
$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
File: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft (raw, json)
Hash identifier: 22KsS29VP+csUkleBPBc0g6vZb/axPvquUGEQXqPOso=
Subject key identifier: 4F:FD:62:F8:49:02:E7:DD:D4:4E:FB:E1:F3:05:A1:D8:AB:2B:A9:08
Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
Certificate issuer: /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Certificate serial: 6C1F096D42BA784A51314A7D134FCC0B9BCCE7CD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
Manifest number: 05B4
Signing time: Thu 16 Apr 2026 08:12:44 +0000
Manifest this update: Thu 16 Apr 2026 08:07:44 +0000
Manifest next update: Sun 19 Apr 2026 18:36:44 +0000
Files and hashes: 1: 3230322e34332e3137362e302f32302d3234203d3e20313331313131.roa (hash: EI/U6V5bg24RVZ09I8vLipweFogO+Ea7cNH372pUyZY=)
2: 3130332e32322e3234392e302f32342d3234203d3e20313331313131.roa (hash: aY0anTpEZIat4/VeI01P3kjwTwtzNISJMDgT1crbBNU=)
3: 3230322e34332e3137362e302f32322d3234203d3e20313331313131.roa (hash: o4EuiIX65DjYa3ywyHTPaQSCo34pp+K8+jEM2BCf1A4=)
4: 3130332e32322e3234382e302f32322d3234203d3e20313331313131.roa (hash: /xCTIh9hwcxKjknnAI3eSpvSHoqSTZNnozfD2XT8CVw=)
5: 3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa (hash: 516xDtvKLseki+IBX6h+mKjxbuiKgwqfJB4LmOXicXw=)
6: 3130332e32322e3234382e302f32342d3234203d3e20313331313131.roa (hash: UtJjITDA9JHQ6VJXBVisu99jt556rMiuNEZSGObwvAc=)
7: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl (hash: zZEzr9bUS/Uwqu8Bevupc/nzma7Zu/k0/aL3MWFTEAI=)
8: 32372e35302e31362e302f32302d3234203d3e20313331313131.roa (hash: K0Qyq4TQNm4Gb6O7QApcWBMQFh1hlsrrhE70FrRZJng=)
9: 3130332e32322e3235312e302f32342d3234203d3e20313331313131.roa (hash: FQpoIAC9AkHOj7gF3JsxAlTSaEMd9sYKYRZgoHuK7yw=)
10: 3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa (hash: twSGwt6Fotgsl0DbfHgg9x8SNLnHsi/QE3YaQYCzzMs=)
11: 3230332e3137362e3138302e302f32322d3234203d3e20313331313131.roa (hash: VU0ZIZ2pkWLbL/yZX6A7PXJh4wAgz1Lfo/SmUnfVxjs=)
12: 34332e3234332e3134302e302f32322d3234203d3e20313331313131.roa (hash: Ln/zBXifrR3kRN5QO8V+SWT6tpUWR1WnEob5sCVgP4s=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 18:36:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:1f:09:6d:42:ba:78:4a:51:31:4a:7d:13:4f:cc:0b:9b:cc:e7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Validity
Not Before: Apr 16 08:07:44 2026 GMT
Not After : Apr 19 18:36:44 2026 GMT
Subject: CN=4FFD62F84902E7DDD44EFBE1F305A1D8AB2BA908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f6:b7:62:18:c4:44:8f:47:69:4c:a2:b0:24:
ca:9e:86:e4:f5:8c:f8:78:25:cf:b2:91:4c:d3:96:
98:19:61:06:1b:22:8a:4a:66:8e:b4:b6:41:62:50:
e9:6d:34:b6:cd:54:87:ff:f9:6b:67:34:56:72:f1:
0a:16:c1:85:24:9f:a1:62:c1:a8:08:36:56:46:54:
a7:8d:00:41:e9:f1:a2:7a:f4:d0:73:24:0b:7a:59:
7c:bb:1f:77:40:2d:28:7e:31:ff:e4:d6:a8:87:48:
2a:6f:a8:09:4d:e2:90:45:28:50:e5:66:cb:f0:17:
f4:f6:74:e4:e8:75:ff:a3:cc:e6:38:f2:f5:ab:e3:
42:f1:49:f5:cb:93:ec:c7:54:5e:d4:c7:9a:cd:8d:
5b:d4:ae:49:77:9d:d5:dd:5f:36:bd:25:95:79:f9:
ed:b5:f0:64:b9:12:f6:8b:da:12:c9:80:1a:73:35:
4b:4c:30:a6:aa:73:36:1b:a5:7e:da:c4:f3:58:69:
00:5a:0c:c9:17:f0:df:4f:a2:ed:ac:10:c0:98:54:
7a:e4:3c:2f:fb:ce:5f:83:42:1f:bb:50:9f:55:cc:
12:e6:ec:b3:d5:3c:cb:50:aa:71:3d:7d:1f:d1:c2:
d3:55:df:12:e6:e0:7d:0d:b4:c5:01:c6:37:83:09:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FD:62:F8:49:02:E7:DD:D4:4E:FB:E1:F3:05:A1:D8:AB:2B:A9:08
X509v3 Authority Key Identifier:
keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1d:d5:73:cd:76:1f:c8:a8:47:85:eb:ef:fe:4d:47:ef:39:
21:0d:ce:3f:18:df:4f:47:c1:c8:4e:97:62:86:bd:bc:14:7b:
4b:8b:f9:45:f2:30:24:e1:7c:8c:b3:f9:0d:8c:46:48:6b:0d:
3d:97:28:48:51:6a:c0:a4:8d:5a:a3:77:ce:bc:f8:4c:50:ff:
3e:6a:2b:69:6c:97:c8:a1:e1:cf:24:25:10:d3:e4:7d:09:47:
42:73:73:07:bd:e3:43:6b:12:66:e1:c5:95:09:49:1b:19:a0:
b0:38:0e:36:ee:aa:d5:da:d2:3c:67:89:3a:b8:b6:3a:6b:33:
8f:04:2d:32:f5:23:6b:cd:98:73:c3:75:b5:37:e5:06:81:c1:
c4:6f:d9:46:ca:83:d9:28:ac:6c:56:e5:88:e8:d1:bb:a8:75:
ee:d5:2f:87:54:43:fc:4c:fe:f1:1d:c6:a3:da:3b:02:f7:cf:
1d:3a:3c:68:36:eb:72:0b:6e:be:05:40:c7:49:8a:1b:76:d3:
08:66:fc:9d:18:df:50:03:86:75:c5:ec:7e:1d:54:28:ac:79:
31:f9:dd:b9:01:48:3d:ee:0b:f1:27:ec:82:a3:e1:aa:98:f0:
c6:cc:38:b6:9f:bc:5e:4c:90:cb:e6:23:23:8f:e8:5f:1b:04:
58:fe:12:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:39:35 2026 by rpki-client