
$ rpki-client -vvf repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft
File: 00CBB314A3396508984527DC9E3F91DA2A407863.mft (raw, json)
Hash identifier: 1QT5sByG0k0/XXDZmXMqCV/ZbbXqxIxp5Z44nnxw4xE=
Subject key identifier: 50:0A:ED:E3:18:70:42:02:4B:5E:2A:A1:B3:92:A1:E6:50:C0:25:63
Authority key identifier: 00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63
Certificate issuer: /CN=00CBB314A3396508984527DC9E3F91DA2A407863
Certificate serial: 236F81D065037AE460B7BF00CEC611CF231A9F2C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft
Manifest number: 01D0
Signing time: Fri 17 Apr 2026 10:52:35 +0000
Manifest this update: Fri 17 Apr 2026 10:47:35 +0000
Manifest next update: Mon 20 Apr 2026 22:33:35 +0000
Files and hashes: 1: 00CBB314A3396508984527DC9E3F91DA2A407863.crl (hash: 45Xc6s9L7v3b7PijPB1UdA15VbOu7iddx7N3U3Op83I=)
2: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: zPJwoYlYVUWfKNJbenzQ4XPKJqwUvv7VGWry1rzbZSc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl
rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 22:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:6f:81:d0:65:03:7a:e4:60:b7:bf:00:ce:c6:11:cf:23:1a:9f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00CBB314A3396508984527DC9E3F91DA2A407863
Validity
Not Before: Apr 17 10:47:35 2026 GMT
Not After : Apr 20 22:33:35 2026 GMT
Subject: CN=500AEDE3187042024B5E2AA1B392A1E650C02563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:10:55:5b:25:89:f2:ea:81:db:f6:00:c5:
43:c2:41:d6:2f:99:da:e3:8f:fb:fc:c8:ff:e0:3f:
87:c4:fd:3c:e1:8d:2e:7d:62:0b:bb:ea:46:c9:a7:
85:b3:2d:ed:f9:8b:36:3c:d2:3e:a5:59:b0:84:8c:
45:ef:ad:81:e7:41:bd:e0:c1:39:fd:be:95:84:bd:
ed:a2:9e:f2:53:fc:77:ea:9e:3a:b9:28:a5:1b:99:
39:e7:5b:b0:73:30:fd:d5:2a:c2:f6:e0:d0:b8:ab:
3b:16:c2:0d:fa:bc:7f:5e:67:f5:b8:52:19:0e:04:
5f:68:df:db:70:3f:f2:3d:a2:10:65:df:22:66:fb:
ac:7b:11:7f:54:ea:c7:f2:26:30:ff:7b:e9:ae:a9:
09:c1:f4:31:7b:49:1e:c6:f8:41:18:0d:c8:2d:93:
89:c6:12:74:f1:2a:13:73:bf:4d:dc:35:e3:9d:6c:
31:c3:c4:f2:af:a0:e8:1c:0f:b3:d4:93:d0:ab:02:
87:4a:85:ab:ea:0e:a3:b3:07:a7:c1:69:13:a5:a5:
78:4d:7a:44:33:4a:b9:83:75:13:4a:ad:b4:f8:91:
3b:44:77:06:43:ad:52:20:ce:d5:1c:bf:fc:85:db:
71:58:2e:98:8b:bd:72:76:d0:25:18:d1:e4:eb:c4:
b5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0A:ED:E3:18:70:42:02:4B:5E:2A:A1:B3:92:A1:E6:50:C0:25:63
X509v3 Authority Key Identifier:
keyid:00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:cd:53:fa:15:97:31:f6:99:b6:db:3f:1f:63:66:f4:0d:27:
88:95:72:59:8c:ce:d9:83:00:2f:18:67:87:2e:88:a8:8e:23:
4f:c9:1d:c5:92:ce:88:cb:89:38:6b:67:f4:8d:ee:41:ec:a2:
cb:cf:6b:26:8c:c9:7c:2b:68:b2:0c:43:85:48:51:a5:24:e9:
78:c9:fb:b8:5e:c1:8f:5f:bf:d0:2c:ec:20:50:fc:00:78:82:
17:f0:65:fe:a4:bc:f7:16:63:e0:39:3d:a9:48:f4:8e:41:a9:
d5:a1:a7:8d:64:56:5d:08:87:03:4b:47:ab:4b:b4:9a:c3:35:
f1:1b:37:12:c8:45:9d:e1:b9:21:79:0a:c3:2a:2f:b6:4f:ea:
a2:d0:57:40:10:27:24:e9:2b:6d:ec:a7:f9:3c:99:34:de:c2:
00:64:54:59:49:d4:a7:ed:03:6e:ee:04:92:55:93:a9:cd:9e:
38:f3:9f:57:39:37:67:d0:41:76:dc:a2:a9:5a:18:c3:72:17:
62:2a:ac:8a:6c:b1:2b:31:b3:68:2d:6e:9a:26:09:54:71:e3:
e0:b3:e7:e7:82:bf:2a:e9:d0:05:c6:23:3b:20:e5:f6:97:ac:
b9:73:3e:9c:89:62:5e:b6:5a:35:fe:a4:0a:66:36:b9:37:d5:
5c:79:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:16:51 2026 by rpki-client