
$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
File: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json)
Hash identifier: /O+2ler3M0tL9JcM9JoeJ+Ka2PRWNqD9BFe3wSvcQ0M=
Subject key identifier: 4C:A8:DD:F7:35:39:DE:B4:D3:FC:A7:AE:7C:6C:9F:C7:2A:3A:9D:9C
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial: 34FCDDE91A89DECD55F86F8308438E6B23EEC10A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
Manifest number: 0566
Signing time: Thu 16 Apr 2026 23:42:08 +0000
Manifest this update: Thu 16 Apr 2026 23:37:08 +0000
Manifest next update: Mon 20 Apr 2026 00:25:08 +0000
Files and hashes: 1: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: t73bJSev/MnTBxda4w51EgtY3s6q8wQKW/7viVMLk2M=)
2: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: O4758ltnaCnZlk7IYIR3KUuRIpNS2S4KZ7yVd+rr0y0=)
3: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: oVmfGlTp0DWOtWPGyWCK/51mm8QlFMAOkDDm7W0JfnE=)
4: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: Rjbhv9edaboHxu8zehTXAVaGiJWP5SEtMWZfSRiWBmE=)
5: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: iEwos51aWtJInprKu1evUCiZY2FYY6kr/E794RVuLRw=)
6: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: Ge6toEI3GzH1rudvQNuKe4sTOqkKcImFzmaL0fB9K2A=)
7: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: 3hpRgS72xqbHw/rzHvrZvr06sNkUSk2YClN/PS2G8VY=)
8: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: bu8PQupPQERGQ/wzLVVe3ZYhIOmwELfx937WvLW0lzc=)
9: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: M1sZzZsXerpK67gBWx+pwUlEiAdZNEC8sdxke6ageOg=)
10: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: FxZdAK6EBopeaPvJyDmMKuou4vLDcXFc1HN+qLiU8SU=)
11: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: 2I4LUvDndEY+56Z45Zke7IZg+TWoP7vGoCnv2WeX4qA=)
12: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: 7CnLEJTxSmV5XmK1oL/nqrOB4/valIkxzWgpmSqfSL0=)
13: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: b1d2IpMrPiIjBD6MTNOx5pdXixsLXZonVO5D5NGCeqQ=)
14: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: sTkMNKXQHwGJCIGPBjMVfmb030wQu4FTAnEhwXDkkhA=)
15: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: afV3DuPWJs229SMBfZ6L1zzWwdYeqEIzLl+zAnPOPc8=)
16: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: nbkYpz+Buhh+XcMqkAbLahjlkTuDcneq98AvbJE0oqQ=)
17: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: DnA9pVTlc5t5JUQmGO4bpvoQrAWbOAtoPuSdy5Z19iI=)
18: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: vVu41fldo66s3GTiO3p70Y9WjrS6PJn4ErhvMTYrL+0=)
19: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: euoMpvL4eG72VF7oEqlEoSVWhRjwaeq3y0huB9mjd6w=)
20: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: qU/iCVYcrH5NwRFFUnpTANC1C4dNa/LYJXSxq8pN8yQ=)
21: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: SpSJ2mlMQ8WdpZZy+WtaRGJCKRn7SkirsoH4mwvq2iA=)
22: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: l7IvhWfbT+lx2dajFWFQHmgoo+JryhgkVz+DjITDf5w=)
