
$ rpki-client -vvf repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft
File: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft (raw, json)
Hash identifier: Uf54jfdV+EbBiQwuE3uSYJXUG00u1+fgeLoL2uvVbb4=
Subject key identifier: D2:FE:10:81:74:BC:D9:FE:BD:64:69:CB:5C:A8:22:77:1C:58:10:CD
Authority key identifier: 0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5
Certificate issuer: /CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5
Certificate serial: 2AF96E1610804A9822FA540AAED6AF0E97B8CE50
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft
Manifest number: 0191
Signing time: Thu 16 Apr 2026 16:41:27 +0000
Manifest this update: Thu 16 Apr 2026 16:36:27 +0000
Manifest next update: Mon 20 Apr 2026 02:54:27 +0000
Files and hashes: 1: 0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl (hash: /4kKE2pyKwIsuvAiSh8Nk/4hGt8gMC0X8ePl9QGic0w=)
2: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: MEhGPscx6amoC7Mn8dW/gvKnqLk8DzF4TrmhnXKZhHA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl
rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 02:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f9:6e:16:10:80:4a:98:22:fa:54:0a:ae:d6:af:0e:97:b8:ce:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F1BD9D55C812158AF58CE47053AC6A16F5716F5
Validity
Not Before: Apr 16 16:36:27 2026 GMT
Not After : Apr 20 02:54:27 2026 GMT
Subject: CN=D2FE108174BCD9FEBD6469CB5CA822771C5810CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:b8:da:f1:ee:61:38:69:53:36:83:6a:cc:
d9:1f:d2:94:53:2f:05:4a:29:45:c6:c4:18:6e:b3:
7b:7e:0d:d3:d6:45:f2:d1:df:06:80:c7:c2:5c:2f:
cb:b1:65:c3:b4:9c:df:86:30:1f:0c:33:20:41:35:
e2:ea:31:3d:2a:60:0e:43:5a:a9:8f:73:19:fd:40:
47:c2:49:4e:d3:23:1c:4a:43:fb:02:55:68:56:ce:
1e:7d:9e:ae:b8:8d:85:54:29:64:be:37:ed:0a:cc:
28:78:d4:57:70:88:ff:d7:89:0c:95:cb:e8:69:64:
57:7e:8f:84:cb:c9:0c:85:35:82:58:88:51:58:5a:
8d:ba:9a:40:de:c9:04:14:9d:74:ab:d6:64:3f:52:
55:2a:97:90:57:a5:32:d4:72:a7:e6:07:72:a0:01:
e3:05:15:fe:3a:b2:5e:a0:15:b8:5e:dd:75:62:88:
86:e5:9f:79:01:70:9a:93:1b:8b:f9:a1:25:e8:de:
17:2b:1b:25:75:bc:49:7c:1e:e7:e3:55:27:f5:37:
c3:d7:13:65:a1:99:b4:5a:94:50:ec:2c:ce:1e:45:
52:7a:b6:db:7a:b3:b3:31:43:90:79:be:5e:a1:74:
dd:4d:b0:5c:5c:cd:64:59:c1:1e:4b:77:ef:82:8d:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FE:10:81:74:BC:D9:FE:BD:64:69:CB:5C:A8:22:77:1C:58:10:CD
X509v3 Authority Key Identifier:
keyid:0F:1B:D9:D5:5C:81:21:58:AF:58:CE:47:05:3A:C6:A1:6F:57:16:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/0F1BD9D55C812158AF58CE47053AC6A16F5716F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:69:33:15:ab:73:c1:d1:56:5a:d9:3d:6f:6e:2b:a3:5c:8e:
7e:3f:de:f9:89:25:66:12:63:fd:dd:4d:e1:e8:21:f1:a5:f2:
12:cf:ea:85:45:ed:4c:98:c7:7d:0e:48:31:2d:aa:d7:74:29:
08:fb:02:ab:4a:be:42:05:be:37:d4:af:01:ac:34:95:9e:05:
b6:09:cd:12:a1:f5:08:ed:1f:b7:16:bb:d5:37:61:57:e5:7a:
e5:58:46:72:65:a6:bb:22:61:29:c2:2b:ae:39:18:0f:53:60:
93:27:d0:47:b5:4c:4b:83:7b:9b:c2:89:73:3d:c8:cc:1d:bc:
62:96:65:1c:86:7b:6b:9d:43:4d:b4:1e:a5:17:eb:65:53:91:
78:85:b2:ea:85:1a:99:0f:d5:ad:9d:16:da:25:49:e0:e3:64:
c5:bf:a4:5c:9a:58:95:8b:63:fb:48:96:14:36:97:06:28:aa:
99:fc:a2:db:ba:58:e2:54:e0:00:b3:69:ef:a3:fb:e6:1a:04:
ad:d8:5f:ad:1f:ad:4b:46:cd:c4:86:9b:ee:4d:d9:31:aa:2e:
e9:f4:12:b2:e9:63:9f:19:da:55:f4:c7:07:12:75:c8:ff:fb:
05:8d:e8:57:6e:1a:1e:6c:ea:51:d1:81:3c:1b:bb:cf:a8:df:
d0:e8:8e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:59 2026 by rpki-client