
$ rpki-client -vvf repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft
File: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft (raw, json)
Hash identifier: VJFUmgEVamh/OMGy2Z/Ug2aUzNYtY8L+tLbMOZILMAc=
Subject key identifier: EF:E9:81:BF:46:24:F4:F5:82:FB:43:2A:E3:F7:96:1E:BB:25:EF:88
Authority key identifier: 19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE
Certificate issuer: /CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE
Certificate serial: 695B30BF0BBE4622CD4C154F671524070A61399F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft
Manifest number: 0204
Signing time: Fri 17 Apr 2026 08:52:12 +0000
Manifest this update: Fri 17 Apr 2026 08:47:12 +0000
Manifest next update: Mon 20 Apr 2026 17:01:12 +0000
Files and hashes: 1: 3130332e36382e3231342e302f32332d3234203d3e20313530353137.roa (hash: 5eHMmSOXqcaio0G7mCeIUfZJCaBBOr7GrZWeXm+wBUE=)
2: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl (hash: p+cCxPICKNb8SOHKoh4Cy9Y9s/mcURHfjS1kOcGHd70=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl
rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:5b:30:bf:0b:be:46:22:cd:4c:15:4f:67:15:24:07:0a:61:39:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE
Validity
Not Before: Apr 17 08:47:12 2026 GMT
Not After : Apr 20 17:01:12 2026 GMT
Subject: CN=EFE981BF4624F4F582FB432AE3F7961EBB25EF88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:30:2e:1f:fa:8e:1f:67:65:7a:b3:64:87:
c0:54:09:86:60:f8:da:a2:ae:d0:3b:99:69:bb:71:
08:9a:eb:d8:da:d8:27:ca:90:ac:53:fd:27:04:df:
af:5b:ba:b3:07:9c:56:0c:2c:a9:e3:ef:e4:64:5d:
c2:b0:64:0e:2e:5b:b2:e0:97:e3:74:a8:77:e5:24:
6e:c5:55:fe:dc:8b:1d:10:0a:44:32:79:f5:11:51:
f4:3c:3c:b8:e8:89:d9:32:4d:18:31:ba:83:5c:13:
99:56:ad:12:c7:19:4c:50:40:ee:6c:a4:a1:33:53:
a7:86:01:d0:d4:db:9a:bb:bf:72:b7:e8:76:ac:94:
f3:45:4a:14:ef:27:31:a2:60:0c:5e:80:e2:4b:73:
22:70:6b:65:06:8f:48:1e:28:50:48:ce:f1:55:13:
2b:85:70:50:a8:f4:57:47:26:37:2c:2f:4a:1f:15:
dc:8f:d1:32:d6:92:57:f7:81:99:6a:2c:b3:26:72:
09:e2:18:89:ae:0b:de:4c:4d:7d:63:55:41:fa:e9:
cf:1e:c5:86:f0:32:c9:e5:bc:75:d6:b9:60:9e:1b:
d7:30:5d:12:cb:65:33:2b:4e:76:3d:6f:7d:64:c3:
77:c2:96:a5:54:14:89:8c:44:83:cc:ea:39:ea:55:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E9:81:BF:46:24:F4:F5:82:FB:43:2A:E3:F7:96:1E:BB:25:EF:88
X509v3 Authority Key Identifier:
keyid:19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:08:be:7b:b8:a4:3b:df:cd:a8:0a:22:22:71:89:06:65:a0:
6d:e5:fc:df:4e:16:df:f4:ef:dc:88:2b:56:f1:58:f2:3f:53:
95:66:68:cb:cf:ff:da:33:64:11:a7:ff:eb:6d:3f:15:44:25:
cc:f6:f4:81:e9:bd:db:aa:53:5d:c5:a6:43:da:60:5d:aa:f2:
5c:d1:d4:c7:e5:ef:c2:49:4a:84:30:13:cf:85:4e:fe:b4:26:
97:43:ac:dc:b6:9f:2d:04:3a:59:14:03:df:88:22:ed:7e:da:
84:bf:93:42:08:1d:47:32:fa:87:8d:39:2f:62:e7:56:fb:37:
ec:8d:73:68:fa:51:d7:9e:40:c5:c1:7c:b5:45:51:07:00:d5:
57:e6:96:fe:73:4f:5f:73:68:da:3b:dc:f5:bd:ca:25:a2:6a:
1e:b5:37:2e:ed:d7:1f:4b:3e:a7:63:40:5f:f3:58:9d:63:52:
17:45:08:27:4d:21:25:29:73:df:8a:75:3d:10:fb:fd:73:87:
a2:cd:71:5e:ab:d1:c6:26:b3:12:d6:92:d4:5d:fc:99:1d:24:
5d:69:30:f6:20:35:10:2a:1c:7c:ff:9e:0b:6f:50:b7:f6:db:
10:8b:cc:1e:cd:67:b7:0a:d2:46:39:17:7f:28:a4:86:e1:c9:
a2:8c:7d:2c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaVswvwu+RiLNTBVPZxUkBwphOZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0
Q0Y3OTFCRTAeFw0yNjA0MTcwODQ3MTJaFw0yNjA0MjAxNzAxMTJaMDMxMTAvBgNV
BAMTKEVGRTk4MUJGNDYyNEY0RjU4MkZCNDMyQUUzRjc5NjFFQkIyNUVGODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC25jAuH/qOH2dlerNkh8BUCYZg
+NqirtA7mWm7cQia69ja2CfKkKxT/ScE369burMHnFYMLKnj7+RkXcKwZA4uW7Lg
l+N0qHflJG7FVf7cix0QCkQyefURUfQ8PLjoidkyTRgxuoNcE5lWrRLHGUxQQO5s
pKEzU6eGAdDU25q7v3K36HaslPNFShTvJzGiYAxegOJLcyJwa2UGj0geKFBIzvFV
EyuFcFCo9FdHJjcsL0ofFdyP0TLWklf3gZlqLLMmcgniGImuC95MTX1jVUH66c8e
xYbwMsnlvHXWuWCeG9cwXRLLZTMrTnY9b31kw3fClqVUFImMRIPM6jnqVd+jAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7+mBv0Yk9PWC+0Mq4/eWHrsl74gwHwYDVR0j
BBgwFoAUGSgLj1qk+97GecNR6wQNKEz3kb4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZWJmNjNlZC1kNDUwLTQ3N2UtYjMxYi1hZjkyYjE3MjZkMmUvMC8xOTI4MEI4RjVB
QTRGQkRFQzY3OUMzNTFFQjA0MEQyODRDRjc5MUJFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0Q0Y3
OTFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGViZjYzZWQtZDQ1MC00NzdlLWIz
MWItYWY5MmIxNzI2ZDJlLzAvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBE
Mjg0Q0Y3OTFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADcIvnu4pDvfzagKIiJxiQZloG3l/N9OFt/0
79yIK1bxWPI/U5VmaMvP/9ozZBGn/+ttPxVEJcz29IHpvduqU13FpkPaYF2q8lzR
1Mfl78JJSoQwE8+FTv60JpdDrNy2ny0EOlkUA9+IIu1+2oS/k0IIHUcy+oeNOS9i
51b7N+yNc2j6UdeeQMXBfLVFUQcA1Vfmlv5zT19zaNo73PW9yiWiah61Ny7t1x9L
PqdjQF/zWJ1jUhdFCCdNISUpc9+KdT0Q+/1zh6LNcV6r0cYmsxLWktRd/JkdJF1p
MPYgNRAqHHz/ngtvULf22xCLzB7NZ7cK0kY5F38opIbhyaKMfSw=
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:32:48 2026 by rpki-client