23: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: impujDOUoN2BKQyTyiVBUJjqkOdpqC1eOXOcnJD1Ge8=)
24: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: akxHC8MKM3EFjHhlpdlYP+/pk7TEX/1Nsq+20Bs3aRk=)
25: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: oOJaEiRPwPQflN2dss15Y4scB4IK0srdXT4sQ+7Afow=)
26: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: GOw6BJn4XT5wEmOGVeX/6A1aWsswmeb6q3J3zFZr2JM=)
27: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: ktBqyZQvnsVWZJg0o8QMMym54n+sUY8BtLk1pA6WS3M=)
28: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: 9DRtavO7TXPRRO9r4nJOU2l6z0jZDLCjiuHMpKPIfJU=)
29: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: Pm3ejHe0iKXyhk2uLd7JZnNwWHWfKfQSqqt4OykxpQA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 00:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:fc:dd:e9:1a:89:de:cd:55:f8:6f:83:08:43:8e:6b:23:ee:c1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Validity
Not Before: Apr 16 23:37:08 2026 GMT
Not After : Apr 20 00:25:08 2026 GMT
Subject: CN=4CA8DDF73539DEB4D3FCA7AE7C6C9FC72A3A9D9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:f2:46:93:ae:69:97:7d:62:76:2e:49:6d:
09:5a:71:94:fe:a2:24:fe:bd:4b:2d:9e:0d:bb:7b:
30:8d:70:ab:6b:4c:71:78:ef:fa:37:87:ff:86:22:
b9:04:62:db:91:5a:48:6b:78:26:be:0e:ab:7e:29:
7e:c2:7b:b4:88:e8:91:0b:39:9f:53:fc:d9:f6:40:
a9:48:78:d6:3f:6c:5b:75:19:57:4b:63:ff:7d:c5:
35:be:12:74:26:4f:e3:64:fb:dd:ae:a7:c1:13:b4:
ba:b6:09:1a:49:b4:1d:35:ba:d2:3c:45:fa:b2:1d:
31:b5:c0:64:bc:1a:f3:1b:5e:fb:30:73:af:5e:d5:
98:41:eb:71:61:ba:41:cf:a0:da:e0:47:de:66:e4:
98:24:c8:ef:a2:e2:6e:d9:37:4a:73:0a:a5:69:02:
61:4b:22:9a:d4:ef:03:3c:ae:a7:ba:8e:f1:1d:88:
09:2f:f0:d1:21:b3:8c:ba:09:35:8c:57:db:54:9b:
70:3d:30:da:3f:8c:9b:73:20:98:51:b2:75:0d:b2:
f5:4c:fb:fc:ce:dc:98:78:96:63:20:43:1f:8b:0c:
8a:7d:36:f0:0f:c4:44:df:2d:81:68:a8:88:bc:ad:
b3:22:96:1c:fc:11:81:5e:ff:31:eb:50:d2:bc:16:
f4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A8:DD:F7:35:39:DE:B4:D3:FC:A7:AE:7C:6C:9F:C7:2A:3A:9D:9C
X509v3 Authority Key Identifier:
keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:96:4d:c9:dd:e0:65:70:3c:12:5f:cd:e1:5f:a6:fc:fb:96:
de:2a:5b:87:ad:28:e0:e1:55:36:90:9c:69:84:e5:d8:e1:76:
fa:c8:ca:79:c8:73:cf:34:36:d2:bf:30:e8:a8:1d:48:ac:0e:
ee:51:7d:48:81:fd:f9:b5:ec:fa:24:1f:9d:b9:85:20:8d:c6:
83:2b:ab:16:62:a0:f4:2d:76:d9:67:e2:26:a8:e8:c1:43:c2:
5d:ce:a2:f4:52:65:61:5a:b2:1b:5e:b4:90:7a:60:af:a3:50:
07:15:7b:a5:67:da:38:bb:d7:72:cc:32:35:c3:1d:16:a2:d7:
1d:e1:6b:94:98:46:4a:db:6b:49:f3:48:a7:55:59:6b:11:cb:
6e:e7:f1:33:4a:b3:20:ad:2f:0d:65:37:14:16:c4:29:d9:3e:
11:ef:44:26:33:19:65:32:b4:d4:b2:7c:b0:4f:6a:ef:b0:6a:
f0:14:a1:8a:09:99:e7:ad:82:fb:ab:be:06:15:0e:82:c3:45:
54:f2:18:0e:b3:9e:c7:ab:3a:34:6a:f8:1a:8c:af:be:dd:31:
49:c5:7a:3d:45:ae:60:93:2e:55:e8:a5:ae:62:56:25:28:58:
a8:f9:cf:49:df:53:fd:f8:1f:41:83:a4:38:1e:0f:5e:49:d0:
20:e5:3b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:21:41 2026 by rpki-client