
$ rpki-client -vvf repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft
File: 145856688D58EEB673E59CC02D21114CF78E87E5.mft (raw, json)
Hash identifier: RjLV8ovpU42S/CH+tjJiVseZe3l0+1MuIWDYhTgqcKc=
Subject key identifier: C8:FB:87:AF:02:67:E3:12:D7:DC:F4:FE:B1:F8:E6:4A:A7:73:ED:E4
Authority key identifier: 14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5
Certificate issuer: /CN=145856688D58EEB673E59CC02D21114CF78E87E5
Certificate serial: 156DBEB19F112F6F493EA20C760BE75D4AA512D7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft
Manifest number: 0107
Signing time: Fri 17 Apr 2026 08:51:00 +0000
Manifest this update: Fri 17 Apr 2026 08:46:00 +0000
Manifest next update: Mon 20 Apr 2026 09:54:00 +0000
Files and hashes: 1: 145856688D58EEB673E59CC02D21114CF78E87E5.crl (hash: fiar6A5wG6JNv7xJbiAXCMGVNFG+2PG94Rolw39SHvo=)
2: 3135372e36362e35382e302f32332d3233203d3e203633383633.roa (hash: 9tXtFpTSK8/Gv6WVGpyrNnATNqrkJEwmK6WzmGqcUmQ=)
3: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (hash: NiBjkneS23NjWIZK7/S3rCptTDYB7bSoabsYG4VVavg=)
4: 3135372e36362e35392e302f32342d3234203d3e203633383633.roa (hash: 9RQvrG19d/kbbr9j04wj/AolcfFkLEsHEjyLp9uYWCo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl
rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 09:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:6d:be:b1:9f:11:2f:6f:49:3e:a2:0c:76:0b:e7:5d:4a:a5:12:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145856688D58EEB673E59CC02D21114CF78E87E5
Validity
Not Before: Apr 17 08:46:00 2026 GMT
Not After : Apr 20 09:54:00 2026 GMT
Subject: CN=C8FB87AF0267E312D7DCF4FEB1F8E64AA773EDE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:6d:2c:df:e1:19:a2:4b:40:b9:cc:04:04:
63:64:50:95:b7:e2:07:c1:41:aa:94:75:22:8e:5f:
8b:5d:a2:4a:6e:fc:99:47:6a:d5:0e:33:1b:b6:28:
cb:b8:23:de:c0:3f:92:ed:23:26:66:c9:41:8b:c2:
2e:fd:05:4f:07:04:90:03:9e:f8:12:34:44:3f:3d:
7f:e5:d2:1c:c1:35:6b:3f:f0:4d:c5:d5:7a:13:3b:
60:fd:da:75:cc:bb:4c:1b:fa:a4:b7:e9:4f:d8:bb:
55:c2:48:30:73:b6:c6:48:85:68:41:a3:55:ee:4d:
6a:48:21:d7:e2:7d:6a:82:3a:9a:2c:84:16:98:55:
90:0e:94:e5:32:22:9d:0e:2e:34:59:fc:7d:1d:af:
8c:9f:d6:d2:de:7b:5d:83:21:75:b4:01:d6:36:a9:
40:9d:c9:dd:08:74:cf:28:45:c2:fc:e4:f8:46:58:
c4:70:93:e0:79:95:52:37:bf:cc:33:22:41:0e:2f:
1d:d6:77:3b:ec:16:3d:d4:1e:4c:16:7c:48:8b:89:
f3:f2:57:e0:ae:a2:22:bc:33:48:30:19:7b:14:44:
eb:ef:d3:6a:df:cb:00:c5:82:a5:56:7e:db:45:e4:
3d:21:e8:cf:bb:de:f5:b3:77:26:c6:93:d5:78:10:
c4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FB:87:AF:02:67:E3:12:D7:DC:F4:FE:B1:F8:E6:4A:A7:73:ED:E4
X509v3 Authority Key Identifier:
keyid:14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:26:f5:d5:28:11:6a:a0:97:d7:b0:b3:9a:31:56:23:7b:9c:
80:29:ac:c0:d3:af:0e:da:39:1d:d2:68:bc:19:72:aa:58:4d:
52:4b:da:71:98:b6:72:cf:94:9f:cb:d0:6b:e1:c8:ec:06:70:
2b:49:bc:08:47:86:76:86:b4:07:49:7d:5a:44:03:e6:ea:6e:
bc:7a:44:08:01:5b:ff:27:79:08:f5:ba:a3:d0:49:f6:f7:f3:
c4:4a:94:8f:f2:f2:70:0f:72:b9:37:79:00:89:df:58:27:ed:
29:f7:98:a5:49:e6:6b:11:49:5a:a3:b9:30:30:8d:cb:f6:a4:
ff:0c:30:26:cd:a7:be:64:0d:36:59:da:54:af:ea:82:42:67:
f9:06:e4:a3:cd:8b:22:32:58:d4:1e:94:9f:3b:43:21:3f:fc:
59:01:dc:eb:41:31:93:e7:c0:73:e3:be:f1:6b:33:a0:d6:a4:
12:42:b0:1e:fb:9c:e3:2b:c9:97:10:82:bd:bb:19:05:b1:73:
a6:67:39:c0:1d:d0:bf:78:69:12:f8:f8:e2:67:e5:54:27:35:
b0:eb:60:b4:88:60:17:7e:44:2e:01:8c:e9:97:f9:b8:9d:9a:
29:71:4e:46:c1:2c:8b:c5:c3:12:38:94:98:67:81:bd:3b:b4:
2c:e3:4c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:26:30 2026 by rpki-client