
$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
File: 818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft (raw, json)
Hash identifier: 3++X0iNLFMdAAnV6oD0eR0zYU9nDKKSlxbkZ1ZdFFKQ=
Subject key identifier: 0A:83:08:6D:BD:7C:6D:9C:C3:C2:8E:5D:DD:54:65:F4:24:71:4E:B5
Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9
Certificate issuer: /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
Certificate serial: 27EA2472CE067048922058B038AD1A2C584544E7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
Manifest number: 0565
Signing time: Fri 17 Apr 2026 21:42:42 +0000
Manifest this update: Fri 17 Apr 2026 21:37:42 +0000
Manifest next update: Tue 21 Apr 2026 08:22:42 +0000
Files and hashes: 1: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: hpPXUQ5gypmdo+ZfR0ZPUxHpoc6PClgxO5mrZ0mqIsY=)
2: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: SLH6hiLVAcjKJgYGlgSHzMZrDl0w7mu4FSwj+uEfhtQ=)
3: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: klLZJtnV+xWW7YQzH2mIJ1a0TeqcgHLxJAezwqgVxkg=)
4: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: 3f3jJh3+oWJeudvuDrAqcUf8ITcTw5/zz4360Ggudd4=)
5: 818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl (hash: H/uLUboqAdLAihawi5Pw4nusi2jQr67hlslFpCOApGs=)
6: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: oFvKKDxpW/0C/Q3mkSaRj7w7VX6MBfKr//38ErGs2CE=)
7: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: qNqEjSuCjuvM2nb2P9YufyugF7e/EHHhJHg78hVDerc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl
rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 08:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ea:24:72:ce:06:70:48:92:20:58:b0:38:ad:1a:2c:58:45:44:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
Validity
Not Before: Apr 17 21:37:42 2026 GMT
Not After : Apr 21 08:22:42 2026 GMT
Subject: CN=0A83086DBD7C6D9CC3C28E5DDD5465F424714EB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:95:49:ba:c7:ab:20:57:20:79:5f:6c:d9:ea:
b6:4b:7e:49:61:75:14:1f:48:ab:d2:0d:19:5a:fd:
f6:b5:4c:6b:f4:db:03:7a:d8:da:4e:f5:c3:dd:c3:
89:bb:83:a5:ad:14:5e:b0:a8:65:91:3a:48:0e:1a:
f9:46:9a:3d:ad:19:82:41:22:df:3e:a7:84:20:26:
36:88:c6:0d:b6:43:f1:7d:f1:23:1b:09:fe:04:8c:
3b:a8:60:65:1d:20:31:22:76:e3:ea:87:f3:6c:53:
cd:06:d0:99:93:1a:d3:76:f7:fd:28:29:0e:67:e0:
c3:47:03:a2:5d:02:3a:a1:cb:63:58:4c:06:35:bd:
90:8b:40:4d:07:ba:d8:94:b9:95:7d:bd:01:54:a5:
14:00:e2:a0:e4:f7:59:da:cd:24:a4:23:d6:fb:f5:
78:6e:61:54:ff:68:af:2d:80:db:03:ea:41:1a:02:
d0:59:09:bb:91:6d:f2:a7:e2:6d:55:3b:9e:54:55:
1a:af:10:87:f2:5b:b2:79:8e:2d:83:dc:bd:1b:09:
bb:8c:cc:f5:43:49:09:6c:ea:99:74:70:0b:80:18:
e2:f1:53:ad:3e:f9:04:62:fd:e9:6e:48:d0:e6:37:
6e:71:6a:ea:0e:4d:84:19:e3:06:62:14:bd:37:41:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:83:08:6D:BD:7C:6D:9C:C3:C2:8E:5D:DD:54:65:F4:24:71:4E:B5
X509v3 Authority Key Identifier:
keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:af:3c:c2:8b:5e:8e:7b:b3:81:2b:ec:d6:52:a1:68:51:6b:
03:89:79:fc:1a:63:67:fe:93:26:20:2e:e5:17:11:df:58:ee:
43:35:07:11:14:8d:fb:2a:77:fc:be:1d:8e:b5:1c:8e:1c:ee:
9c:e1:61:91:eb:0c:a7:73:4d:16:17:c6:f6:30:3b:f6:3a:9c:
a9:79:7f:58:b6:1f:db:a5:7f:e0:f3:8d:29:84:6d:9b:44:1d:
08:4f:30:c9:24:f2:58:69:77:c2:ce:1d:4d:5f:54:f1:df:b1:
ef:80:fd:72:4f:2f:4e:04:8f:8d:bb:9b:4d:c1:3a:22:08:01:
12:e2:95:c0:34:9c:28:17:2a:24:23:1a:2c:52:e4:b6:ee:e3:
d7:e4:d5:45:d6:71:1d:0c:20:d9:9a:85:26:a8:d3:b0:4d:72:
bf:d0:f4:65:39:08:a0:1c:87:3e:b9:08:b2:14:ea:9a:cb:07:
68:f1:ca:4b:c5:d2:71:b5:48:5a:12:4c:fb:ed:47:3d:f9:de:
23:24:a2:f5:c8:03:0c:dd:3e:a6:9f:dd:03:93:4a:a4:8b:f3:
c1:b4:a5:77:a7:19:e2:f7:72:fd:a0:d5:a5:32:19:8e:18:6e:
90:d3:12:80:aa:0a:0e:e6:f9:54:c0:ea:41:fa:82:5f:e7:86:
24:4d:4c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:08 2026 by rpki-client