
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft
File: 7CDEC0195C0619A2844735B38B762AB1C145318A.mft (raw, json)
Hash identifier: x9teVu/JE07HkIiEp4rikOR1m55ZAIXFypmEjhZDKSA=
Subject key identifier: 24:0D:8A:9F:10:DA:C4:12:CF:BA:C4:76:93:A4:C7:64:E1:DB:C9:6D
Authority key identifier: 7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A
Certificate issuer: /CN=7CDEC0195C0619A2844735B38B762AB1C145318A
Certificate serial: 255D2756D975CDB77684668419AD35D117641751
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft
Manifest number: 0233
Signing time: Thu 16 Apr 2026 21:40:57 +0000
Manifest this update: Thu 16 Apr 2026 21:35:57 +0000
Manifest next update: Sun 19 Apr 2026 23:32:57 +0000
Files and hashes: 1: 3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa (hash: CtGkBvOXr+z5xeQBMHV9NThlZEDqDbWOP9wsaKhn80Y=)
2: 7CDEC0195C0619A2844735B38B762AB1C145318A.crl (hash: j0jDxpkRgOHxgfmFbG0Iv5PSYWw7m17f+ggONXOHnEc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl
rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 23:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5d:27:56:d9:75:cd:b7:76:84:66:84:19:ad:35:d1:17:64:17:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CDEC0195C0619A2844735B38B762AB1C145318A
Validity
Not Before: Apr 16 21:35:57 2026 GMT
Not After : Apr 19 23:32:57 2026 GMT
Subject: CN=240D8A9F10DAC412CFBAC47693A4C764E1DBC96D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:a1:d2:75:39:c6:cb:08:5c:7a:cc:6b:c3:
9c:ed:5f:92:12:00:b2:59:9d:18:84:c7:d0:63:f3:
c1:1e:2f:b1:2f:a3:59:09:df:1f:8b:eb:46:06:11:
e2:fc:23:fd:13:03:95:69:f2:9a:4e:3c:05:b9:33:
eb:82:b7:ab:b3:d4:ec:07:ed:7f:d2:64:86:d3:f8:
91:28:f6:83:6c:66:9f:9c:34:b1:7a:f7:d4:d2:37:
cd:34:76:ae:48:b5:20:f6:d7:86:81:68:fe:5e:af:
ff:c3:28:f3:c3:58:69:26:7e:a0:41:41:30:12:22:
31:00:11:d5:c7:ab:26:3b:a1:72:fa:cb:16:57:6d:
53:a3:e2:5d:8d:0e:7e:97:ef:28:8f:a6:a0:2b:14:
88:18:ed:25:66:4a:c8:8f:a7:43:ff:ba:fa:22:c9:
c2:4c:7b:3b:80:41:77:8c:1c:91:33:cf:25:db:3c:
d7:18:96:53:b1:ec:9b:9e:64:8a:bf:f4:54:80:4c:
4e:05:d6:89:2a:96:b3:0f:cf:14:f2:44:be:54:fa:
8b:28:28:97:d3:73:90:4f:1b:6f:07:ac:13:93:b6:
2f:f0:23:8e:ab:fe:be:27:0e:d9:d6:1c:21:5c:38:
17:8e:fd:4a:27:d5:a7:23:5b:a2:2d:c6:f6:e8:fe:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0D:8A:9F:10:DA:C4:12:CF:BA:C4:76:93:A4:C7:64:E1:DB:C9:6D
X509v3 Authority Key Identifier:
keyid:7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9e:6a:d6:2d:da:ea:9f:bb:08:58:fe:11:d1:cc:87:b9:09:
