
$ rpki-client -vvf repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
File: 3703AC4154F05B1E642F31DEF71A238407E82D59.mft (raw, json)
Hash identifier: 7wg5UuOMxe/mkE4jrgrEdu8F1Nz0cGwaOP5B2e53y5o=
Subject key identifier: C1:D6:F8:04:CF:D8:57:67:A0:45:A3:D8:CC:F0:66:70:7D:83:A9:7F
Authority key identifier: 37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59
Certificate issuer: /CN=3703AC4154F05B1E642F31DEF71A238407E82D59
Certificate serial: 06EEEA5FC934AB9C775E921EB1E0369F6F0A52A7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
Manifest number: 050E
Signing time: Wed 15 Apr 2026 17:50:59 +0000
Manifest this update: Wed 15 Apr 2026 17:45:59 +0000
Manifest next update: Sun 19 Apr 2026 01:47:59 +0000
Files and hashes: 1: 3130332e3136302e34312e302f32342d3234203d3e20313431353936.roa (hash: hTOnvJY78aaZJU0V/ewFlrDahpGLWlt1kXeTr26Q6jE=)
2: 3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (hash: /26G7paj90BYpA/7obbRkQ0e5IpXJm+V8bRm2IMmu/M=)
3: 3130332e3136302e34302e302f32332d3233203d3e20313431353936.roa (hash: RNQYxKN0Nubn/ygqO8rH37j/P4lI+9FQ1kXn5iYtC0w=)
4: 3703AC4154F05B1E642F31DEF71A238407E82D59.crl (hash: iUaSCvZTjMZarZN3QGxKO15JKhTbWU8yQDJHVFWJXG0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl
rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 01:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ee:ea:5f:c9:34:ab:9c:77:5e:92:1e:b1:e0:36:9f:6f:0a:52:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3703AC4154F05B1E642F31DEF71A238407E82D59
Validity
Not Before: Apr 15 17:45:59 2026 GMT
Not After : Apr 19 01:47:59 2026 GMT
Subject: CN=C1D6F804CFD85767A045A3D8CCF066707D83A97F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:39:e3:c2:9f:76:91:05:20:0d:af:4e:87:
6f:30:5d:d9:f9:55:ff:27:5e:76:44:23:0d:d5:44:
a5:c9:0d:f5:67:b6:de:55:e9:ed:f1:63:9a:b2:e1:
99:09:da:89:04:b0:b4:fb:9f:49:de:14:97:3f:35:
c2:f4:94:5f:78:5e:61:a8:c5:cb:98:89:db:e7:36:
c0:32:7a:59:1b:24:1c:94:7e:57:89:d1:5a:39:8b:
36:ef:40:56:04:8c:9f:bf:46:77:e1:e2:18:32:09:
3b:63:d2:7e:dd:7d:33:d4:9c:ff:be:40:14:fe:59:
da:b9:17:2e:3d:3a:9d:45:71:cf:4d:f2:df:f7:fa:
59:b1:01:43:18:67:44:4c:ae:84:b9:53:45:d0:0b:
b0:f8:1a:f6:f8:1e:9c:dd:5b:04:b6:52:b0:ce:9d:
d8:8f:3d:87:04:dd:63:cd:c6:ad:0f:5d:06:3c:a0:
9b:bd:d7:1c:58:0d:09:4d:dc:70:ce:b4:38:21:10:
d8:db:14:d6:6e:13:cd:ff:c3:96:a0:c8:3e:46:22:
f5:bf:ed:09:8b:58:84:74:72:5b:8c:b7:c4:a5:9e:
e9:65:ce:94:ac:1f:6f:9a:ac:c8:cb:28:34:6a:9e:
4b:7d:4d:64:15:1b:b7:ad:d5:68:1c:d6:c1:38:95:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D6:F8:04:CF:D8:57:67:A0:45:A3:D8:CC:F0:66:70:7D:83:A9:7F
X509v3 Authority Key Identifier:
keyid:37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:12:5a:68:f6:26:9b:4d:ad:51:8b:4f:1c:24:4e:68:15:ba:
94:91:3b:d2:45:4c:83:4d:9c:fb:0c:c0:b2:a2:32:b2:9c:9f:
dd:fe:10:ae:8a:5d:ee:74:f8:f3:8d:01:29:f5:54:ae:2e:6b:
a6:c4:5b:fc:d0:82:91:cb:04:b4:9a:00:2f:35:2e:0e:dc:df:
af:7b:ff:bf:b4:d2:89:96:05:1c:e9:15:01:c5:6e:a4:65:bf:
5c:5c:2e:c3:3e:15:32:49:de:d4:38:00:75:a5:82:01:10:01:
ff:a7:9b:2d:ed:f4:3b:be:b9:ee:fe:43:d7:61:f2:35:2e:47:
af:2b:6f:2d:24:03:cc:e2:cc:41:02:fe:53:6c:66:03:b5:b4:
3c:b6:ec:05:68:bf:6d:f8:a3:e4:9e:e7:d6:33:64:f4:a6:8c:
86:1c:dd:47:9f:5c:3d:fe:55:c6:54:86:e0:a9:a5:64:67:ba:
2c:93:67:d9:75:5f:b0:c7:ac:91:5d:87:e7:12:1e:5b:55:ff:
9e:3b:07:e0:ce:6d:79:a3:32:a7:4e:e5:09:9f:5f:4f:6a:10:
21:f2:11:e7:62:68:d8:0e:63:74:64:35:d9:cd:ab:f6:3d:0f:
83:b6:86:fa:5f:67:1d:ba:34:84:00:41:b2:ab:73:d6:85:5c:
f2:ba:b7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:24 2026 by rpki-client