
$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
File: C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json)
Hash identifier: QZxQUCj17HeUiM2+lB5fof9oRTBuN53/jNOQ1j1uxVw=
Subject key identifier: 67:80:B3:C7:C5:6B:DB:E4:5D:D8:A2:D6:30:A1:5C:2F:91:4C:8D:56
Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90
Certificate issuer: /CN=C710954C7B301C60B82BA6372CACEB81DA08F190
Certificate serial: 15AFD068BFB64F70328CB6DC17ACE8FAF3468668
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
Manifest number: 052E
Signing time: Wed 15 Apr 2026 17:10:04 +0000
Manifest this update: Wed 15 Apr 2026 17:05:04 +0000
Manifest next update: Sun 19 Apr 2026 02:41:04 +0000
Files and hashes: 1: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: KQUN/mjgI9NAwHO1H2+jS+2KNmkSKgxnmq0NRk0bNGg=)
2: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: KBmsSIIbB1eM8vkqSRzJquEEmnOSoD0NArIsmiTZmu4=)
3: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: DYGPu1R9knVMTB6Ioiy1/sQp83HBRZI1WQg4Zdy3cp0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl
rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 02:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:af:d0:68:bf:b6:4f:70:32:8c:b6:dc:17:ac:e8:fa:f3:46:86:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190
Validity
Not Before: Apr 15 17:05:04 2026 GMT
Not After : Apr 19 02:41:04 2026 GMT
Subject: CN=6780B3C7C56BDBE45DD8A2D630A15C2F914C8D56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:b4:d2:9a:71:b6:8d:ec:a4:22:05:43:87:
1c:c0:a3:cd:37:b5:2c:c2:06:6e:1e:f6:87:d8:d7:
4c:50:2b:d4:7e:e3:fb:49:15:e3:36:d2:8d:67:39:
b8:b4:61:b9:5f:d6:6b:ac:13:e1:8b:b7:5e:61:b0:
26:de:98:20:1a:92:01:20:c5:97:a9:8d:ac:b8:cf:
e0:19:b6:8c:3a:76:af:82:b8:1b:f8:ce:61:1b:1e:
57:df:96:1f:f9:50:b8:d7:bf:8d:26:59:f6:03:d3:
1d:7c:56:7e:48:cc:c3:16:19:e1:67:67:68:83:d4:
0d:0a:e3:a6:eb:9d:23:2d:4a:4a:69:52:67:1e:8b:
fa:38:1c:a9:ac:bc:e0:83:5b:83:f2:16:1f:8a:fa:
74:0a:14:98:63:14:8a:c6:d2:c3:5e:35:8c:e0:92:
81:6e:d8:86:c0:42:b3:c4:96:c3:17:e7:de:75:8c:
2a:cf:c4:10:64:3d:7f:52:9d:87:e8:0a:2e:c4:db:
ac:b4:3b:28:92:84:e7:50:18:89:d3:3e:db:64:71:
a8:72:38:7f:aa:ee:e5:85:09:9e:63:6b:14:12:8a:
e5:cf:3c:2f:53:f6:5d:5d:20:7b:85:a7:87:df:08:
39:dc:22:f5:ef:12:2b:98:c8:b4:33:4b:ea:5e:4d:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:80:B3:C7:C5:6B:DB:E4:5D:D8:A2:D6:30:A1:5C:2F:91:4C:8D:56
X509v3 Authority Key Identifier:
keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:58:f4:32:fb:bb:82:db:95:2f:32:25:35:e5:0b:a6:54:39:
9c:eb:08:cd:fb:df:6f:13:c5:23:e5:f8:eb:cc:7f:8e:04:d7:
ca:6f:39:df:6b:2d:a1:c8:22:b7:43:93:3f:59:27:43:ca:63:
c5:5f:52:a0:bc:19:1a:85:8f:67:62:8b:a1:6d:e3:35:21:2d:
ec:6d:4a:a0:74:fd:91:72:0a:0b:18:5a:68:2e:2c:0e:70:d3:
8c:b7:aa:41:f1:b7:30:c7:e8:a1:3e:dd:96:ea:5c:ed:e5:8d:
84:7a:66:ae:d6:7f:22:e1:7f:bd:17:d3:3b:5c:ec:ca:e1:0c:
fd:16:0d:27:58:dc:57:43:fa:70:8d:c0:32:ec:47:b1:95:32:
3d:99:39:e4:43:29:c8:1a:2d:3d:93:d6:59:f7:a0:ed:7e:b9:
df:b1:70:19:cb:f2:30:30:c8:fa:7b:b2:8a:ee:11:92:cb:b0:
bb:f9:d1:98:89:1c:cf:b5:a6:75:ac:e7:15:2f:4b:54:c3:48:
64:e3:40:b5:7d:10:ca:10:d2:35:6c:d4:01:b1:2e:dd:9f:90:
d9:27:a9:4b:12:a5:fb:90:af:f7:c1:ec:07:e9:10:22:75:42:
b3:e8:8f:d1:8b:26:18:ae:e9:c3:99:dd:ee:7b:79:4c:71:7f:
72:cd:13:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:00:19 2026 by rpki-client