6b:b4:81:56:e0:97:01:f6:87:e2:11:3b:c1:c5:51:4a:21:e6:
8f:b1:46:d4:2e:b5:61:9e:53:fd:42:49:cc:3f:68:a4:6d:40:
cf:be:15:8a:6e:bb:ec:7d:4b:6f:36:d0:0a:d9:2c:f0:a7:2d:
df:34:6f:45:d7:81:4e:50:d0:b2:d7:2b:3f:e1:67:06:a0:e8:
8c:18:c6:80:24:22:f5:b2:13:96:87:fa:c2:02:f4:53:7d:c3:
d1:7a:81:4a:bf:37:46:9c:24:b7:85:1b:54:04:19:06:2b:d7:
6e:25:23:06:dc:08:d0:97:81:ec:a8:81:1d:b8:2f:12:a3:7a:
96:1d:a2:f4:70:75:82:66:ad:8a:61:06:fb:53:a4:9b:19:6f:
59:f0:fd:d0:4e:97:ee:e0:90:6c:61:ec:47:41:d4:8d:b8:ad:
78:21:48:e9:c8:e4:04:22:84:45:8a:b2:0e:a5:6e:ca:17:f4:
40:17:48:f3:15:19:fe:57:d0:2e:e2:41:51:a1:ee:c9:06:49:
4e:cb:db:01:90:ef:fd:d0:14:c5:fb:18:78:22:2c:0f:f1:84:
c3:22:4d:ed:20:c1:9b:0f:5e:f6:58:b7:68:c2:f6:a7:9c:9c:
54:50:29:9c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJV0nVtl1zbd2hGaEGa010RdkF1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJBQjFD
MTQ1MzE4QTAeFw0yNjA0MTYyMTM1NTdaFw0yNjA0MTkyMzMyNTdaMDMxMTAvBgNV
BAMTKDI0MEQ4QTlGMTBEQUM0MTJDRkJBQzQ3NjkzQTRDNzY0RTFEQkM5NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoS6HSdTnGywhcesxrw5ztX5IS
ALJZnRiEx9Bj88EeL7Evo1kJ3x+L60YGEeL8I/0TA5Vp8ppOPAW5M+uCt6uz1OwH
7X/SZIbT+JEo9oNsZp+cNLF699TSN800dq5ItSD214aBaP5er//DKPPDWGkmfqBB
QTASIjEAEdXHqyY7oXL6yxZXbVOj4l2NDn6X7yiPpqArFIgY7SVmSsiPp0P/uvoi
ycJMezuAQXeMHJEzzyXbPNcYllOx7JueZIq/9FSATE4F1okqlrMPzxTyRL5U+oso
KJfTc5BPG28HrBOTti/wI46r/r4nDtnWHCFcOBeO/Uon1acjW6Itxvbo/q7NAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJA2KnxDaxBLPusR2k6THZOHbyW0wHwYDVR0j
BBgwFoAUfN7AGVwGGaKERzWzi3YqscFFMYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YjkwYWRhNi1iNzIxLTRiNWYtOTBjYS1lOGY0Yjk3N2Q1NjEvMC83Q0RFQzAxOTVD
MDYxOUEyODQ0NzM1QjM4Qjc2MkFCMUMxNDUzMThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJBQjFDMTQ1
MzE4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI5MGFkYTYtYjcyMS00YjVmLTkw
Y2EtZThmNGI5NzdkNTYxLzAvN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJB
QjFDMTQ1MzE4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKieatYt2uqfuwhY/hHRzIe5CWu0gVbglwH2
h+IRO8HFUUoh5o+xRtQutWGeU/1CScw/aKRtQM++FYpuu+x9S2820ArZLPCnLd80
b0XXgU5Q0LLXKz/hZwag6IwYxoAkIvWyE5aH+sIC9FN9w9F6gUq/N0acJLeFG1QE
GQYr124lIwbcCNCXgeyogR24LxKjepYdovRwdYJmrYphBvtTpJsZb1nw/dBOl+7g
kGxh7EdB1I24rXghSOnI5AQihEWKsg6lbsoX9EAXSPMVGf5X0C7iQVGh7skGSU7L
2wGQ7/3QFMX7GHgiLA/xhMMiTe0gwZsPXvZYt2jC9qecnFRQKZw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:36:11 2026 by rpki-client