
$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft
File: 07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft (raw, json)
Hash identifier: 4sUvwYlHPhxBvA6Cd9qLbw5/+nx0puNRzTfzKyQrcqw=
Subject key identifier: D8:A0:1B:CD:CC:19:78:40:75:3C:F7:23:D6:03:B9:2A:F3:29:D0:A9
Authority key identifier: 07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0
Certificate issuer: /CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0
Certificate serial: 67B3B323FB542827148096A935D4A3C9007AD700
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft
Manifest number: 011C
Signing time: Wed 25 Mar 2026 08:41:33 +0000
Manifest this update: Wed 25 Mar 2026 08:36:33 +0000
Manifest next update: Sat 28 Mar 2026 13:43:33 +0000
Files and hashes: 1: 07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl (hash: HSQ/lPTBMqsdE7EEKavk2BXjvUV04i6OY46reif3llw=)
2: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: 2Vf9dnfwxWJU32Hy8iKNhEgZIr2NXcazWOlIdCFgYLI=)
3: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: NxfUk896HyTOfrSpP12vAOga4gJLt6+kmfvZ86uKz+o=)
4: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: uFyUwDp7HftGLg0g84ngD2vF4KM8TeTAH6ZOZ5/X7R0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl
rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 13:43:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b3:b3:23:fb:54:28:27:14:80:96:a9:35:d4:a3:c9:00:7a:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0
Validity
Not Before: Mar 25 08:36:33 2026 GMT
Not After : Mar 28 13:43:33 2026 GMT
Subject: CN=D8A01BCDCC197840753CF723D603B92AF329D0A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:56:39:20:f2:f2:eb:25:fc:06:1f:49:41:
b0:9d:59:24:f0:95:e3:e3:b8:86:7d:dc:93:bf:99:
72:30:55:e0:2d:1d:cc:77:02:e3:9f:b0:6b:94:9b:
99:db:9b:fd:56:97:89:93:04:37:e0:ef:aa:57:89:
41:9e:af:a8:93:1e:ba:4f:30:f9:ee:e2:eb:b1:2b:
42:30:24:30:d4:1f:4a:aa:74:fc:41:2b:4a:5f:c8:
72:28:f7:92:3f:40:64:12:92:1e:9e:00:c2:42:3f:
87:99:59:58:77:c2:41:8b:cc:d9:5c:c6:e0:6c:13:
5d:29:18:05:77:7e:bc:a9:b6:02:df:86:cf:5f:10:
ef:e1:44:3a:4b:87:d7:45:e8:ca:c6:c4:7f:d7:4e:
1d:18:28:1a:82:07:cf:41:ff:50:d4:ec:ca:ea:cd:
5d:8a:9c:26:cb:e0:08:0e:2a:2c:30:c6:c8:60:c7:
53:73:fa:47:34:3e:d4:13:d8:54:07:be:14:25:19:
07:f2:78:45:5a:c1:f2:c6:af:74:29:c1:1d:5f:42:
f6:03:58:dd:51:f9:95:17:53:92:d3:d9:51:69:7c:
bd:04:15:c3:86:f1:10:1c:05:a6:26:76:15:72:0a:
0c:02:98:be:e6:3b:3b:a9:06:c8:e0:9d:5f:d9:39:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A0:1B:CD:CC:19:78:40:75:3C:F7:23:D6:03:B9:2A:F3:29:D0:A9
X509v3 Authority Key Identifier:
keyid:07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:73:ec:12:85:c6:ff:16:5d:eb:6c:d2:50:3b:21:57:fc:4f:
7d:ed:22:a3:8f:ce:d1:b5:2d:55:9a:3f:fb:fc:9a:2c:d6:0b:
f6:8f:5c:f4:46:15:e2:74:91:21:2b:85:1f:c0:ed:d2:58:88:
c1:2e:47:1d:56:fd:11:fd:5c:4a:28:f7:2d:ab:17:cd:19:77:
38:6b:86:b3:0c:ea:2a:87:a1:1e:42:e8:d3:03:c3:61:fb:19:
28:49:eb:e1:5f:2c:83:78:6d:bf:41:25:82:cc:4b:78:c7:48:
ed:4c:33:c2:10:78:40:19:a1:a0:4c:60:b9:2a:fa:53:3e:9a:
bd:d4:76:32:71:fc:65:86:6c:f4:67:df:34:ee:42:6e:18:a3:
d5:83:5f:fa:f1:67:af:47:be:42:bc:af:3c:c5:11:74:4c:cc:
4c:40:cf:3f:5f:de:9e:a9:e6:e2:96:09:67:b1:f7:22:10:1e:
d5:e2:c2:23:58:41:11:ca:77:6d:1a:be:cd:ba:54:be:e0:fb:
76:a6:f0:80:5d:bc:42:86:7f:40:09:2c:21:e1:42:9a:12:0c:
a5:83:47:d8:fa:be:37:28:ab:f1:6d:5d:b2:f3:43:12:d8:88:
24:d9:35:8c:3b:3a:47:b0:c3:c2:b1:11:e3:23:f9:0e:15:15:
d8:7d:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:43 2026 by rpki-client