
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.mft
File: E4309A93EFBD137B291B121E7944EB2E9055348B.mft (raw, json)
Hash identifier: LWgszP5sYXNvUuuMOtdQ/xqU8antiS8cDVXggN7hSSk=
Subject key identifier: 5F:E1:61:9B:78:55:0D:EF:8A:CC:57:57:32:0C:C4:64:76:17:EF:E0
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 1881B807AA3B40D62D46A85FD00B982AC43A58A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.mft
Manifest number: 0197
Signing time: Wed 25 Mar 2026 11:50:42 +0000
Manifest this update: Wed 25 Mar 2026 11:45:42 +0000
Manifest next update: Sat 28 Mar 2026 20:08:42 +0000
Files and hashes: 1: AS45727.roa (hash: Zyn3RFOUesj/Ml4BwKn4+QVVoHhHhZ+dDS0zCcGILLs=)
2: E4309A93EFBD137B291B121E7944EB2E9055348B.crl (hash: Bkloqs6W+9NgQ2K44XSzH8oQs5EfM+dH+pyV/w+HLp0=)
3: AS4761.roa (hash: rIHPhRzvdpZtfJQFmsjfpb7ARg/EgRU4/H62/qKwTMU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 20:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:81:b8:07:aa:3b:40:d6:2d:46:a8:5f:d0:0b:98:2a:c4:3a:58:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Mar 25 11:45:42 2026 GMT
Not After : Mar 28 20:08:42 2026 GMT
Subject: CN=5FE1619B78550DEF8ACC5757320CC4647617EFE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:91:6a:e7:c1:7e:73:46:d8:28:3a:51:fa:
65:23:07:1b:ed:56:7f:3d:4d:82:87:f9:a6:a9:7a:
44:5f:37:c0:0d:76:fe:bd:64:dc:1b:e0:83:e9:fe:
2f:a0:89:5b:51:b5:72:33:76:37:d2:54:8a:40:33:
21:a2:95:73:59:29:b3:c0:a7:b4:a0:bf:7c:33:c7:
58:9d:e0:59:8a:6e:38:a6:88:1b:6c:cb:ca:81:b5:
a4:40:98:d3:c0:da:5a:09:fe:b1:41:6a:1c:66:04:
56:97:26:5d:a9:39:47:51:5e:76:69:57:fe:06:6a:
e1:42:48:a3:ef:15:c0:5e:0f:2e:8d:20:a2:1b:ec:
d6:b0:d1:b5:32:0e:f6:53:f8:8e:95:04:83:6c:50:
34:e9:5c:30:49:e2:65:ac:61:ce:f9:2a:86:9c:aa:
1f:cd:d7:35:59:fb:f4:13:b3:de:8f:13:91:ca:1f:
f7:4c:5c:e4:1c:1e:83:d3:68:1d:14:12:41:13:17:
32:87:09:6d:ff:ae:87:0a:36:11:a1:eb:e9:e2:15:
38:a5:50:f3:65:c2:84:a7:e2:4e:30:d4:4d:38:8e:
50:52:f3:35:b7:f9:68:2a:00:e8:96:e7:34:df:6d:
7d:b1:4a:1a:be:03:26:5a:92:16:10:b4:95:76:ec:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E1:61:9B:78:55:0D:EF:8A:CC:57:57:32:0C:C4:64:76:17:EF:E0
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a5:18:34:89:a2:cd:c2:50:7a:3b:36:e2:70:65:31:65:f0:
e9:90:bc:ff:88:61:dd:b1:b7:ed:33:61:d7:45:91:a8:27:ec:
0d:d0:28:44:b5:13:11:a6:5e:84:bf:c9:01:32:4d:7a:f1:a1:
bf:04:55:39:c1:ac:59:50:81:b9:c7:2a:18:b4:a6:8a:c9:6e:
8c:46:33:77:40:5c:82:32:96:34:4d:fc:62:5e:42:3f:e9:3b:
9f:87:58:91:be:d9:20:8a:6a:dd:81:b5:e9:3c:fe:6e:51:4c:
5c:6d:85:5c:be:fa:d4:28:17:91:89:3b:87:9f:32:02:77:fd:
4c:ce:be:b4:8e:a6:47:89:7e:02:56:14:a9:8e:11:73:50:af:
3d:9d:2e:a5:10:49:19:70:71:ff:7c:d3:7d:91:61:1f:27:84:
e3:3c:50:0a:64:02:5c:32:c7:9e:eb:86:cf:79:5f:b3:99:14:
28:9e:36:43:5e:15:20:c0:9f:fb:c3:f9:cb:f0:97:d8:6d:e4:
21:49:a5:47:41:1c:2b:fa:ba:ff:64:a1:f1:71:76:89:02:64:
eb:cb:50:a9:38:e3:75:c6:7d:5d:d1:63:6c:85:7d:ed:2b:63:
1f:47:32:c1:85:ec:d6:58:9b:6b:4d:5d:21:71:35:6f:40:11:
c2:65:68:e5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGIG4B6o7QNYtRqhf0AuYKsQ6WKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNjAzMjUxMTQ1NDJaFw0yNjAzMjgyMDA4NDJaMDMxMTAvBgNV
BAMTKDVGRTE2MTlCNzg1NTBERUY4QUNDNTc1NzMyMENDNDY0NzYxN0VGRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+D5Fq58F+c0bYKDpR+mUjBxvt
Vn89TYKH+aapekRfN8ANdv69ZNwb4IPp/i+giVtRtXIzdjfSVIpAMyGilXNZKbPA
p7Sgv3wzx1id4FmKbjimiBtsy8qBtaRAmNPA2loJ/rFBahxmBFaXJl2pOUdRXnZp
V/4GauFCSKPvFcBeDy6NIKIb7Naw0bUyDvZT+I6VBINsUDTpXDBJ4mWsYc75Koac
qh/N1zVZ+/QTs96PE5HKH/dMXOQcHoPTaB0UEkETFzKHCW3/rocKNhGh6+niFTil
UPNlwoSn4k4w1E04jlBS8zW3+WgqAOiW5zTfbX2xShq+AyZakhYQtJV27GorAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUX+Fhm3hVDe+KzFdXMgzEZHYX7+AwHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWVjNmVlZjktNzEzYy00ZTZiLWIy
YmMtNGMwNDUyODkwMzQ1LzAvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVC
MkU5MDU1MzQ4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIGlGDSJos3CUHo7NuJwZTFl8OmQvP+IYd2x
t+0zYddFkagn7A3QKES1ExGmXoS/yQEyTXrxob8EVTnBrFlQgbnHKhi0porJboxG
M3dAXIIyljRN/GJeQj/pO5+HWJG+2SCKat2Btek8/m5RTFxthVy++tQoF5GJO4ef
MgJ3/UzOvrSOpkeJfgJWFKmOEXNQrz2dLqUQSRlwcf98032RYR8nhOM8UApkAlwy
x57rhs95X7OZFCieNkNeFSDAn/vD+cvwl9ht5CFJpUdBHCv6uv9kofFxdokCZOvL
UKk443XGfV3RY2yFfe0rYx9HMsGF7NZYm2tNXSFxNW9AEcJlaOU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:11:13 2026 by rpki-client