
$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft
File: A230D664FEDFC0266349811ED3999BE5220F1DEA.mft (raw, json)
Hash identifier: GAKYzYhFXp8UGCfEM73l4fQ79DOJrGVnT8c0l1kAGRo=
Subject key identifier: 41:AD:E5:E9:DC:FA:EE:10:AB:01:14:51:A1:E4:0D:8C:74:EA:89:85
Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA
Certificate issuer: /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA
Certificate serial: 185374772AA61A2597D57B311E94A09B97661618
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft
Manifest number: 04C1
Signing time: Wed 15 Apr 2026 23:10:00 +0000
Manifest this update: Wed 15 Apr 2026 23:05:00 +0000
Manifest next update: Sun 19 Apr 2026 01:51:00 +0000
Files and hashes: 1: A230D664FEDFC0266349811ED3999BE5220F1DEA.crl (hash: RtL6Aym1uDmLKtR7C+YhJKa6xYlaE8+cvbAtjsJACC0=)
2: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: rUfipM6ac+ffGR3+qAba7wAEyR1CjmGAoVaQPfsb4C4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl
rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 01:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:53:74:77:2a:a6:1a:25:97:d5:7b:31:1e:94:a0:9b:97:66:16:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA
Validity
Not Before: Apr 15 23:05:00 2026 GMT
Not After : Apr 19 01:51:00 2026 GMT
Subject: CN=41ADE5E9DCFAEE10AB011451A1E40D8C74EA8985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:71:27:66:ab:b8:d2:e1:70:5c:e6:99:ca:
8f:80:66:83:16:7b:94:e4:8a:3e:f8:34:67:0a:24:
ff:27:fd:eb:02:6d:64:74:69:f3:a2:ad:55:75:1d:
e0:0a:dd:bc:af:28:22:1b:2b:d1:b1:d8:1d:42:e9:
b5:fa:3d:68:d6:a8:f5:b4:b6:96:64:5d:10:d6:54:
d8:02:5f:53:98:c9:aa:85:89:12:a9:6b:6f:06:5b:
fb:92:ee:55:1b:d1:47:b3:9b:b1:60:ae:5d:c8:3f:
b9:28:fd:5f:e2:3f:3d:4c:cd:90:91:6d:0c:d5:9b:
f4:71:42:f2:ff:b3:9a:0b:5c:09:61:b1:22:99:a4:
e3:a7:38:89:32:50:12:27:76:8e:b0:ec:a3:67:02:
6b:17:ed:4d:aa:d3:fd:0f:b4:11:0e:e3:7a:68:6b:
97:e0:01:e6:59:52:c5:e4:b8:71:cd:b5:9c:71:5c:
0c:e1:b4:bd:f0:3c:a0:41:c8:8a:21:f2:9c:82:42:
ae:a8:e7:b2:65:58:5c:34:05:0d:47:f4:a3:12:64:
13:28:e0:2a:78:4d:9f:c2:a7:5a:57:b6:e5:4c:42:
7a:4c:07:93:50:39:d7:d7:21:ef:b5:06:89:b3:ec:
f5:c2:32:ee:11:38:f7:50:2b:d1:d6:fd:a1:0e:a4:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AD:E5:E9:DC:FA:EE:10:AB:01:14:51:A1:E4:0D:8C:74:EA:89:85
X509v3 Authority Key Identifier:
keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b4:68:30:b1:80:eb:da:3b:5a:a4:e6:72:cb:b3:41:80:4c:
6e:f3:0d:ac:7a:27:56:d1:f5:ef:59:a3:9f:ad:0c:bd:1a:e1:
aa:52:38:40:dc:97:fa:55:69:04:89:df:e4:30:c5:42:9b:17:
25:e1:0a:33:0f:f0:d1:8d:1d:57:2f:d1:3f:8d:06:80:d7:10:
72:91:af:29:7d:95:8f:63:81:82:3d:c1:c3:d5:25:1b:dd:2a:
80:55:82:67:68:74:8c:84:95:19:e1:ce:6f:e6:74:b1:99:86:
4a:b7:36:26:d4:eb:e2:0f:ca:75:6c:54:92:42:78:da:43:56:
ca:2b:db:a4:c9:39:d8:0d:6e:07:27:d4:12:8c:3e:9c:5b:05:
59:5e:70:98:da:3f:c8:26:2b:d2:f5:2d:a3:54:81:3a:ab:a3:
e4:3c:a6:0a:c7:16:7f:68:f0:15:0c:02:7e:b1:19:28:a1:47:
8e:01:7e:24:61:86:61:9a:86:c4:bc:c4:b5:43:ac:c3:49:51:
4d:44:ab:58:db:5f:09:bd:0f:18:15:de:ea:35:45:22:1d:d3:
17:50:8f:ad:c9:f5:62:07:e1:32:bb:86:58:cb:69:a7:47:13:
2d:ba:27:21:95:01:a0:23:bb:5b:06:54:23:6a:9a:3f:84:a8:
f1:df:f3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:48 2026 by rpki-client