
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft
File: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json)
Hash identifier: b0bTJYwXv2q68wyMgH4XZIQuMl/YzLm2qoqAedgSvPA=
Subject key identifier: 14:D6:7D:CE:B5:15:F4:CE:B7:0C:F6:1B:E4:5C:0D:29:13:16:42:FB
Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42
Certificate issuer: /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42
Certificate serial: 673719D6BB44FDF158F3DCD6A4697B6CC801EB69
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft
Manifest number: 0565
Signing time: Thu 26 Mar 2026 07:40:07 +0000
Manifest this update: Thu 26 Mar 2026 07:35:07 +0000
Manifest next update: Sun 29 Mar 2026 15:38:07 +0000
Files and hashes: 1: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: qGDP7mgCBa/S4TCjSUPeNHGcWSR5h+m3Qpx0sFmJ4oE=)
2: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: 1SizngiTVzIbRBWH1t3CjVmzzkPKhWLCfAxINTFYNoo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl
rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 15:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:37:19:d6:bb:44:fd:f1:58:f3:dc:d6:a4:69:7b:6c:c8:01:eb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42
Validity
Not Before: Mar 26 07:35:07 2026 GMT
Not After : Mar 29 15:38:07 2026 GMT
Subject: CN=14D67DCEB515F4CEB70CF61BE45C0D29131642FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:b9:f8:49:ba:7b:6e:f9:19:d6:2a:5f:d4:
f7:47:51:43:72:cb:22:4a:8a:55:db:33:4e:13:b7:
57:8d:64:fc:27:ce:52:55:f7:76:7e:0b:32:01:e5:
35:2d:5b:eb:da:e1:40:2f:31:56:46:0d:b9:01:a8:
e3:75:ad:b6:9e:19:57:6c:62:0c:3f:e8:e8:a9:80:
80:d5:07:a8:16:50:2d:10:5c:37:a8:f4:7d:3d:81:
bc:99:a8:04:ba:a1:6b:33:0b:63:a4:cd:89:3e:78:
84:74:b5:a4:21:fa:c2:98:2a:eb:d4:1d:15:95:9e:
16:e2:6c:1e:d3:02:5d:00:2d:12:be:56:2f:e1:65:
8d:23:16:e8:6f:e3:e5:87:e2:50:d0:fa:d9:4b:be:
0c:4e:3c:c5:4e:98:4e:c4:e6:cd:5c:48:9a:8d:f8:
2d:67:58:8c:1e:5c:dc:a4:0f:b6:00:62:58:64:a7:
64:e5:6d:ce:b7:d3:64:04:92:53:17:d9:fc:29:a7:
77:23:9c:3a:65:49:e5:e1:63:d7:8f:c3:83:46:88:
c2:a7:1e:a8:28:53:c3:a4:59:19:ca:eb:72:44:73:
12:75:83:e1:41:5e:4c:d6:5c:7c:24:6c:04:f7:9c:
29:ff:ca:50:a4:b8:6b:06:7b:ba:6b:9e:d8:35:2b:
11:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D6:7D:CE:B5:15:F4:CE:B7:0C:F6:1B:E4:5C:0D:29:13:16:42:FB
X509v3 Authority Key Identifier:
keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c2:43:3c:ee:fd:4f:e9:63:5e:3c:87:97:4a:a1:24:9f:b8:
6e:c8:db:36:b2:76:c7:cf:cc:86:ac:1c:65:f9:57:4b:47:c7:
06:4a:36:c9:f6:60:f5:40:4f:85:6c:a7:b7:64:56:bf:c3:f0:
03:fc:7f:da:0c:bc:c0:a3:82:05:d8:f3:54:8a:21:83:5a:ff:
75:a6:0c:3e:79:4f:3a:e0:21:16:35:a9:5a:70:7c:12:a7:76:
6e:d6:3f:a2:a9:a8:6c:5d:82:83:c4:55:02:1b:8c:c8:56:64:
66:ff:2a:72:25:e9:7b:74:3a:0d:59:32:d1:8e:86:a5:ee:13:
db:58:2d:9a:74:28:51:7c:58:49:fb:0a:0c:32:ac:7c:17:64:
4a:4a:2e:0c:e1:00:0d:60:0b:ee:2a:52:fc:ad:a7:02:c3:12:
b5:f0:3a:e6:26:f4:a8:68:de:ce:78:6b:3c:bc:3d:d0:5d:b8:
02:61:3b:dd:78:8e:fd:82:14:2b:78:1b:6a:3a:9e:65:03:a2:
02:f2:67:fa:1e:41:76:3f:f6:1f:a8:ac:8f:74:37:d6:f9:20:
45:19:b5:9f:da:ff:11:f8:be:f2:68:22:61:58:6a:92:75:7a:
d1:2a:d1:60:0a:f7:68:0e:58:e3:7c:7c:06:70:af:ff:70:b6:
ca:34:f2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:52 2026 by rpki-client