
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft
File: 14A39FA5410EA57E0D416E032D769E52AB89CC75.mft (raw, json)
Hash identifier: FlNeBE9uVYlDSt4A4pNoQekTYUaeosAvVPfCm5XGgb0=
Subject key identifier: 0C:12:E0:E9:D3:25:C2:F7:08:68:F6:66:0F:D1:67:84:41:36:AB:25
Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75
Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75
Certificate serial: 1BADCF51B05C5554EE8C2D9090157AE98B82092B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft
Manifest number: 0314
Signing time: Wed 25 Mar 2026 13:11:40 +0000
Manifest this update: Wed 25 Mar 2026 13:06:40 +0000
Manifest next update: Sat 28 Mar 2026 21:45:40 +0000
Files and hashes: 1: 323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (hash: rNCEVC57YsG1pLsfroR7lL5bhtvNw6HpUyrSsSif6rU=)
2: 3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (hash: 0KAfxlBg3pCMWVOLS7U5nki0KnQRLRYCYZ69PRa+jaU=)
3: 14A39FA5410EA57E0D416E032D769E52AB89CC75.crl (hash: Tj0j8Vv1e5XhwkqehEA9JFfIBsMnE9Ta3UyI0cJg4Fc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl
rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 21:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ad:cf:51:b0:5c:55:54:ee:8c:2d:90:90:15:7a:e9:8b:82:09:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75
Validity
Not Before: Mar 25 13:06:40 2026 GMT
Not After : Mar 28 21:45:40 2026 GMT
Subject: CN=0C12E0E9D325C2F70868F6660FD167844136AB25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:a7:7b:dd:42:4e:2d:0f:db:d6:4d:f8:1f:
b9:f1:21:58:e7:76:8e:ff:36:92:1e:23:25:12:c5:
46:25:cc:9e:6b:6b:14:22:de:cb:87:5f:9f:7a:8d:
da:d0:1e:11:4f:85:6c:fd:75:b7:31:d5:8a:2e:7f:
2c:fb:65:5f:82:fe:23:cf:90:74:84:98:71:c5:0f:
de:e1:e6:a8:87:72:75:25:d8:e4:62:08:f1:57:59:
24:a8:5b:05:9c:65:44:91:f3:63:f9:37:26:82:ff:
a5:87:00:6a:9f:ac:f1:cc:63:c1:01:e5:e9:09:d2:
22:fe:91:ec:73:18:3f:0e:d1:b5:d6:25:ba:82:de:
7f:ca:cc:2f:77:ff:b6:f2:42:b2:e5:28:72:ec:ba:
95:37:6e:08:6b:b5:de:21:2c:b1:65:c5:0a:18:a6:
84:25:10:c1:01:55:60:73:d4:8a:16:da:6b:fb:a2:
2a:bb:3e:62:5a:87:4b:84:ae:51:d9:d0:d1:61:76:
a7:e9:62:25:ec:64:e8:2c:32:fb:53:10:f2:e5:0f:
8f:71:7d:09:3c:59:f8:83:79:96:b3:b4:1a:03:e8:
5a:07:d4:d7:a8:44:d8:0a:c8:c6:ea:34:84:b6:b9:
b0:82:7f:b2:fb:90:69:61:82:0a:4b:e3:c2:9f:0b:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:12:E0:E9:D3:25:C2:F7:08:68:F6:66:0F:D1:67:84:41:36:AB:25
X509v3 Authority Key Identifier:
keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:41:06:e8:30:fc:58:2a:02:40:01:15:b1:3e:2a:97:77:c4:
20:13:ea:71:c3:a6:86:15:43:de:3a:46:52:e8:3b:f8:c4:f1:
17:b3:1b:5e:45:0c:95:57:e3:ae:89:8d:e6:fa:40:cd:6d:04:
d3:fc:93:b6:67:63:cf:9a:c6:94:fe:ff:cc:74:e6:24:c1:bc:
68:ad:15:dd:78:ef:74:42:74:7e:ae:cb:fe:7b:8a:f0:d6:28:
4e:06:99:cf:63:82:f3:23:09:59:0d:43:50:a9:13:d6:8f:2d:
df:83:3e:83:6e:d4:a2:11:5f:e6:90:ed:7e:01:26:d6:82:af:
82:c9:a9:32:fa:62:4c:b9:74:ed:a6:2d:59:f3:97:47:5a:41:
3f:67:61:5f:4f:92:d7:94:ab:e6:67:f1:b8:e4:25:b4:fd:78:
b7:89:77:71:10:4b:a6:db:9d:d0:ca:c5:5e:c9:21:e0:0a:32:
e7:f4:09:98:52:a3:f0:1a:4d:61:1b:64:2f:97:9a:3e:38:75:
7e:4a:26:1d:02:bb:ee:a8:b3:50:c9:40:1e:e9:1c:c2:23:cb:
3e:27:ee:47:17:b6:ec:c0:39:e7:c4:1c:12:35:1e:12:e7:4a:
0b:3e:76:81:02:72:9e:42:be:44:c6:d6:a5:13:c9:f9:73:0d:
f0:ea:0a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:03:45 2026 by rpki-client