
$ rpki-client -vvf repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft
File: 18501FBD8586A1409C33F07377587F8C015DAFF4.mft (raw, json)
Hash identifier: KUeTe5vSeluYzotk8HXR6DaJF0KhUUg0LEpAPXU4aKA=
Subject key identifier: 68:98:A3:CC:32:5F:45:4E:27:CB:22:75:B2:B4:51:AC:F1:BD:95:1D
Authority key identifier: 18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4
Certificate issuer: /CN=18501FBD8586A1409C33F07377587F8C015DAFF4
Certificate serial: 37C8CC3911D1EE1A0E1B50A52037E68F7B8868B4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft
Manifest number: 01B4
Signing time: Sat 28 Feb 2026 04:42:22 +0000
Manifest this update: Sat 28 Feb 2026 04:37:22 +0000
Manifest next update: Tue 03 Mar 2026 15:31:22 +0000
Files and hashes: 1: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: S91vKZLLe/dNTIpbo6cZEhpzP1zxZDRgjEKwwjEVMQo=)
2: 18501FBD8586A1409C33F07377587F8C015DAFF4.crl (hash: eAqUPTPUMO4u5W6W0xvWiABjXZEAvMwO+AtCy/iULN0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl
rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 15:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c8:cc:39:11:d1:ee:1a:0e:1b:50:a5:20:37:e6:8f:7b:88:68:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18501FBD8586A1409C33F07377587F8C015DAFF4
Validity
Not Before: Feb 28 04:37:22 2026 GMT
Not After : Mar 3 15:31:22 2026 GMT
Subject: CN=6898A3CC325F454E27CB2275B2B451ACF1BD951D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:eb:43:e3:e9:27:23:94:6d:b4:0d:dc:ad:24:
fe:77:5e:c7:8d:a8:e7:74:e0:ae:95:3b:1f:e4:f8:
73:01:0a:fc:15:b9:e6:e4:fc:3f:72:74:e4:8e:83:
93:43:91:43:70:10:3b:41:ff:d1:cc:c0:fb:4d:b1:
4a:86:b9:9e:84:a0:c0:37:f1:58:5d:18:55:2a:bc:
d0:8a:ab:39:7c:c8:67:73:b5:cc:59:23:cf:49:7d:
a1:ca:01:0c:9d:19:9f:0f:78:d3:68:35:3f:d3:9e:
63:33:a5:67:87:54:e6:48:dc:f6:80:ed:49:80:f6:
d2:db:4f:ae:0e:4b:0a:53:13:70:db:51:b1:82:1c:
04:89:2b:b2:16:bc:6b:c4:33:4f:1b:52:8a:b8:47:
18:5b:28:f4:f0:32:d7:26:97:39:0b:e6:e1:d5:c4:
8a:15:d1:33:28:04:9e:31:68:49:87:4c:c5:30:56:
aa:87:31:58:5f:0b:83:9e:21:0b:05:62:ef:f9:b0:
e2:1e:18:ef:93:0e:af:b1:e4:51:76:ad:87:16:0f:
b0:bc:d9:1d:d1:32:63:18:97:4f:fc:61:79:b6:40:
c5:6d:8e:12:78:b6:1d:c5:65:90:c3:c8:a7:a3:d3:
80:70:28:1f:57:56:71:73:7e:ab:d7:cf:14:20:d6:
6d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:98:A3:CC:32:5F:45:4E:27:CB:22:75:B2:B4:51:AC:F1:BD:95:1D
X509v3 Authority Key Identifier:
keyid:18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:12:2b:cc:d2:d7:2a:94:42:40:0d:20:a2:b3:9b:90:32:a3:
20:b3:90:d0:49:af:7e:97:e0:f0:03:1b:fc:2d:05:fa:86:4f:
3a:8c:a8:0f:21:f5:bc:09:14:26:d3:6a:ba:8b:28:3f:e1:ca:
44:08:56:09:42:45:92:c2:3b:dd:9f:97:f2:df:62:75:73:22:
d7:fe:98:84:11:e8:7f:cf:f4:42:97:a7:82:45:7f:99:0e:bb:
d5:7a:da:48:d9:54:ff:e8:40:1c:1d:f2:14:3a:5d:cd:c2:54:
3e:f9:46:73:17:11:c4:ad:69:fa:b8:9b:d1:94:9a:e7:aa:e0:
5f:73:e5:8d:91:17:dd:ab:a4:cf:e9:8c:5f:ad:5a:b0:03:45:
2b:c3:7f:6d:12:f7:63:1d:20:5b:90:01:a3:94:a1:24:d3:e1:
38:61:fb:cc:62:65:5c:ee:8f:d2:68:9d:7c:43:6a:c7:2f:a4:
40:f0:97:8e:7f:f6:61:03:e5:43:c6:ac:49:fa:cf:cf:ab:6c:
e3:65:31:7c:9f:78:30:6e:5d:f4:d3:71:33:90:5c:a9:4a:8a:
c0:75:da:d7:47:09:36:8a:8b:b8:bc:92:a7:7c:d5:df:52:b2:
fe:db:09:96:1f:ed:09:2c:3c:1d:30:db:48:51:11:79:76:e3:
67:00:03:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:07 2026 by rpki-client