:96:1e:97:86:2f:c5:89:7a:68:c7:7c:74:f2:d0:f0:3f:
9e:99:ce:10:49:5e:28:3d:24:e4:cc:b9:ca:b3:98:71:89:31:
7a:b3:d0:cd:0b:c6:66:40:5a:ed:d0:99:0c:0a:15:74:e8:e9:
d2:6f:c7:cb:af:c3:70:6d:11:d4:4d:69:3e:b6:ec:79:e3:06:
c8:67:08:e8:86:e0:39:60:d7:45:30:47:d7:b6:e9:26:f5:4e:
9e:b2:fd:28:91:61:5c:fb:d5:59:e4:2e:13:e7:79:f9:29:19:
77:5c:2a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:01 2026 by rpki-client