
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft
File: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft (raw, json)
Hash identifier: EtRCRDire5ikv5u+Kkp4ctDFE5+NcYlybQKhwy2bK2o=
Subject key identifier: 62:18:D6:9B:A2:5D:1D:65:6F:C5:81:31:F9:43:49:0A:5C:27:6C:77
Authority key identifier: B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC
Certificate issuer: /CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC
Certificate serial: 196F15920CC2ECDD0444B10C7EF71903EE4CE452
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft
Manifest number: 04D3
Signing time: Thu 16 Apr 2026 05:50:44 +0000
Manifest this update: Thu 16 Apr 2026 05:45:44 +0000
Manifest next update: Sun 19 Apr 2026 07:22:44 +0000
Files and hashes: 1: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: /De9PraBKQ9VNMLW73eKsHyTdK5CxUO/Ms23Vqs0bog=)
2: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl (hash: Cia1HrDrYkWkhzEpcE/WCga/W2PpnW/D+WqXyWnBbYk=)
3: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: 9ga4Dz2S1yZEHVR/bNJu6K+f7jqkSZliYiYDlhJqlSc=)
4: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: LTZWN20UeEpbk3/6yOOjk81arYUEDuYxFg/WlS2mmEI=)
5: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: P41PFR8M2pkKOmCdUu6l5sHUIprRbj+Eb/jozno97jU=)
6: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: w/W7ZPLOwJZFB+XGZFv4rUXEnNF/+lRXZH9LftXeoZo=)
7: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: NkQ9eWcHVREh5sfesIOFWzh9yqFj5sw8tkhu4ZxcoSQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl
rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 07:22:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:6f:15:92:0c:c2:ec:dd:04:44:b1:0c:7e:f7:19:03:ee:4c:e4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC
Validity
Not Before: Apr 16 05:45:44 2026 GMT
Not After : Apr 19 07:22:44 2026 GMT
Subject: CN=6218D69BA25D1D656FC58131F943490A5C276C77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:17:4b:fe:0d:c5:44:94:ce:61:b4:5e:de:92:
09:e3:b6:f5:29:6d:9c:06:0e:d2:6b:d4:14:8f:37:
52:7d:c9:d8:9d:ca:17:70:96:44:97:0b:73:fb:6d:
00:65:81:11:bd:5c:8b:4d:b1:24:e6:39:e5:66:48:
49:6a:6b:8d:2f:cb:31:17:95:f4:c5:5c:7d:db:19:
78:f2:59:72:83:d0:bc:90:ae:5c:19:58:8d:47:c4:
7f:97:33:a7:fa:e8:a4:f3:45:c5:d0:29:7e:3c:60:
70:d1:25:b1:7e:a3:77:ab:cc:99:72:9a:49:0a:b1:
d7:3b:4d:bd:ba:33:db:73:12:00:b4:ff:9b:ab:62:
03:22:8c:72:b2:ff:a6:91:f3:a1:66:40:c8:fd:53:
1d:3d:4d:18:a0:ed:43:18:51:e7:7e:cd:bd:a5:cf:
fb:01:2f:98:d7:6b:d2:98:3a:63:42:7c:e0:83:64:
f1:5f:ec:91:8d:01:63:1a:18:72:44:97:4b:bd:c3:
04:b0:97:e1:63:4d:29:fa:3f:23:2e:f2:f0:88:5b:
f8:99:fb:8a:b9:3a:ec:0c:c7:03:97:ea:5a:2b:98:
56:7f:db:f9:12:bf:96:42:5e:48:cf:f9:ea:3b:c5:
57:b3:00:25:0b:38:d4:9e:1c:f1:9e:73:58:9d:c8:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:18:D6:9B:A2:5D:1D:65:6F:C5:81:31:F9:43:49:0A:5C:27:6C:77
X509v3 Authority Key Identifier:
keyid:B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:53:1c:e9:70:31:dc:d5:16:5a:68:44:ad:72:d5:1d:aa:e9:
b0:76:ae:9a:5e:28:40:95:c1:d3:5b:2d:9e:78:78:0f:1d:0f:
92:61:d6:d7:03:1e:97:d2:e4:6c:c5:89:79:2a:fd:23:74:f4:
3b:79:25:3d:a8:e2:38:c4:de:6b:be:30:47:ef:24:74:ea:b6:
ee:00:db:65:0c:57:f2:5d:7b:1c:bf:76:21:4e:50:b9:98:63:
22:cd:05:8e:1d:70:95:ec:8c:28:ad:7a:de:4b:a3:44:74:3b:
8b:f0:b8:b2:e6:44:9e:60:a4:07:4d:9e:75:0e:3e:01:2c:05:
71:e0:4b:4a:8b:8c:e2:a7:f1:c1:4f:6a:08:1b:4a:46:09:98:
ac:93:8f:c1:e3:da:58:0b:22:9f:9d:d7:72:9d:8f:13:bf:aa:
76:db:f2:1f:fc:54:37:8e:5b:b2:35:cf:44:d2:4e:8d:fc:15:
db:96:06:60:e5:d8:9e:d1:7a:54:ac:51:05:1e:c8:af:cb:fe:
3a:82:03:6a:00:8f:56:83:bc:3b:3e:64:e7:95:1f:46:68:b1:
2f:ae:78:0d:c3:0c:51:31:c8:45:ce:fe:b7:ab:53:d8:b0:b2:
d6:10:38:29:70:ad:86:d2:ee:a3:17:70:41:3a:2d:df:fc:6b:
5e:5d:07:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:37:09 2026 by rpki-client