
$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft
File: 08A94FD7F0E8A287AD318D7A26254192431E175F.mft (raw, json)
Hash identifier: ieAusjQI0jRbGG5MDE7ItXAXAKbfQeWNUeVL/cYXa2Y=
Subject key identifier: 26:4E:55:A3:27:12:20:C7:F2:FD:E5:A6:C3:71:E9:B8:BB:87:44:7D
Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Certificate serial: 2187CA8B59ADC043608BFEF709350B69E3DF3A3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft
Manifest number: 022E
Signing time: Fri 17 Apr 2026 23:50:44 +0000
Manifest this update: Fri 17 Apr 2026 23:45:44 +0000
Manifest next update: Tue 21 Apr 2026 11:13:44 +0000
Files and hashes: 1: 08A94FD7F0E8A287AD318D7A26254192431E175F.crl (hash: Mozkw8VoEHwW8U+KAoqCi3Lg4jeU2bbr17W8M9wiDAU=)
2: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: VVwVAHNIOyaNlg3HmkibvzkBQxyuJMfLw9qgXP2WedI=)
3: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: VHLDU/rCLMP5jEq0vdx3vRHq8gBH9YMtoAFWWFLLuno=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl
rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 11:13:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:87:ca:8b:59:ad:c0:43:60:8b:fe:f7:09:35:0b:69:e3:df:3a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F
Validity
Not Before: Apr 17 23:45:44 2026 GMT
Not After : Apr 21 11:13:44 2026 GMT
Subject: CN=264E55A3271220C7F2FDE5A6C371E9B8BB87447D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:52:d9:9c:35:b6:1e:0a:eb:b8:8b:cf:bd:
08:40:de:ce:ae:ad:b7:9a:20:9a:c7:06:b6:1d:1d:
e2:54:f8:52:3e:be:ed:b0:9b:67:8b:16:80:35:10:
3a:49:23:67:81:e0:07:a7:94:04:d3:97:9a:cc:d4:
1b:f3:de:cb:55:bd:88:ad:fd:19:ae:5e:a7:bd:bd:
41:6e:3e:b5:cb:bb:5d:d1:91:e7:70:d4:7f:b4:3c:
52:f4:8e:b8:56:bb:23:3b:91:6c:c1:d6:d8:82:8e:
68:ef:fb:8d:52:23:09:a0:2a:19:c1:73:13:7e:7e:
90:d8:cd:90:59:cd:44:95:73:9f:79:50:97:17:75:
3b:e1:0e:34:16:8f:f8:87:8d:f4:8d:91:5a:dc:71:
d7:d2:0d:b6:60:8f:34:27:6e:78:bf:00:ce:f4:b2:
75:a3:8f:a6:dc:4e:5d:e6:37:c2:be:4e:76:8b:a3:
25:8e:52:25:c4:93:d9:c9:50:e6:d8:56:73:24:e7:
97:b8:fb:21:6c:da:1e:09:0a:78:46:81:4e:e6:b9:
8b:6d:b8:18:cd:4a:f9:03:45:0a:e7:8c:35:5b:0d:
50:6d:5e:87:18:26:c0:b3:3b:ab:c5:85:c2:7f:c9:
be:d7:21:84:30:48:70:91:dc:af:ac:d6:03:dd:ab:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4E:55:A3:27:12:20:C7:F2:FD:E5:A6:C3:71:E9:B8:BB:87:44:7D
X509v3 Authority Key Identifier:
keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:25:97:1d:9e:53:40:02:a0:a0:73:3e:2c:00:11:dd:fd:3c:
8f:46:a6:8b:80:1a:2f:58:5d:4d:f3:11:a1:bd:e8:0a:aa:d0:
30:dd:c5:30:a0:ac:d1:be:3d:9e:37:d8:ea:47:40:ec:d1:ec:
a4:23:ec:45:dc:fd:da:17:bf:60:c4:00:23:ee:62:45:42:12:
92:21:c4:b5:97:2a:1b:a8:1b:d3:19:67:22:20:fc:60:87:83:
0b:70:6f:0a:e8:67:d4:34:73:60:02:c2:7a:31:da:c5:33:e2:
72:05:20:f3:66:31:12:fd:11:d8:18:49:cb:43:18:cd:80:08:
e8:59:5c:c6:7c:67:93:70:28:3e:a4:76:6b:65:d9:ed:a9:5b:
c2:a4:88:50:60:cb:1b:8a:79:e6:ac:f2:79:0e:e6:ea:16:0f:
89:1d:40:ad:2d:97:41:d6:66:7e:92:d0:50:eb:0b:86:92:ed:
92:5c:5e:ad:32:03:66:87:ec:f4:e9:c9:f7:01:04:45:b7:1c:
39:6c:60:2d:40:fd:03:7b:41:73:3b:00:f2:3a:05:08:7c:f9:
ec:30:2b:1d:26:9a:7d:e7:23:2d:1f:2c:49:0f:25:26:e0:76:
a6:75:83:87:a9:11:65:63:7e:63:af:14:07:c9:06:c4:fb:2d:
00:94:37:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:33:43 2026 by rpki-client