
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft
File: C619643EEB518333DAE2A79933BEB1320C89CA87.mft (raw, json)
Hash identifier: 06I8NyFNLkWX08xzLMMwCD/RyOb9ht+/PquatRhu23Y=
Subject key identifier: 50:D9:7A:06:D5:1B:D0:F1:6D:46:E8:61:F2:B9:4B:AD:76:A5:6D:21
Authority key identifier: C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87
Certificate issuer: /CN=C619643EEB518333DAE2A79933BEB1320C89CA87
Certificate serial: 785E5B9D1A56B217347258EA32793512063610D3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft
Manifest number: ED
Signing time: Thu 26 Mar 2026 00:51:21 +0000
Manifest this update: Thu 26 Mar 2026 00:46:21 +0000
Manifest next update: Sun 29 Mar 2026 02:05:21 +0000
Files and hashes: 1: 3130332e3231302e332e302f32342d3234203d3e20313530393935.roa (hash: 8QRWf0VdSTsdniD1lv5yGS0A0uZPBTkfzdZ7EZY1Ybs=)
2: 3130332e3231302e322e302f32332d3233203d3e20313530393935.roa (hash: xzpAdAN4PgqY0zHFsI//uf025PaXef+Zn07c2kacwac=)
3: 3130332e3231302e322e302f32342d3234203d3e20313530393935.roa (hash: 0Dp8E4LSLWldobjFKfVvudN74JKOjxQzpOolgbOemt0=)
4: C619643EEB518333DAE2A79933BEB1320C89CA87.crl (hash: YEuhv5TAqPDOl3WCA9FtIF+UKiDohc65jlDrnM2zp48=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl
rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 02:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:5e:5b:9d:1a:56:b2:17:34:72:58:ea:32:79:35:12:06:36:10:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C619643EEB518333DAE2A79933BEB1320C89CA87
Validity
Not Before: Mar 26 00:46:21 2026 GMT
Not After : Mar 29 02:05:21 2026 GMT
Subject: CN=50D97A06D51BD0F16D46E861F2B94BAD76A56D21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:f6:6f:b2:64:ba:3f:46:03:89:47:d3:9d:
f9:0f:65:77:1b:56:33:75:8b:99:87:43:d0:ba:7a:
d3:56:10:45:dc:4f:95:31:fc:98:5a:50:f7:ca:53:
f6:4b:57:92:c4:34:25:a4:e5:bc:c4:76:1d:c3:3b:
f2:7a:dd:8e:d6:cc:58:e7:18:a0:e0:cc:44:a1:17:
3c:ac:da:55:03:c3:ba:c6:03:e2:5a:ae:13:fc:41:
75:d8:6a:20:71:98:2c:c4:e1:7c:ad:33:06:36:6b:
7e:0a:1c:17:2e:1b:e8:58:55:60:a1:d6:71:76:be:
c1:e5:81:1b:13:8b:fd:74:7a:45:1b:80:aa:38:f5:
f9:64:0a:da:3e:ef:50:cb:13:10:9f:c0:79:81:6a:
10:0b:2c:9e:95:07:7f:1b:08:46:19:7a:0d:a5:56:
73:d9:12:53:4c:e2:9c:7a:18:0a:dd:78:bf:0e:60:
ba:6b:e9:a5:2b:b1:59:c4:19:0a:52:2d:cd:76:35:
f4:6b:dd:8a:48:60:60:ed:3b:8d:a2:52:bd:c2:b5:
d1:1c:47:33:61:61:e6:c8:c1:8f:15:4c:f3:68:d5:
33:ca:7b:6a:21:d9:78:44:78:34:6b:bf:a2:bd:29:
99:42:da:dc:cd:c3:88:58:17:13:ee:a1:3f:4b:82:
47:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D9:7A:06:D5:1B:D0:F1:6D:46:E8:61:F2:B9:4B:AD:76:A5:6D:21
X509v3 Authority Key Identifier:
keyid:C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e6:1a:60:53:d6:f5:13:53:01:be:f2:cf:d0:16:ee:8f:ad:
e4:80:c0:62:3d:5a:58:cd:df:94:04:14:67:66:c7:da:7c:08:
90:64:15:74:f9:2c:a9:59:6d:1e:43:50:87:9c:48:f2:01:fd:
da:6d:3c:ff:55:4c:b0:81:1d:75:bd:f2:04:6b:79:d9:ee:53:
75:3b:1e:fd:b8:b2:b2:b1:7b:4c:1e:03:8e:06:6c:ab:70:96:
d8:ba:b8:e9:3f:68:0e:b7:5e:7d:08:e5:7b:76:93:ef:17:2d:
f1:e8:52:99:61:b2:c9:af:c3:8a:70:2d:be:08:14:f3:0e:5b:
4e:a5:45:fe:e0:94:94:4a:8e:42:67:a7:79:dd:c3:6d:c3:6e:
ed:a5:9d:ad:2b:3c:64:ab:4d:e2:39:e0:a9:3e:d1:8a:c9:b8:
de:9f:29:6c:b9:e9:5d:6b:89:36:b0:be:6e:a8:b0:93:cb:b0:
01:75:ab:18:7b:0c:d2:b7:46:75:63:75:db:94:22:a4:3f:ad:
5c:fc:70:48:ec:8e:3d:72:28:12:a1:f6:06:1b:60:ea:21:89:
4f:c1:49:b8:4c:40:57:f9:48:43:65:be:36:8f:92:a0:5f:12:
9d:c9:a5:2e:ee:6d:5c:fe:f2:23:14:fd:e5:ea:ca:c9:18:31:
e8:3a:09:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:30:48 2026 by rpki-client