
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
File: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft (raw, json)
Hash identifier: hvy/ScyvvdWWdG/6/uv8J2kskbMqiBuyds23Ums5D8s=
Subject key identifier: CE:5C:FB:79:11:A5:7F:E6:C4:22:AA:4D:6F:BA:F0:CA:C6:C9:DA:28
Authority key identifier: B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65
Certificate issuer: /CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865
Certificate serial: 519559CFA1B052E1035EFB967731A92847E5263C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
Manifest number: 0187
Signing time: Sat 18 Apr 2026 14:42:12 +0000
Manifest this update: Sat 18 Apr 2026 14:37:12 +0000
Manifest next update: Wed 22 Apr 2026 02:02:12 +0000
Files and hashes: 1: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl (hash: 2Tu6WJNBB6QGtip6YcyajG0Qa3OuasxdOfzFmB8R8f0=)
2: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: IK3NBrk/iQNskIBya+kx1CnPloRzYziR32FnB/WUNZ4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl
rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 20:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:95:59:cf:a1:b0:52:e1:03:5e:fb:96:77:31:a9:28:47:e5:26:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865
Validity
Not Before: Apr 18 14:37:12 2026 GMT
Not After : Apr 22 02:02:12 2026 GMT
Subject: CN=CE5CFB7911A57FE6C422AA4D6FBAF0CAC6C9DA28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:16:76:c8:0a:8a:f5:92:0a:98:98:6d:c3:4e:
ef:f7:14:55:4b:16:92:3a:ae:30:5e:9e:56:21:e3:
28:46:66:fc:92:f1:d1:5d:4f:c5:05:1a:38:9a:ac:
45:af:f3:ba:94:50:12:99:be:4e:7f:6c:7a:92:b4:
a6:b0:b3:a9:e3:7b:e2:22:60:1d:c6:fd:7e:1f:60:
97:ab:b2:db:2a:aa:fd:d8:94:a0:ed:70:1d:ee:f2:
2c:f0:6b:58:51:96:ad:f6:c4:47:e6:f6:3a:6c:af:
c3:a5:ae:d7:97:e2:97:5d:4c:df:63:b1:12:5b:71:
c2:d0:ae:27:db:4e:e4:e4:c7:7e:65:d2:a7:a7:ed:
37:55:2b:cb:a3:72:f8:8c:28:c8:9a:6f:3b:eb:74:
38:78:b4:df:60:5b:dc:a5:eb:ff:82:9e:c6:ba:49:
d2:73:22:c2:67:e9:87:02:7c:26:c7:6f:1e:0e:f8:
9d:9f:ac:ef:bd:16:f5:65:31:e5:8d:6d:45:9b:5c:
1e:e3:f4:ee:ce:8b:67:c4:5c:9a:a6:82:db:7f:5f:
30:2d:f3:7d:1e:61:4e:0e:ba:fc:aa:88:77:97:67:
74:9c:56:93:33:05:8c:c4:8a:e4:fa:f0:01:70:1b:
2e:14:b4:d0:cc:e6:ca:a9:08:3d:7b:99:7b:b7:55:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5C:FB:79:11:A5:7F:E6:C4:22:AA:4D:6F:BA:F0:CA:C6:C9:DA:28
X509v3 Authority Key Identifier:
keyid:B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cd:1e:0b:a0:bb:3c:04:3c:a2:22:77:d6:0c:1a:60:51:77:
73:07:f3:3e:9d:f7:2a:3f:ca:e1:6a:9d:1a:3e:f8:6d:dd:95:
e9:7f:b3:8a:8c:be:22:4b:ff:4e:69:bd:ee:13:58:05:d2:81:
5c:8a:83:fe:c3:90:93:52:57:9a:78:f0:4e:1c:b6:c7:6f:4a:
d3:66:3b:62:ff:1f:da:24:f9:bf:dd:e1:04:58:d7:b4:6c:5d:
a6:37:29:db:78:7a:ed:f1:0a:cb:a4:69:63:65:6d:51:84:8b:
c9:97:76:ed:a7:8c:19:4f:db:02:17:80:51:53:46:68:92:3b:
15:c3:8a:a1:62:d9:7a:d9:f9:ff:ea:f5:39:b3:95:91:3e:ee:
45:e6:60:d7:e1:9a:f1:29:b6:c7:ae:37:87:6d:85:21:f4:bb:
69:0c:ee:b4:dc:cb:1a:af:b1:2b:dc:c0:0f:38:0d:0c:9e:a1:
39:91:d9:4c:7d:97:24:38:c3:83:06:8b:2f:38:ec:4e:29:11:
bb:f4:4a:ba:19:b5:b6:2e:81:ee:47:83:81:74:cd:34:70:d5:
21:58:51:e4:6c:fd:2b:9f:9d:4c:d9:cd:6e:04:a0:a6:8e:70:
20:5a:ea:3b:1a:75:ab:b4:d2:96:89:2b:88:59:d2:05:7a:59:
3d:c4:8a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:39 2026 by rpki-client