
$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft
File: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft (raw, json)
Hash identifier: z0gcj5O5KlT8DkYUty+tToI1FRSNyIjWEiaL9SCYqj8=
Subject key identifier: 4C:F4:FB:B5:A8:EC:CB:23:B1:1F:5C:7F:FE:EC:70:22:89:B2:C7:D3
Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF
Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF
Certificate serial: 37F8BEF786612753D78150BED444FDFF9F59BACE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft
Manifest number: 0364
Signing time: Fri 17 Apr 2026 00:22:20 +0000
Manifest this update: Fri 17 Apr 2026 00:17:20 +0000
Manifest next update: Mon 20 Apr 2026 03:26:20 +0000
Files and hashes: 1: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl (hash: 35qESkINL6w1no/cbBYyNHj3mwlDz8vlm/FVdtC0m6g=)
2: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: n+xUq9a7n5f6ndT7big4scouCH78ut4B4QszfPAlm80=)
3: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: Zp5MkPoy+mcmuZyHWWPJeYcS5LhdUDlPA4O7bCCb+jQ=)
4: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: d+MQp3eqG/C/hSPziIw4OmNz4U3nA5FN+ZaHxiNIjvo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl
rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 03:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f8:be:f7:86:61:27:53:d7:81:50:be:d4:44:fd:ff:9f:59:ba:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF
Validity
Not Before: Apr 17 00:17:20 2026 GMT
Not After : Apr 20 03:26:20 2026 GMT
Subject: CN=4CF4FBB5A8ECCB23B11F5C7FFEEC702289B2C7D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:ef:aa:50:99:cb:b7:df:be:aa:0a:a8:52:
ae:7d:02:9e:bd:66:2c:67:69:46:51:97:28:87:53:
2b:39:3a:2c:60:d6:50:11:61:47:8a:5a:3f:8d:69:
81:63:09:70:34:5c:93:91:02:18:1f:bb:05:ef:a9:
b3:8c:b8:f6:76:4b:72:09:71:93:8d:50:ef:44:83:
13:8b:9a:c2:d2:92:95:7a:c7:22:7a:b7:45:bf:4a:
fb:08:53:55:22:a9:98:ef:04:ca:8a:f4:99:bc:17:
a9:8f:ad:01:ab:43:cd:39:3f:d5:02:24:a2:ae:5a:
d0:16:08:21:64:91:bf:46:dc:cc:b7:32:ea:83:f4:
da:39:85:35:ac:43:2b:76:c3:c5:7e:fe:a3:b9:bf:
4b:67:a3:ff:d8:bb:71:a9:f9:28:f3:ca:74:d4:6b:
3f:52:1f:ef:75:cf:d0:48:5e:90:f7:02:7a:fe:a6:
7c:77:8d:b1:e7:99:e9:8e:38:de:de:7e:30:9b:d9:
ec:0a:ac:62:c7:29:0c:f4:60:6c:bc:9b:1c:78:d3:
21:65:41:25:51:85:00:8e:54:da:ee:f9:4b:36:fc:
b4:b7:3a:a4:5f:90:2a:38:34:9b:53:ca:6e:da:71:
ca:b5:e0:fe:2b:3b:f7:5f:c6:07:af:2c:d6:62:2a:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F4:FB:B5:A8:EC:CB:23:B1:1F:5C:7F:FE:EC:70:22:89:B2:C7:D3
X509v3 Authority Key Identifier:
keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:23:1b:5e:02:65:69:a4:fd:cd:af:8f:1c:f4:a9:e4:93:08:
57:09:17:7d:4d:2c:96:ae:57:f9:9d:8c:97:22:83:68:d6:f9:
65:0e:0c:b6:b6:9d:87:ef:51:ae:62:33:17:ca:3f:98:27:d6:
f7:83:56:43:18:ba:06:0a:5e:23:b5:cc:8a:8c:ec:d4:85:ab:
01:15:1d:69:f8:54:d3:a0:c4:92:f1:23:00:29:a1:46:52:e4:
46:0d:af:b0:3f:aa:aa:c6:30:ad:d4:20:d5:70:ff:ba:53:d0:
47:20:1a:c3:c5:c9:fc:7b:4b:b4:f5:ec:f4:67:7e:26:f0:72:
3c:17:3d:f9:7d:32:71:bc:ba:b2:b4:44:b4:f2:aa:cb:d5:74:
3a:a1:e0:45:17:19:e6:9b:4c:60:be:d6:3c:90:6e:c9:bb:58:
e6:aa:43:bd:45:be:5e:51:57:b6:e2:ce:5c:a8:21:87:74:0e:
65:c5:f3:4c:2f:f5:e6:e4:9e:bd:0b:af:a0:55:b6:38:02:6d:
77:f8:22:8c:3f:dc:ac:93:58:79:c7:9b:08:46:8e:2a:a4:a8:
e9:7f:de:34:74:2e:6d:ef:5f:4c:98:c7:76:f5:21:4d:bf:55:
f5:0e:96:8b:bc:55:ba:40:e8:6e:fd:91:ef:b5:54:85:ff:65:
20:05:76:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:05:53 2026 by rpki-client