
$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft
File: 014253C9E01BAC5FD1E7C286A296948F302AA578.mft (raw, json)
Hash identifier: zVlhqNgF/QhsuRZltUqb9Rwk3FLCjFiKAnt5Qm4Kx0E=
Subject key identifier: E1:5A:13:86:78:F7:36:0C:B7:08:7A:A5:7B:00:53:13:CE:DE:C9:93
Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78
Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578
Certificate serial: 234BD96C00B5D509D8F9D3D9D6656C9533FAC2B0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft
Manifest number: DF
Signing time: Thu 16 Apr 2026 11:32:00 +0000
Manifest this update: Thu 16 Apr 2026 11:27:00 +0000
Manifest next update: Sun 19 Apr 2026 15:42:00 +0000
Files and hashes: 1: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: hOVkgGHGY/bobIqIByNpM3pWDrvyZ00Fy2/vUw4/OXQ=)
2: 014253C9E01BAC5FD1E7C286A296948F302AA578.crl (hash: Uw5Y/5EESb0komLgl4vy85fiWVOwyznHbRt9GV+lby0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl
rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 15:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:4b:d9:6c:00:b5:d5:09:d8:f9:d3:d9:d6:65:6c:95:33:fa:c2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578
Validity
Not Before: Apr 16 11:27:00 2026 GMT
Not After : Apr 19 15:42:00 2026 GMT
Subject: CN=E15A138678F7360CB7087AA57B005313CEDEC993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:2c:0f:91:3e:5c:bd:85:50:3e:8c:57:38:
99:8e:98:0f:65:b1:d9:4b:a0:8a:92:5c:55:7d:f7:
a0:71:70:09:02:96:a3:ec:14:a5:bd:62:ed:a8:aa:
e0:58:7f:68:b9:7b:47:3e:f8:a2:fe:d3:b7:3a:07:
3f:8e:9d:fa:d3:c2:fa:55:1f:28:ce:98:26:08:09:
77:89:69:7e:67:7c:1d:bc:75:38:f9:a4:ce:69:8f:
fb:10:b7:44:74:bb:d7:f4:90:74:15:75:b4:f8:4e:
0c:af:ae:6d:90:56:b6:c4:d9:53:49:41:3d:ae:33:
37:49:3f:ab:7e:6d:29:bf:44:5d:97:26:ea:e8:44:
5f:f7:9c:41:65:0e:f4:7e:3f:1c:58:8e:c4:f3:b2:
ca:4d:2f:42:74:c4:13:1d:b0:4c:4f:fe:f1:71:c8:
35:08:80:ed:4d:12:43:39:8d:48:36:d4:d0:71:b9:
36:9e:3b:c9:5e:97:bf:be:06:93:8e:dd:c4:f2:62:
db:f7:96:3b:97:1e:54:cb:df:63:20:07:1c:c5:ec:
06:80:04:32:f0:0d:65:35:ce:ff:25:f6:9a:fc:ab:
dd:76:6f:27:3d:62:bc:c6:1d:b5:55:8d:6c:f1:16:
50:b8:31:71:0f:d9:56:1c:fb:7d:16:de:a4:10:8b:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5A:13:86:78:F7:36:0C:B7:08:7A:A5:7B:00:53:13:CE:DE:C9:93
X509v3 Authority Key Identifier:
keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b3:e6:3a:77:1d:7c:fe:82:d0:74:9e:70:6b:71:93:7a:8d:
a2:9c:e2:4c:5f:c3:e9:2b:98:08:8d:9b:c2:20:ab:bf:22:e1:
ab:bc:80:9e:19:74:fd:64:cf:64:a3:3e:a9:14:35:83:ce:8e:
97:3e:57:47:9b:ef:88:ca:af:26:33:67:51:fa:42:ac:7d:02:
2c:05:7d:b7:b4:57:cd:cc:74:8d:25:19:12:b6:27:a2:84:3f:
d5:14:37:c7:f4:d7:a9:f6:d2:43:d0:e6:0f:60:9c:a5:c7:a2:
63:2a:3d:bc:16:6c:c9:a6:b9:d8:b0:07:05:11:5c:83:3a:9f:
3b:47:fe:21:4d:28:ee:65:e0:5a:34:98:0f:72:ba:11:3d:5d:
74:4f:6f:dc:6e:4f:26:66:4e:25:45:8c:5f:e0:8b:66:73:b1:
c9:3c:3a:12:db:1c:b9:87:35:32:18:6c:65:95:33:89:59:89:
29:31:e6:b8:6c:95:6f:56:bf:e0:83:1c:a9:3d:00:fd:e0:02:
8b:f3:96:29:88:c8:6f:59:59:86:40:82:10:67:ad:10:5d:c7:
67:14:30:d7:cc:d4:8c:f3:e9:31:29:af:80:42:ae:e3:8c:1c:
55:11:9a:7e:f9:74:5d:ee:a9:4b:3d:47:7e:19:c3:1b:23:5f:
14:c8:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:24:20 2026 by rpki-client