
$ rpki-client -vvf repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft
File: 08683ED5C748B79A346EF705A2DCF809A31C75DF.mft (raw, json)
Hash identifier: wlebVGmJowkyqWQP/BuMQertHEjj6R/75hz4po+dfWc=
Subject key identifier: 00:7F:25:92:D6:F4:A7:70:89:5E:36:21:E7:EB:F6:B9:2F:82:8E:0C
Authority key identifier: 08:68:3E:D5:C7:48:B7:9A:34:6E:F7:05:A2:DC:F8:09:A3:1C:75:DF
Certificate issuer: /CN=08683ED5C748B79A346EF705A2DCF809A31C75DF
Certificate serial: 49A8314D18692D6DD9638804D75CD7B9F569DB15
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft
Manifest number: 0134
Signing time: Wed 25 Mar 2026 04:41:34 +0000
Manifest this update: Wed 25 Mar 2026 04:36:34 +0000
Manifest next update: Sat 28 Mar 2026 15:25:34 +0000
Files and hashes: 1: 08683ED5C748B79A346EF705A2DCF809A31C75DF.crl (hash: aFjFFJPlOjbDvxN87BlVHrGFeP1eJsqWc72GsMbcVhw=)
2: 3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa (hash: Szhkwi/uKROLQkqOgmk3Mb9/hNg3uAnK7L1sfdyDAhI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.crl
rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 15:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a8:31:4d:18:69:2d:6d:d9:63:88:04:d7:5c:d7:b9:f5:69:db:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08683ED5C748B79A346EF705A2DCF809A31C75DF
Validity
Not Before: Mar 25 04:36:34 2026 GMT
Not After : Mar 28 15:25:34 2026 GMT
Subject: CN=007F2592D6F4A770895E3621E7EBF6B92F828E0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5e:73:6d:a9:22:28:f4:72:6e:d8:ba:13:b5:
da:dd:1a:57:16:d0:08:b2:07:93:94:fe:f3:32:2f:
dc:c3:2b:88:32:f9:2d:09:8c:75:b8:27:8a:7b:3d:
99:56:64:b8:28:41:58:9e:97:00:dd:af:91:96:1b:
23:9b:6e:b5:3a:b9:41:e7:44:75:60:28:6f:95:76:
e4:d4:cb:a6:79:8d:36:bc:9d:73:91:64:fa:52:6a:
05:c3:ef:45:90:af:a1:ad:e9:1c:99:13:8e:3f:76:
fd:22:ec:67:fe:e6:38:ca:cd:f3:5c:06:a6:20:e0:
06:38:05:13:66:20:e2:30:78:d7:a1:50:2c:05:3d:
4b:de:76:c1:71:8d:f8:f1:0c:7a:d5:c6:92:56:6a:
20:9e:ce:2a:c5:39:14:d9:eb:79:16:2c:1e:9c:1d:
c5:65:9e:0a:8f:da:9c:9b:01:fc:0a:54:b5:5f:02:
26:3b:6a:64:9b:4b:a6:fc:49:23:f7:75:ea:6f:92:
0b:8f:7a:b1:ef:45:e2:de:ae:ab:72:3f:42:77:1f:
90:05:32:09:a9:c3:6c:68:9d:48:24:9e:bd:78:2d:
35:fd:3c:ca:d4:d3:88:74:fc:23:c8:d5:98:17:f8:
89:0d:16:ec:b2:39:62:e2:5e:9e:4f:5b:f6:13:3e:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7F:25:92:D6:F4:A7:70:89:5E:36:21:E7:EB:F6:B9:2F:82:8E:0C
X509v3 Authority Key Identifier:
keyid:08:68:3E:D5:C7:48:B7:9A:34:6E:F7:05:A2:DC:F8:09:A3:1C:75:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/08683ED5C748B79A346EF705A2DCF809A31C75DF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/08683ED5C748B79A346EF705A2DCF809A31C75DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a8:35:0b:04:00:79:50:b2:61:1d:e8:94:a2:69:ea:8d:88:
9f:38:6a:4a:b1:02:94:27:49:10:30:77:ea:6d:81:6a:4c:57:
df:a5:05:8b:7f:a3:b8:dd:36:0b:cc:ed:fc:64:9e:05:00:d9:
c3:a1:a6:a4:96:a5:d1:c2:8c:8e:6e:7f:32:b7:25:51:60:a1:
cf:3b:3d:b9:a3:91:88:b9:8a:e1:0c:15:7a:87:3c:af:1f:a5:
5e:00:27:c3:e7:e2:d7:07:fb:66:12:25:a5:fc:06:27:aa:18:
be:8d:ed:07:a3:0c:31:1a:78:3f:44:34:f5:51:db:ce:44:01:
86:13:d5:37:1d:4f:c8:aa:82:e9:2a:2d:21:d2:a3:92:76:89:
6e:0b:f9:5d:ff:40:50:60:5b:c1:79:fb:51:1c:0b:d4:2c:80:
31:74:4d:d1:7e:18:6d:1f:6a:53:1d:0a:b1:06:7c:1b:e8:5c:
e9:6a:c8:6c:6f:af:20:6d:64:2f:48:c1:17:61:7e:6a:2f:7e:
29:73:9a:53:d0:d0:f2:78:8e:93:28:70:ce:11:4b:23:3f:37:
b2:56:1f:7c:f3:73:ba:87:ba:7d:02:bf:84:59:76:64:8f:10:
c0:e1:2c:15:0b:75:76:f8:f7:30:43:5f:63:41:73:dc:5d:10:
b9:35:68:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:39 2026 by rpki-client