
$ rpki-client -vvf repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft
File: E025EB5354ADB573B451D02820EA68FD4CAE920A.mft (raw, json)
Hash identifier: yZYjLv5mdVxQ2welQ3yPR/2WqNZYmt62wzIwQFnXcYQ=
Subject key identifier: 31:03:53:A6:10:D4:4A:B8:BA:4F:11:99:70:9F:6D:90:FD:EE:1D:99
Authority key identifier: E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A
Certificate issuer: /CN=E025EB5354ADB573B451D02820EA68FD4CAE920A
Certificate serial: 011862DCE895F5E4285072BFA2C1F41687D4D680
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft
Manifest number: 01BF
Signing time: Wed 25 Mar 2026 20:10:48 +0000
Manifest this update: Wed 25 Mar 2026 20:05:48 +0000
Manifest next update: Sun 29 Mar 2026 07:12:48 +0000
Files and hashes: 1: 3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa (hash: BRyZcy7P9c9jO1spuL0mDoDN9aAC7pRi+y0OjtQk3Qc=)
2: E025EB5354ADB573B451D02820EA68FD4CAE920A.crl (hash: hOBVnKV1wlb422kYdput3y3hL0FhLIMseAzac1J0SoY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl
rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 07:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:18:62:dc:e8:95:f5:e4:28:50:72:bf:a2:c1:f4:16:87:d4:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E025EB5354ADB573B451D02820EA68FD4CAE920A
Validity
Not Before: Mar 25 20:05:48 2026 GMT
Not After : Mar 29 07:12:48 2026 GMT
Subject: CN=310353A610D44AB8BA4F1199709F6D90FDEE1D99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:d0:57:97:3b:b1:e9:39:42:3f:49:14:a4:
9d:d1:86:08:03:b3:a4:b5:06:11:3d:1d:67:99:4e:
f9:29:dd:d4:82:f6:4f:e1:59:b1:8a:6e:13:17:0a:
36:18:35:8c:ad:f0:e3:fe:49:3a:cd:84:69:72:15:
bb:03:c1:76:c6:65:bc:45:77:f6:f8:d7:af:9c:35:
a1:5b:ed:df:4c:17:d2:d7:f2:e4:3e:47:60:8e:1c:
66:6f:24:3a:f8:d3:66:01:48:5b:ad:1e:0a:32:9a:
e2:7a:ac:92:b2:29:6d:c0:3d:f4:5a:d2:1b:5f:40:
f3:55:2d:a9:e4:ae:5f:03:26:15:6f:3a:89:ee:eb:
62:55:a5:01:b9:67:a7:fc:a6:1d:5e:4f:64:e1:37:
25:d7:ce:86:9e:99:4f:18:a4:66:dc:f0:69:3e:6c:
9e:14:75:18:8c:5d:e5:ef:15:aa:0e:82:53:c2:e6:
7f:09:a2:7f:d3:81:1a:cc:a5:3b:ed:e6:27:63:a2:
80:ae:cd:48:7a:44:ae:6d:fa:43:d5:25:c1:9e:8a:
4d:0c:cb:23:bc:a2:ba:8d:a7:f6:65:98:a6:6b:3b:
6d:c5:c9:ab:dd:4f:29:05:38:5c:fb:26:4d:53:e5:
68:ea:c0:bf:24:9c:98:0b:34:bd:c3:ad:1e:a2:4f:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:03:53:A6:10:D4:4A:B8:BA:4F:11:99:70:9F:6D:90:FD:EE:1D:99
X509v3 Authority Key Identifier:
keyid:E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:36:6f:ae:42:8e:e8:2b:61:36:2e:12:96:0e:ea:33:e2:5f:
07:4e:6c:ac:da:fe:48:72:e4:1f:5e:24:b9:6b:b6:26:e6:b7:
03:77:6e:9c:40:f2:44:d4:d9:35:3d:15:ec:5d:24:40:6e:31:
23:b2:7e:1f:e1:9b:d3:d0:bc:bd:9d:c2:78:0f:a1:02:d0:e6:
9b:d1:ac:25:17:e6:57:f8:8e:fe:40:6a:5b:40:e5:78:df:ea:
87:25:67:02:8f:6a:a4:a6:f7:71:17:d3:27:9e:34:69:9a:99:
69:6e:c1:31:2b:aa:f0:e2:15:35:87:b2:6b:96:d3:35:3c:7d:
ff:5f:31:e2:95:ee:d9:26:3c:92:12:03:48:22:c9:90:e5:94:
18:b3:96:26:4d:83:32:8f:25:cb:98:57:7b:30:40:e5:da:ff:
8c:ec:2a:56:72:5c:b5:69:bf:46:bb:d4:b6:3f:b5:ab:c3:e6:
9b:55:33:9d:ae:93:2d:5b:0c:67:0a:41:10:4e:0b:41:b2:65:
3b:ea:e5:dc:fd:54:f7:cd:77:1e:59:47:48:e2:7a:ba:f1:5d:
fc:46:3d:7b:19:8b:45:39:dd:cf:c7:c1:7f:05:2c:cf:02:3e:
e1:33:54:16:a7:5a:ca:c7:b2:2c:71:59:b7:b0:04:6e:35:41:
e3:38:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:00 2026 by rpki-client