
$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
File: C89AFDB015B4516342E4702244E8B8AC331B8669.mft (raw, json)
Hash identifier: uYhoBF+QZN+MNroYq2xxDqfHTkNVJ0gRex8C1skQeno=
Subject key identifier: 67:96:D6:61:36:1E:13:09:94:5C:91:87:F5:E7:39:C4:3A:64:7D:7A
Authority key identifier: C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69
Certificate issuer: /CN=C89AFDB015B4516342E4702244E8B8AC331B8669
Certificate serial: 7AD557884D1755021DE832C460D3CED7F080FEF3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
Manifest number: 0160
Signing time: Thu 16 Apr 2026 21:30:55 +0000
Manifest this update: Thu 16 Apr 2026 21:25:55 +0000
Manifest next update: Mon 20 Apr 2026 06:29:55 +0000
Files and hashes: 1: 3130332e34302e39342e302f32342d3234203d3e203633353036.roa (hash: WRQr/4s6i86uzriKB9RHRYKn5SQtBKQDw9UpfGvIHbw=)
2: C89AFDB015B4516342E4702244E8B8AC331B8669.crl (hash: 3/wqoQKgblZEJq3fNpVjXGRGfuNTyNDnMzHeLKeuPfM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl
rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 06:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d5:57:88:4d:17:55:02:1d:e8:32:c4:60:d3:ce:d7:f0:80:fe:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89AFDB015B4516342E4702244E8B8AC331B8669
Validity
Not Before: Apr 16 21:25:55 2026 GMT
Not After : Apr 20 06:29:55 2026 GMT
Subject: CN=6796D661361E1309945C9187F5E739C43A647D7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e9:0e:93:cf:4a:09:89:99:97:2d:fc:d0:bb:
81:c8:d6:c8:50:8d:01:78:3f:fe:67:f2:a4:11:27:
69:47:f6:bd:0c:bc:ce:6d:47:14:a9:32:5b:fa:e3:
27:d6:15:ca:56:66:18:95:fd:7b:7b:46:5e:5b:75:
ac:92:7f:36:8c:31:b5:71:97:e6:ae:7d:a3:6d:1b:
cd:e5:17:4b:83:86:ac:df:68:62:53:b9:07:bb:34:
91:d3:22:26:bc:9f:d7:a7:7b:e5:3c:23:f6:73:b4:
ca:b1:93:d9:a0:80:eb:10:f0:ba:e3:e3:05:9d:31:
cb:e3:2b:f1:78:f4:84:90:22:89:38:b7:2d:54:21:
95:6f:50:4f:78:d2:df:87:16:57:b8:f2:5f:0a:0d:
e3:d4:35:8b:be:10:92:14:1f:9b:99:ec:85:dc:04:
77:25:b4:37:8f:e3:41:cc:18:1c:a8:90:46:40:0e:
81:a7:e3:e3:fb:ad:ac:55:e4:8f:2c:e5:7e:ac:59:
b7:dd:e2:20:57:6a:1d:c9:7c:03:bd:0a:05:23:7e:
4a:15:53:d0:1d:6f:01:ee:f1:43:13:a8:6c:37:5a:
e1:32:47:a2:d3:43:83:ae:17:c9:6b:a7:5e:c8:0e:
37:ff:ca:03:0f:74:e7:cc:a3:03:e0:97:6d:0c:d4:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:96:D6:61:36:1E:13:09:94:5C:91:87:F5:E7:39:C4:3A:64:7D:7A
X509v3 Authority Key Identifier:
keyid:C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8f:21:7d:c6:19:2f:6d:4d:cc:3d:c8:d6:4a:1d:65:6a:8a:
e2:57:f5:91:90:5b:22:82:98:a7:40:f0:87:92:32:0d:7d:b4:
4a:88:f5:2e:05:bb:0f:48:bb:3f:f7:09:bd:c8:ed:95:14:16:
04:12:92:dd:52:8a:36:b6:e3:35:18:fc:9e:f8:8e:aa:24:7c:
45:1b:3e:d8:ce:46:ed:e2:df:bd:88:a9:90:fb:ba:00:25:8b:
06:dd:a7:55:3d:56:27:f2:fe:58:3e:ff:19:2d:c0:97:81:44:
c5:14:44:30:59:c5:45:0a:66:ef:e9:eb:98:5d:62:98:65:2c:
18:92:71:43:9c:2a:df:f5:4d:51:09:9c:ba:b6:bf:d0:ee:f6:
e0:04:9b:de:84:eb:67:d9:07:86:b7:26:a4:9f:43:31:4d:e5:
3a:2f:c3:95:8c:8f:0f:35:d0:da:a3:6b:29:01:ae:b4:e3:52:
7e:93:d4:39:28:be:1a:2c:cd:c4:5c:02:8c:a4:df:30:f1:5d:
33:e0:5a:36:25:5c:32:e7:e5:c4:bc:b8:d3:fa:e3:41:29:f5:
f3:d6:ef:ed:19:2a:fe:9b:6f:9b:fc:48:80:e1:f1:0d:90:3e:
da:e8:77:4a:3f:06:4d:7e:78:12:f1:1e:fe:bf:79:fa:14:d5:
49:52:89:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:50:09 2026 by rpki-client