
$ rpki-client -vvf repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft
File: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft (raw, json)
Hash identifier: oL3nPCrrVxxo+Lal6HA164DEQ6h4CqXyy7VpamFi9yI=
Subject key identifier: CF:96:40:66:DF:11:62:6F:80:F6:E6:40:20:30:E9:95:5C:BB:EA:E7
Authority key identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4
Certificate issuer: /CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4
Certificate serial: 40F0CF41DE045B3188A780FA8277760022010B4B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft
Manifest number: 014E
Signing time: Fri 17 Apr 2026 05:52:05 +0000
Manifest this update: Fri 17 Apr 2026 05:47:05 +0000
Manifest next update: Mon 20 Apr 2026 14:20:05 +0000
Files and hashes: 1: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl (hash: YSWQx7kP6BD/DzeQyK3581sO72JmnB1/morIFG4vMj0=)
2: 3135302e3234322e3137362e302f32332d3233203d3e20313532303639.roa (hash: 859yRYxg6dYMZDhycmHxCWbBfEwXNU7EIcEdV25XiMg=)
3: 3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa (hash: FzHs2jrisPTXDjeyqpBMhWr9H2CINutW4PdDxdrM/c4=)
4: 3135302e3234322e3137372e302f32342d3234203d3e20313532303639.roa (hash: iWWMBNz/ap73hzzhd0AgzEZTSYI9UVHD2G0NxQBjFlw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl
rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 14:20:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f0:cf:41:de:04:5b:31:88:a7:80:fa:82:77:76:00:22:01:0b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4
Validity
Not Before: Apr 17 05:47:05 2026 GMT
Not After : Apr 20 14:20:05 2026 GMT
Subject: CN=CF964066DF11626F80F6E6402030E9955CBBEAE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:90:d1:ca:74:9e:2d:1a:ea:b3:84:2e:c6:
29:a2:07:28:0a:03:cc:be:25:ec:06:a1:62:68:6a:
b5:d9:54:27:70:cd:fe:3a:be:30:4e:cb:c4:ae:35:
5c:f9:db:25:2f:33:fe:84:27:ff:20:9e:9a:9f:d7:
c9:50:35:84:e5:e3:97:2e:88:c2:f0:47:fa:0d:8f:
5f:67:e5:af:5f:95:4e:0d:67:c5:cd:36:e5:76:0a:
62:95:b7:9e:7e:0d:5c:87:e5:57:78:38:f2:52:a6:
b0:3b:7c:eb:96:60:b5:9c:62:dc:29:eb:96:10:6f:
48:a6:c1:8f:be:29:c0:96:75:85:94:14:0f:c3:03:
08:48:8d:af:01:79:c9:4f:ab:59:7b:0e:db:33:7e:
82:e9:3f:2d:cb:b2:41:c8:b7:c9:7c:69:a1:51:0c:
75:b0:aa:bd:7b:09:a3:2f:57:35:b8:b4:e1:72:94:
91:98:06:ad:29:eb:d5:01:16:50:60:04:0b:4c:93:
51:61:96:d6:b6:0f:fa:60:ff:65:0d:b3:b8:60:b0:
d5:bf:df:93:f2:64:95:be:fa:5c:52:65:60:81:2c:
1a:9d:c7:d3:61:01:f1:fa:40:49:27:cd:dd:b6:3f:
86:71:94:68:75:01:04:15:67:57:c0:69:31:43:55:
33:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:96:40:66:DF:11:62:6F:80:F6:E6:40:20:30:E9:95:5C:BB:EA:E7
X509v3 Authority Key Identifier:
keyid:10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:97:4e:63:9d:72:04:b3:5f:27:4b:61:a5:f8:8b:1e:e6:20:
53:be:10:62:0f:f1:16:a0:62:15:33:93:a2:7c:77:a0:66:a9:
9f:b1:11:b7:ee:b4:06:37:d6:8f:5e:9e:aa:5a:40:2d:c2:fc:
65:cc:12:b1:e8:e7:2b:2a:af:ce:10:f5:9f:20:b3:0c:92:3f:
ca:b4:92:85:5f:87:a0:17:7a:09:ef:ed:3d:5c:f8:91:b0:e6:
37:7c:3d:d6:31:ab:4d:fd:8a:fa:81:99:60:62:f4:22:40:81:
4c:6e:22:01:a9:4e:f5:34:2b:47:ba:3a:75:d5:3a:bb:24:31:
ad:96:50:f1:15:de:4a:32:e3:37:28:11:07:8b:cf:4f:c2:7b:
a2:96:f6:21:17:ce:a6:67:71:c6:97:5c:57:f1:de:69:aa:b0:
07:d5:5b:80:28:19:b3:a7:3b:4d:17:53:83:da:22:08:17:0e:
e0:20:b6:4a:84:cf:72:1a:f0:50:84:95:3b:48:64:9b:79:93:
04:fe:c9:a7:23:8d:60:95:cb:3b:13:24:a6:1b:ad:17:8e:71:
9d:31:86:78:3d:fc:90:03:d8:1d:6c:ce:01:f0:bc:57:b7:77:
9d:cd:46:ac:e3:bf:e5:8c:de:06:5e:b7:f1:c5:44:60:a1:35:
8d:16:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:31 2026 by rpki-client