
$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json)
Hash identifier: yVBsQENh83w5Nrwweb6i0LStoFCE3XtNgAHtB198Hc0=
Subject key identifier: FD:03:F5:A7:9D:A2:EC:EF:9D:41:3B:6A:EB:5B:6E:55:08:50:12:5F
Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93
Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393
Certificate serial: 62EC94463B02DFD4364B98C625E0FDBD00076A96
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
Manifest number: 011D
Signing time: Fri 17 Apr 2026 14:41:39 +0000
Manifest this update: Fri 17 Apr 2026 14:36:39 +0000
Manifest next update: Mon 20 Apr 2026 20:26:39 +0000
Files and hashes: 1: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=)
2: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aIfX6W1wJsuWGyj92Zq4X0k5Z/7Dz5tO4tJOY1Wnlo8=)
3: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=)
4: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: 0V0z+LtHyEetsdKzNz3fDG9TWng43zw65Ia1bT84+ig=)
5: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ItdPic80wypsThSkca8xGdGFm8YCN4V6loLuyuZH6qY=)
6: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=)
7: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: HmvfboV7IJd6tDvPW0c/RLYA8RvaouLMI2zb6IMPz/M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl
rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 20:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ec:94:46:3b:02:df:d4:36:4b:98:c6:25:e0:fd:bd:00:07:6a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295131167768CC78482F796BB58CF5A01A014393
Validity
Not Before: Apr 17 14:36:39 2026 GMT
Not After : Apr 20 20:26:39 2026 GMT
Subject: CN=FD03F5A79DA2ECEF9D413B6AEB5B6E550850125F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:ab:9b:c3:ce:43:78:5d:ac:33:df:58:29:
6f:eb:f1:e9:00:14:1f:54:ff:96:b7:3d:e8:3b:ca:
ab:69:08:52:a6:9f:b7:4a:0a:0d:5d:09:b7:38:b6:
a1:a5:30:cc:9a:8e:d1:6b:77:38:91:b0:8b:a7:55:
aa:e4:d9:eb:cd:dd:83:17:01:af:c4:09:07:05:1e:
60:9f:4d:17:7b:fa:11:db:9e:95:3b:ba:62:34:ae:
fc:b5:3d:c8:a8:2a:db:a2:91:63:27:fe:cc:ee:7a:
c0:11:be:b5:7a:9c:e2:85:d5:46:a4:fb:5d:9b:1d:
de:d9:a0:59:b8:8a:78:ed:aa:46:20:73:f5:30:05:
2a:da:cb:15:1f:66:af:26:b6:c5:9e:7f:61:c1:d4:
c1:bf:32:14:02:29:62:0d:7c:12:58:d2:2e:20:fb:
70:99:16:20:d3:5f:b1:ee:dd:fc:a3:e7:ae:52:9e:
9a:14:af:2a:3a:63:1e:71:94:b2:4d:a0:07:4c:23:
f0:31:83:35:99:4e:0e:18:11:1e:1e:1c:a4:ec:4a:
31:27:ea:31:64:2e:45:62:27:c1:17:79:9b:42:f3:
4c:91:ef:00:33:e9:e8:d5:cb:c9:ee:55:1f:23:7b:
a1:fd:94:d9:44:d9:f2:a5:9f:8b:f9:5d:25:c7:3a:
4a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:03:F5:A7:9D:A2:EC:EF:9D:41:3B:6A:EB:5B:6E:55:08:50:12:5F
X509v3 Authority Key Identifier:
keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:74:9f:91:ae:e4:5b:f2:8a:d2:13:3d:80:38:90:f3:74:fd:
a0:3c:a2:3d:2e:4b:ff:63:03:6c:ad:55:2c:34:dd:58:24:cf:
35:e5:77:ab:d5:7b:fa:c1:fa:42:b1:8c:c4:e6:6e:0a:c1:8f:
58:33:01:9b:43:16:c2:02:b2:aa:f0:0d:0f:5d:74:a2:05:cb:
8f:a0:dd:a5:95:81:21:2e:26:c7:5e:94:9c:ca:98:0b:8e:87:
73:55:8a:17:6c:d3:54:01:c8:5d:72:c6:c9:12:bc:b0:86:04:
35:dd:90:d6:52:d8:8a:f4:ba:d9:c9:66:14:39:af:ab:ee:da:
e4:96:35:23:d8:27:7f:ae:0a:46:10:2a:5c:50:95:14:29:94:
9a:f0:3e:6b:42:8a:75:d5:be:2e:69:05:f2:53:df:e7:81:04:
b3:8b:43:eb:c7:4a:00:60:25:50:db:bd:2b:68:af:0f:61:85:
f0:d3:6c:90:69:06:fa:77:59:eb:2e:39:84:4b:38:bc:09:2b:
4f:06:c6:68:3a:5a:8d:cf:44:cf:38:13:4d:79:30:34:7f:54:
17:05:55:75:f2:39:0f:23:73:a9:c9:be:21:d2:aa:d2:fd:42:
bf:86:39:86:b4:30:0f:f1:de:6f:31:af:06:a3:c9:0b:1b:2d:
a7:c1:81:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:31:42 2026 by rpki-client