
$ rpki-client -vvf repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft
File: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft (raw, json)
Hash identifier: iq8L1jv8q0CmfWu8VdjRMauhQCPOfTQjzmecTO7BSzs=
Subject key identifier: EB:78:0D:F0:26:4A:29:F2:B3:9C:62:67:34:2A:EE:F8:FA:18:A9:47
Authority key identifier: A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40
Certificate issuer: /CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340
Certificate serial: 6DB3052447645D01526BAE475710DA9468E55695
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft
Manifest number: 025B
Signing time: Tue 24 Mar 2026 01:51:50 +0000
Manifest this update: Tue 24 Mar 2026 01:46:50 +0000
Manifest next update: Fri 27 Mar 2026 04:32:50 +0000
Files and hashes: 1: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl (hash: cj89QiJHf3vhk+umgqfZs6p6kl0AHziUrN9+Ks8dUK4=)
2: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: vtEjv2q0SLw+wrm21rrZ1C1Z0EF7U2shQs5wt9qaUps=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl
rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 04:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:b3:05:24:47:64:5d:01:52:6b:ae:47:57:10:da:94:68:e5:56:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340
Validity
Not Before: Mar 24 01:46:50 2026 GMT
Not After : Mar 27 04:32:50 2026 GMT
Subject: CN=EB780DF0264A29F2B39C6267342AEEF8FA18A947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:9e:ec:32:ac:10:d7:59:ca:72:84:56:72:
58:5f:8f:41:5e:73:64:03:f5:7e:e3:66:b6:62:35:
53:c6:5c:1c:7b:25:ee:86:60:b1:14:06:47:89:ee:
07:1c:2d:49:87:cb:90:55:2a:77:ed:a4:73:69:30:
94:90:40:80:8b:55:dc:4e:27:24:b6:c3:d8:61:4e:
78:2b:10:e0:65:71:d2:01:02:0f:aa:1d:b7:fd:b7:
a2:8f:44:0b:05:0f:cb:a5:5a:b8:b2:78:ae:b4:b3:
6c:ae:c2:24:6f:db:5f:97:e3:a4:cc:90:c5:2e:96:
33:c2:1a:2c:08:63:f9:21:e5:c1:4d:74:46:78:7e:
57:50:8b:3e:bb:0a:48:0e:27:0e:ff:90:52:48:c4:
54:5f:02:7c:df:c7:78:82:e5:fe:ba:56:4b:d5:b0:
31:c3:36:95:1e:b7:7a:00:28:80:ac:f3:bf:ac:f9:
2a:64:24:c7:ea:e2:a4:98:e4:b0:6c:41:ee:c4:db:
67:60:cf:20:b1:14:e2:2d:39:c5:40:ad:4e:8b:be:
d1:e9:01:7c:ab:9f:78:58:b0:82:7d:e0:62:fd:fc:
bc:c9:f0:c4:5e:79:c7:4c:7f:3a:93:be:f9:f6:18:
7e:88:ba:6a:b8:b3:63:79:45:52:bc:bd:d2:a1:03:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:78:0D:F0:26:4A:29:F2:B3:9C:62:67:34:2A:EE:F8:FA:18:A9:47
X509v3 Authority Key Identifier:
keyid:A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bb:bc:4f:6d:f8:08:13:a2:6d:93:df:03:a1:70:1d:77:ab:
b6:4a:ed:3d:56:20:4a:8b:59:0b:be:39:f4:f4:e1:8a:41:79:
74:fb:ab:0f:c9:9e:2c:ab:68:55:2a:0d:94:97:53:48:41:fb:
3b:a8:ea:51:6d:74:86:b5:99:dd:88:e5:5f:b8:3f:ba:1f:9e:
78:fd:dd:48:2c:87:88:91:ee:d7:1a:8a:f3:fb:23:f2:5f:32:
11:9b:a3:15:4e:0b:3c:37:b3:85:34:d6:22:d5:18:60:e4:81:
78:76:45:dd:72:3d:9d:91:a2:20:04:f4:8c:08:4d:03:cc:5d:
e4:12:7b:f5:e8:93:96:1a:ae:9a:5e:16:3a:ee:eb:ec:bf:7f:
74:f2:00:bc:12:99:70:32:a4:8a:9c:30:f5:4b:80:5a:c5:b0:
07:79:22:85:fd:8f:b5:67:85:36:fb:8c:98:39:0f:3d:3a:3c:
48:56:22:a8:12:92:21:35:08:b7:a8:35:c8:82:95:63:28:1c:
db:8e:2c:9c:4f:70:e3:1e:df:47:24:79:f8:ad:9f:3d:25:fe:
ec:ab:9c:c8:8e:f9:af:05:13:e7:78:37:7c:e6:a4:d3:85:1b:
f2:a3:68:a2:5f:1b:03:74:3e:c6:48:69:d9:02:da:31:4c:a9:
38:18:67:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:44:36 2026 by rpki-client