
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft
File: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft (raw, json)
Hash identifier: 8j0W/KN1h4pPBkFU5AFTYNXVeCsos5P0U86bokbm2hQ=
Subject key identifier: 92:35:33:A9:5C:52:39:F6:B4:4E:68:C0:67:2C:47:FF:CC:BB:42:76
Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E
Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E
Certificate serial: 570F52A3A2B5F1F2868F0B18B361FE391A987A36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft
Manifest number: 055C
Signing time: Thu 26 Mar 2026 02:10:50 +0000
Manifest this update: Thu 26 Mar 2026 02:05:50 +0000
Manifest next update: Sun 29 Mar 2026 07:02:50 +0000
Files and hashes: 1: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl (hash: LuYuN30oKNuzomBqOXTOrm1A7h7lTtLnVYT7oXR1Gdc=)
2: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: 19ABnycRhti98EG6MJ/6S6W4a31omV6sktXNN7fCeRE=)
3: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: ut8mKe181e+GL8gZVd8D9lpxfAhurYa657vG8sPaVZU=)
4: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 3CwSzY5tw6Zm4h624sLhttPd8ZN8CiHTGKhVehN+hWE=)
5: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: 2NAEElgvlB7IhQMwd1Atvpj3R7riVOfOU9AzMjYnGF0=)
6: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: lw8CjbCa9nau6CgaK9qo3W7fJOYahpzK8W9j4IBI5bo=)
7: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: voekDMYuoDNmVswZr7/xsWsJnvx7lZSdUg+Aq+ToSP0=)
8: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: 1UalLxKn41/lSLgzHwYn+86cGRYM0p3PY4M21eZtrAo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl
rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 06:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:0f:52:a3:a2:b5:f1:f2:86:8f:0b:18:b3:61:fe:39:1a:98:7a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E
Validity
Not Before: Mar 26 02:05:50 2026 GMT
Not After : Mar 29 07:02:50 2026 GMT
Subject: CN=923533A95C5239F6B44E68C0672C47FFCCBB4276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:ad:9a:cd:56:3f:e7:b6:4c:ca:57:4c:57:
92:2f:04:03:87:68:a5:bf:63:53:66:d4:c3:c8:c0:
36:d7:b4:e1:0d:be:98:dd:be:6e:45:11:e1:66:df:
aa:26:1c:9b:dd:2d:8e:30:04:ef:2b:48:9b:e3:fd:
68:dc:e6:5a:63:7d:57:e0:9a:c7:04:d7:43:90:d1:
6c:16:d3:a7:af:0b:52:6b:cf:3f:11:50:87:7e:bc:
c5:d8:76:6b:ed:a4:e9:8f:0f:fd:2f:51:7e:ba:c3:
bb:a8:60:e0:02:6c:f0:0b:97:2e:18:a6:56:1a:d8:
f8:68:6a:a1:4d:f5:68:db:2f:ad:31:e9:38:82:26:
8e:a6:5f:17:5a:c7:21:7b:a0:af:9b:29:04:c7:10:
7c:fe:4d:15:fb:f2:d9:db:82:ec:3b:35:d5:02:2e:
93:5a:11:2d:49:33:dc:56:43:57:8b:46:b3:8e:f8:
13:ea:2f:a5:bd:eb:c7:5c:3f:75:05:6c:29:22:85:
e9:33:85:01:6e:d1:33:66:0d:79:cd:b6:13:3a:0d:
df:29:df:f1:e5:d5:2b:d5:8e:15:b1:08:00:d7:b6:
e1:b6:b1:eb:9c:cb:d4:29:75:96:05:3f:60:07:8c:
af:7f:68:f5:c9:43:a5:8f:ba:58:3c:46:ad:60:f9:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:35:33:A9:5C:52:39:F6:B4:4E:68:C0:67:2C:47:FF:CC:BB:42:76
X509v3 Authority Key Identifier:
keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1f:a0:04:85:a0:31:42:04:3f:4c:19:4e:62:a9:fc:66:88:
ab:f2:77:66:f0:88:ab:92:1b:ff:21:72:c4:6f:f2:05:3a:e9:
61:3a:5b:d1:a4:f0:23:ce:1a:30:6b:b7:25:f9:d9:29:16:5c:
ad:f7:4d:50:d4:51:32:04:0a:ed:82:6a:d5:f2:1c:e8:b4:80:
29:cd:96:2f:cf:e5:a5:6c:6a:cc:14:72:7f:d7:ff:7b:a6:b7:
5e:09:08:8d:4e:d9:72:f6:82:0e:78:c6:1a:47:25:c6:1d:c6:
e0:f9:98:d7:1e:34:c9:b4:c2:b9:d2:24:99:9d:5f:2a:8d:98:
d5:93:a4:ab:f9:d0:b5:8e:7a:a1:06:5d:b9:d8:d9:14:16:5e:
ec:f6:c5:a3:0c:c4:13:f9:7c:43:8f:d4:c5:f8:06:da:a8:df:
13:29:21:66:34:d7:9c:31:16:e5:6c:af:a6:a5:34:8c:ae:67:
5b:98:06:13:9b:c5:24:4e:7c:a8:87:71:e7:e7:28:ef:86:cc:
d6:aa:ee:15:60:93:69:b9:6d:52:3b:c3:29:c7:fe:c7:61:94:
07:de:6a:4d:60:c9:73:03:6b:7b:90:0e:64:05:bd:bb:77:ae:
48:23:9c:e7:13:6f:00:1e:d3:40:1f:90:53:45:48:f3:72:62:
34:9c:a9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:37:09 2026 by rpki-client