
$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft
File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft (raw, json)
Hash identifier: uFTzUfXrfhQqqNFydh6I+lmm+joLFbSzVE7zE85VZ/Y=
Subject key identifier: 81:96:6B:50:CA:54:40:59:83:EE:3D:E1:45:57:01:9F:0F:51:EA:9E
Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3
Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
Certificate serial: 072E86EC67F7FD41A0C064C1466E2726FF88C01D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft
Manifest number: 01C5
Signing time: Thu 16 Apr 2026 17:02:43 +0000
Manifest this update: Thu 16 Apr 2026 16:57:43 +0000
Manifest next update: Mon 20 Apr 2026 03:50:43 +0000
Files and hashes: 1: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: xJL107kexxT2+8OzNGjRTsSdMpYwaRIrunj6huUjUeQ=)
2: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: bfjSzcy/JvaZYnZkSo/Oqmg+cr4NUoQU759G/evdQ4M=)
3: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl (hash: pa044ixZ3SGj0fbDGKOT4sGupED0ifsmOra0nGGyVQA=)
4: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: bQCYbMhbGxXH8PD6ECLPgkiyUquzUdq8MVmjyDGeByc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl
rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 03:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:2e:86:ec:67:f7:fd:41:a0:c0:64:c1:46:6e:27:26:ff:88:c0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
Validity
Not Before: Apr 16 16:57:43 2026 GMT
Not After : Apr 20 03:50:43 2026 GMT
Subject: CN=81966B50CA54405983EE3DE14557019F0F51EA9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:83:c9:c7:f4:80:ed:8c:a1:e7:67:c7:82:13:
df:ac:b4:9b:ea:12:71:74:08:e0:1a:c3:29:eb:0d:
56:fa:cc:a5:70:25:1c:b4:9e:68:98:fb:e7:b5:f5:
81:f9:b2:c1:63:3d:80:48:7d:06:61:21:2b:e8:d9:
5b:eb:2a:52:bf:cf:93:70:47:8c:7f:2a:61:05:7f:
b2:b2:21:af:94:35:6d:b9:3a:df:04:44:e7:b9:a0:
b2:e0:e4:83:a6:85:65:b6:8f:07:2b:2b:d2:d8:ab:
3b:cb:75:95:69:24:9a:18:75:0b:07:98:d0:0b:0f:
f3:51:ba:ee:28:11:77:28:70:65:56:13:1e:76:94:
95:7f:42:e6:1e:12:a4:2d:2c:ea:64:76:87:a6:1d:
c9:46:6c:7b:6a:94:05:5c:fa:32:2f:f8:9f:3a:77:
45:d4:33:a1:04:22:36:bb:d6:7c:00:bf:f5:06:3c:
50:a1:d0:fe:13:02:50:cc:bb:de:3a:76:ea:03:af:
84:c9:e7:e4:54:7c:13:8c:02:cf:b9:75:ff:11:c3:
b6:c1:0e:12:df:f1:6d:7c:8b:22:f2:0e:90:10:b6:
7a:d2:85:be:99:7d:0d:1a:a9:43:a8:19:b3:15:a6:
2f:be:23:4d:fd:ed:60:01:ee:41:d5:1a:8d:4e:94:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:96:6B:50:CA:54:40:59:83:EE:3D:E1:45:57:01:9F:0F:51:EA:9E
X509v3 Authority Key Identifier:
keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cd:64:22:be:5a:e9:62:e2:ae:25:72:17:9c:5d:ca:41:34:
eb:79:a2:fb:d4:fc:d0:de:02:b8:e5:4d:3a:f0:45:a1:0d:54:
4b:8b:56:65:af:09:9a:dc:dc:a4:62:30:48:08:b9:40:3a:7d:
89:9a:ac:4b:0a:3b:59:b8:8e:08:81:13:d2:ab:9d:82:b8:a5:
1b:fe:d6:98:65:de:12:ac:39:8c:eb:61:2f:9a:44:c2:b1:1e:
c6:53:d4:dc:85:5c:f5:42:01:d6:f6:a0:d2:a6:13:88:12:3e:
e1:df:a7:88:00:20:9e:81:f2:03:a3:48:41:c8:e5:7f:f3:67:
1d:aa:e8:4b:a8:5e:8e:3e:5d:81:62:ac:bc:75:92:6c:28:e4:
fd:ef:e0:67:b0:ed:41:e0:a0:84:8c:6d:82:76:7c:94:49:0b:
53:1f:c0:7b:6b:fb:14:f2:02:52:75:95:91:69:ef:e5:bf:56:
89:63:78:69:2a:b0:23:85:cc:4a:ad:b9:bb:39:96:8f:fb:a1:
9a:a9:b0:ef:38:52:c4:e9:77:9d:ca:ab:93:57:a0:9e:05:f8:
aa:fc:b7:34:ff:1a:74:31:1d:ac:e6:72:25:48:76:a7:ef:49:
e5:93:c0:83:e2:d7:50:da:42:fc:7f:e6:fd:dd:30:32:ce:e3:
0d:3e:25:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:47 2026 by rpki-client