
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft
File: BAC180E3FF326678277BE269EEBEC1DE3827226F.mft (raw, json)
Hash identifier: Cp4ykuJMKmtvCPV1e0o2qreJngEX8h+ianCY+pe9LVY=
Subject key identifier: 67:E0:04:DD:EA:AC:76:93:74:7D:08:EF:11:57:CF:EF:E8:F7:DE:40
Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F
Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F
Certificate serial: 241179EC1761C45E515DE7079862B2D68531EA09
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft
Manifest number: 04E5
Signing time: Fri 17 Apr 2026 09:42:17 +0000
Manifest this update: Fri 17 Apr 2026 09:37:17 +0000
Manifest next update: Mon 20 Apr 2026 15:02:17 +0000
Files and hashes: 1: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: YNbhE8xdTKW/Q9U/93rD4JGqeL1yvNsJ+AG9m1iob8s=)
2: BAC180E3FF326678277BE269EEBEC1DE3827226F.crl (hash: THd50jYXii/sQly85/o4RDaWR7eg5PyEB0SKybbg4Vw=)
3: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: noONdtWPBfDg1v+b0voqR3p0t9tg/glTZSZzhJfbVqc=)
4: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: hUeOICfw2XBWAgqGUkttpxWF2O5J3sS4YAbQ6Mjer8A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl
rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 15:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:11:79:ec:17:61:c4:5e:51:5d:e7:07:98:62:b2:d6:85:31:ea:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F
Validity
Not Before: Apr 17 09:37:17 2026 GMT
Not After : Apr 20 15:02:17 2026 GMT
Subject: CN=67E004DDEAAC7693747D08EF1157CFEFE8F7DE40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:04:06:1c:b0:ed:82:fd:d2:4f:3f:5a:92:
43:c1:76:9f:65:af:2c:e1:7e:44:86:ab:18:d7:9a:
c1:6a:91:50:c3:2e:ac:f7:d8:db:98:1b:dd:8f:49:
5e:42:88:c9:e4:c2:4d:25:46:98:d8:a0:a6:1a:df:
8f:f7:cc:97:b9:d4:ff:08:25:05:aa:c6:95:b0:c3:
15:91:c6:45:18:a6:3d:b9:b4:84:7c:67:cd:80:76:
ce:b6:d6:ea:67:97:30:a0:88:02:b5:8b:e0:7c:2a:
c6:6e:be:04:10:4f:74:a4:72:79:4d:cf:60:ff:a1:
4f:b0:e9:e2:1f:92:2b:c2:94:d4:ca:88:61:10:11:
1c:83:33:04:39:87:d4:9a:22:67:68:da:a3:3e:f5:
50:25:5f:33:08:56:fb:26:b5:59:68:ec:eb:29:f3:
06:b7:92:37:a8:97:1e:84:18:68:83:65:27:44:df:
33:46:f2:68:13:91:3c:ea:98:b9:2f:4d:ca:5f:2c:
ca:41:0b:d7:83:38:7d:7a:62:49:93:08:24:2a:c3:
9c:08:82:05:87:43:3e:96:c0:b6:ac:e3:b0:28:b6:
b7:eb:1e:cb:ec:82:cc:72:29:ff:49:fe:c8:24:db:
5a:87:e0:1d:34:83:dc:6d:83:d2:e3:06:55:c7:67:
b3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E0:04:DD:EA:AC:76:93:74:7D:08:EF:11:57:CF:EF:E8:F7:DE:40
X509v3 Authority Key Identifier:
keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f0:ef:7d:9a:16:87:e1:d7:d6:f4:50:00:0b:7d:b9:8c:f1:
cf:13:b1:ab:9c:4d:3b:dd:95:a8:63:e8:63:02:9e:1f:14:71:
13:b7:8b:61:ff:82:b1:74:9d:2a:2f:04:0c:1f:e4:a7:7b:80:
1e:32:18:24:59:d6:2e:33:a1:89:97:ae:54:b2:b2:05:e0:59:
80:50:92:ed:a0:1c:88:05:c0:4c:f9:0d:66:c2:59:60:e0:fd:
9d:4d:9b:e8:e1:bb:30:2e:d4:bb:95:de:84:ba:bb:9e:9e:ae:
0b:00:28:ac:d4:29:43:6d:1a:b0:f3:b8:00:dc:01:3c:f5:bf:
86:9f:2f:b5:7d:28:3a:b6:8f:b2:22:7f:ec:fb:0d:bd:b0:b2:
31:4c:84:1c:c5:66:9e:26:ac:11:df:e3:d1:72:c8:81:f4:bb:
51:5c:1e:fe:ae:3b:33:a6:fa:7d:9a:d6:2f:a9:6c:e6:33:b3:
30:e9:f2:c9:b8:ca:16:e9:b6:57:3e:5c:8f:6f:68:4f:89:54:
cd:fb:00:70:6d:d8:84:13:ea:bb:0a:ad:52:83:13:a4:25:04:
8f:46:96:cb:d0:cb:71:31:d5:db:39:45:3b:fc:93:e0:94:ec:
f4:e1:7f:c0:b1:cf:67:f8:5c:93:64:e8:2b:67:df:bc:b9:3e:
b7:eb:93:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:29:51 2026 by rpki-client