
$ rpki-client -vvf repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft
File: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft (raw, json)
Hash identifier: 98C4TnTN2xrjM9fvZXbAlxSLeQUMtoTAySqLgKnSltM=
Subject key identifier: BE:86:61:B7:A1:8D:12:B1:F4:A6:21:BD:B6:CB:9A:FC:FF:25:EA:18
Authority key identifier: DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF
Certificate issuer: /CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF
Certificate serial: 41327F473AAC69BBBAD9185E17702243D7F3C4BC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft
Manifest number: 01EB
Signing time: Thu 16 Apr 2026 03:11:51 +0000
Manifest this update: Thu 16 Apr 2026 03:06:51 +0000
Manifest next update: Sun 19 Apr 2026 11:05:51 +0000
Files and hashes: 1: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl (hash: 06BFmY93t1cx98wGWQ2gZuF7WvXpsqSQ+bDDaphittw=)
2: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: XpfKRKn/aePFL2Um700oqFvEnzDkELByApcE+JeDEyc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl
rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 11:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:32:7f:47:3a:ac:69:bb:ba:d9:18:5e:17:70:22:43:d7:f3:c4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF
Validity
Not Before: Apr 16 03:06:51 2026 GMT
Not After : Apr 19 11:05:51 2026 GMT
Subject: CN=BE8661B7A18D12B1F4A621BDB6CB9AFCFF25EA18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:9e:0e:ba:09:67:07:80:e5:8a:97:50:cc:
07:96:6a:41:1c:9e:29:c5:3c:8a:46:9e:bc:50:88:
2b:a3:99:4f:5f:ec:6e:fa:1a:a0:dd:5b:76:13:89:
71:18:c6:3d:1b:4e:9e:14:30:02:e1:f0:00:e2:ff:
a6:3e:a3:0a:f8:78:32:87:2b:53:3b:e7:29:cf:77:
7c:c0:86:80:61:1a:85:c5:91:90:d4:2a:5f:95:2d:
6c:a0:f3:45:d3:ae:c6:96:63:79:2f:2a:12:40:ed:
03:5f:6c:0b:dd:d3:da:2d:6e:1d:cd:de:e5:04:76:
4d:c2:f1:90:17:d5:c3:8e:de:a1:52:e1:e3:7c:c9:
bb:ec:03:a8:1a:bb:27:70:e1:77:7f:7e:ea:15:32:
36:a4:82:66:d2:c2:57:81:e1:d6:48:31:f5:bd:38:
05:b7:1b:61:8f:72:61:df:1e:33:07:cb:73:47:13:
51:bc:41:48:27:04:89:1f:c5:75:83:2e:2d:ef:df:
82:22:c5:56:17:7c:c7:d7:27:27:72:f4:1c:c9:da:
76:25:29:c8:24:97:62:38:e4:74:5a:8e:d1:24:46:
cc:5d:1e:af:72:62:85:7c:25:6f:4d:a1:94:22:b6:
49:18:dc:68:fd:39:62:b2:60:b5:41:47:d1:bd:3a:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:86:61:B7:A1:8D:12:B1:F4:A6:21:BD:B6:CB:9A:FC:FF:25:EA:18
X509v3 Authority Key Identifier:
keyid:DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7e:47:2b:ff:0b:1d:64:7a:cf:be:86:fc:17:03:ee:77:0b:
1d:8e:1b:17:b0:36:65:32:ef:b1:e2:ad:1d:10:ed:d9:68:c9:
5a:30:93:74:fd:ed:78:14:06:7b:54:64:ad:eb:9d:45:c4:e3:
94:fa:3d:93:07:3f:71:5b:c8:fe:46:cf:9c:56:6f:30:a4:55:
59:d4:1c:c3:87:73:25:5d:95:89:89:50:f1:bf:c8:35:3d:54:
95:bf:75:9b:2b:5c:85:fa:0c:e9:74:4a:be:e8:b6:fe:74:ad:
4d:6c:c0:4d:bc:17:ed:10:e9:db:c7:8d:c4:6c:d8:d9:61:12:
94:c8:e7:1d:d2:82:9d:6b:c9:f7:15:3b:bf:af:e9:5f:ca:02:
7d:28:79:81:ae:03:7b:ad:99:f2:48:c6:57:03:08:bb:be:fe:
c0:5d:58:3c:21:07:37:fa:23:a5:0f:18:9a:f1:64:04:cb:8c:
7f:bb:bd:de:d4:fc:05:7a:15:b8:6b:11:6a:d7:e8:e3:9c:0e:
ba:56:fb:de:04:16:f0:d8:55:c4:c7:d7:8d:da:32:86:80:2b:
d8:5b:38:cf:81:e7:94:ed:49:ef:75:fb:6a:f6:8c:87:ae:16:
cf:fa:1c:13:3d:75:c8:d7:f8:3f:ae:a9:02:de:5a:5a:72:44:
76:98:2d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:30 2026 by rpki-client