
$ rpki-client -vvf repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft
File: 260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft (raw, json)
Hash identifier: fFYalSAmURXCp59kxgl6ZjNiEgGCsXS1pBkrIYcmQ6s=
Subject key identifier: 63:28:58:8C:49:99:87:1E:70:D4:3E:35:E6:18:10:B1:EB:0E:F2:8B
Authority key identifier: 26:08:81:82:3F:28:04:BC:A7:A6:5A:C9:3B:D3:DC:9A:7E:E1:73:0A
Certificate issuer: /CN=260881823F2804BCA7A65AC93BD3DC9A7EE1730A
Certificate serial: 7D6BF533DF1BA76D099C4AC7001CEAFB54FF2298
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft
Manifest number: 0150
Signing time: Thu 16 Apr 2026 20:41:05 +0000
Manifest this update: Thu 16 Apr 2026 20:36:05 +0000
Manifest next update: Sun 19 Apr 2026 22:05:05 +0000
Files and hashes: 1: 3135372e32302e3138382e302f32332d3234203d3e20313532343232.roa (hash: 4HEnURFX1hQSuRbmCKioRMn9cXm7KyCSSOCdtNL81nA=)
2: 260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl (hash: S0GGZAS56uLxCbI6rPjSXQshGfA9ojjSyQWNofE9+oU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl
rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 22:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:6b:f5:33:df:1b:a7:6d:09:9c:4a:c7:00:1c:ea:fb:54:ff:22:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260881823F2804BCA7A65AC93BD3DC9A7EE1730A
Validity
Not Before: Apr 16 20:36:05 2026 GMT
Not After : Apr 19 22:05:05 2026 GMT
Subject: CN=6328588C4999871E70D43E35E61810B1EB0EF28B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:0a:3f:79:52:1c:59:46:ac:f8:4e:c3:44:
ee:5f:8a:0d:70:0e:e8:41:59:33:3e:2d:ff:25:4b:
eb:23:75:04:49:5f:06:7c:b2:93:9e:25:cc:f0:30:
e5:02:8e:67:e7:8c:b7:3c:ac:78:b2:98:6e:56:f8:
c5:5f:06:3b:64:22:82:5d:26:a4:a7:38:01:16:2e:
fb:d8:3a:cb:93:56:ee:52:68:a5:a4:59:f6:19:04:
1f:b6:58:57:29:a0:fa:68:d3:fe:c9:d6:7b:48:e9:
05:3c:50:3f:d9:a3:fa:0f:7f:ec:06:1a:48:14:ed:
0d:5c:10:7c:8e:62:8d:96:31:fa:12:91:93:4c:65:
eb:d9:6b:d9:23:2c:68:39:6c:80:3b:f8:3c:9d:f9:
d1:d4:4e:8b:cd:e1:8e:53:8d:fc:48:d3:e2:6e:24:
67:0c:6d:8f:e5:a5:78:f2:1c:89:91:6f:9c:c1:09:
e2:fb:1f:1a:85:b4:ab:d2:ec:43:9c:29:fb:e4:4e:
d2:8d:9d:30:d0:c2:4e:3d:d0:94:ce:94:f6:94:99:
6c:dc:7c:e1:6b:b0:00:97:2d:cf:0f:0a:83:6b:55:
e5:66:50:a9:aa:4b:d1:a4:21:ae:c5:3d:9e:ad:43:
74:c5:45:ee:43:9d:41:1e:78:79:42:0b:80:97:d3:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:28:58:8C:49:99:87:1E:70:D4:3E:35:E6:18:10:B1:EB:0E:F2:8B
X509v3 Authority Key Identifier:
keyid:26:08:81:82:3F:28:04:BC:A7:A6:5A:C9:3B:D3:DC:9A:7E:E1:73:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:58:d4:e4:14:63:9c:6f:c7:0c:88:4c:51:df:87:d9:c2:0a:
49:61:6e:4e:5c:d8:14:57:0f:0d:66:bf:6d:29:84:ce:d7:74:
1a:79:95:49:a7:04:a3:85:02:81:2f:24:ea:d3:c8:52:a5:31:
2e:fe:0a:5a:30:53:6a:b4:92:96:6b:4e:6d:8a:57:bc:02:a7:
b6:57:29:85:ee:4f:6c:b5:42:54:60:19:38:f0:b1:51:44:84:
0a:0f:0c:be:8a:16:4e:fc:e6:32:68:96:7e:fa:93:b7:7d:89:
4e:bd:c0:86:9c:84:c4:41:b9:5c:bf:12:62:ad:b9:86:a6:e3:
fe:a4:cd:b7:1f:9a:84:9c:52:14:71:f1:aa:f2:3e:28:23:2a:
66:f4:17:03:60:3a:98:9e:e4:1d:a9:1a:82:67:bc:e9:6f:1d:
11:b0:4b:01:c9:b5:45:b1:10:89:59:90:b9:25:49:5a:e2:61:
fb:cb:6a:45:d2:f3:f8:b9:0e:c7:c2:cc:f7:ad:ba:05:d5:08:
a3:c2:2f:7c:01:3d:95:67:63:a5:7a:b2:9e:7e:e9:ac:95:f1:
79:6c:10:a9:13:83:41:d4:7b:45:0e:06:9c:fd:27:51:2c:fa:
74:c5:b4:22:a8:ce:1c:ac:73:9c:c9:66:ab:69:7a:a4:db:2f:
ea:5e:bf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:53:08 2026 by rpki-client