
$ rpki-client -vvf repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft
File: E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft (raw, json)
Hash identifier: QMzlH/fV/lIBbelQm20hG1LQsyt+jaqTYFFBcMDN37M=
Subject key identifier: F4:88:8C:F8:84:86:D0:8E:56:71:82:3A:36:64:EB:61:73:4B:A3:EA
Authority key identifier: E3:06:D6:21:65:BE:B9:60:9E:6D:D2:54:66:BD:D9:07:1B:1F:23:CF
Certificate issuer: /CN=E306D62165BEB9609E6DD25466BDD9071B1F23CF
Certificate serial: 498906D9B8EF522B00EC5034ECB1F82B8B16CA67
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E306D62165BEB9609E6DD25466BDD9071B1F23CF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft
Manifest number: 0222
Signing time: Wed 15 Apr 2026 19:12:42 +0000
Manifest this update: Wed 15 Apr 2026 19:07:42 +0000
Manifest next update: Sun 19 Apr 2026 04:36:42 +0000
Files and hashes: 1: 3130332e3231312e38322e302f32342d3234203d3e20313334363630.roa (hash: Nh+HiVLmMcDNhbKCLKBivfmLyDAXlG86o04scwdSgPc=)
2: E306D62165BEB9609E6DD25466BDD9071B1F23CF.crl (hash: h9wIEi/qFmHMFNbWNDGsWadTYrn5XZU8Oc+CF4HBfiA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.crl
rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E306D62165BEB9609E6DD25466BDD9071B1F23CF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 04:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:89:06:d9:b8:ef:52:2b:00:ec:50:34:ec:b1:f8:2b:8b:16:ca:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E306D62165BEB9609E6DD25466BDD9071B1F23CF
Validity
Not Before: Apr 15 19:07:42 2026 GMT
Not After : Apr 19 04:36:42 2026 GMT
Subject: CN=F4888CF88486D08E5671823A3664EB61734BA3EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:86:2a:b5:68:d4:2d:64:b4:11:25:8f:0d:
f4:8d:d9:be:ab:02:84:cc:22:8f:a2:00:58:7b:dd:
ab:f3:c7:94:c3:a6:19:c1:d2:47:5b:be:cd:c6:82:
07:2d:f7:fa:d5:2e:42:14:bd:48:ff:c2:f5:6d:91:
bb:f9:18:06:aa:35:8c:48:d5:18:ae:01:91:77:5c:
88:a4:4f:28:3c:9e:ba:a3:02:66:c1:a3:be:22:90:
e1:b7:b0:88:27:e2:ac:82:59:73:89:e0:35:36:26:
8f:89:48:47:50:53:df:93:15:0a:d4:06:ca:00:d0:
e8:41:90:7e:29:3d:63:d4:f5:cb:26:62:14:67:ec:
27:87:96:e0:12:33:8f:b2:a7:e2:b5:70:27:7e:3a:
f6:87:00:0b:81:ed:8e:bb:fd:68:f3:1b:78:4d:eb:
79:2d:47:7b:9c:34:e7:86:44:21:ae:1b:64:51:b1:
4a:65:6c:83:5c:a2:aa:ac:36:94:07:56:25:f2:83:
b7:60:39:32:7e:d4:6b:43:1c:0c:53:fc:d0:e4:2b:
fb:2f:37:31:14:57:60:5d:29:d8:17:b3:80:02:b9:
98:b1:0c:79:1b:47:12:1c:12:99:43:e2:ec:b7:ce:
06:59:8a:ab:5a:6a:d8:d0:6e:a2:1d:80:e6:5c:0d:
e9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:88:8C:F8:84:86:D0:8E:56:71:82:3A:36:64:EB:61:73:4B:A3:EA
X509v3 Authority Key Identifier:
keyid:E3:06:D6:21:65:BE:B9:60:9E:6D:D2:54:66:BD:D9:07:1B:1F:23:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E306D62165BEB9609E6DD25466BDD9071B1F23CF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4d:e1:4a:99:3e:68:0d:ce:84:15:88:25:7a:b3:fb:3f:98:
e7:b4:b5:f7:16:2f:11:b7:3e:8b:e1:b9:7c:36:e2:55:02:0a:
62:49:c9:d7:c8:4f:4d:a4:ea:a2:99:52:e7:09:52:1a:54:8f:
8d:e0:de:32:b5:37:2e:3f:bd:1c:17:08:54:a9:e7:64:1f:ca:
95:71:b2:42:22:81:fe:fd:93:88:2f:c1:27:79:ba:dc:62:62:
64:5f:df:35:20:b6:3e:a9:4c:59:4e:1b:03:01:d6:88:2b:53:
bd:03:bf:fb:be:d8:92:09:35:4b:75:3b:61:b1:c2:51:5d:1f:
7b:a0:74:8a:7d:f6:66:b3:98:20:35:21:1a:b2:78:2d:33:f1:
8f:31:6c:b0:3d:0f:e7:b6:0e:54:4c:b4:68:c2:1b:d1:ea:5c:
a7:14:a9:90:a4:92:24:ba:a6:91:f5:a8:b2:25:e9:fd:46:94:
8b:12:e6:4c:26:a0:fb:8a:97:78:fe:ce:3a:ae:6f:05:5e:22:
6e:19:81:9f:57:7c:53:74:d4:88:62:96:09:ae:83:86:cf:f4:
89:32:2c:85:d9:78:c6:42:3e:3f:83:b0:73:27:d8:07:88:cf:
5f:f4:fd:37:c7:02:ca:1e:5a:da:61:89:e0:b6:36:e5:21:12:
5b:ba:81:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:32 2026 by rpki-client