
$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
File: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft (raw, json)
Hash identifier: L1vGQF3sZKJl/Iew3/jGjYwaOE/HjqOAIUDKGuiySsA=
Subject key identifier: 51:B0:6C:FF:07:1F:A5:45:33:3E:3D:7A:A2:49:89:F9:73:5B:DE:96
Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68
Certificate issuer: /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768
Certificate serial: 6CC9E232279F11C4D5407869C84E5093C0410DCD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
Manifest number: 0568
Signing time: Thu 16 Apr 2026 05:11:51 +0000
Manifest this update: Thu 16 Apr 2026 05:06:51 +0000
Manifest next update: Sun 19 Apr 2026 16:23:51 +0000
Files and hashes: 1: 9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl (hash: zIhy6tn4W3lt4vloJljhVTFDXxs9iI9VdAXuRFh+4rI=)
2: 3130332e3134372e3135342e302f32342d3234203d3e20313338313135.roa (hash: dkJQYTGEN+d871bmbCtyZrcgdRwxS2PuzfLsM/c0oM0=)
3: 3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (hash: 5HPmnH87KI1FMg8JnGalALCpcbOZusq5GP+rz9eFFOc=)
4: 323030313a6466373a353330303a3a2f34382d3438203d3e20313338313135.roa (hash: Bf7BsiVAOIoOpjZrq1myZIFa+NHL4UH0RSw6g7HOTug=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl
rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 16:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c9:e2:32:27:9f:11:c4:d5:40:78:69:c8:4e:50:93:c0:41:0d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768
Validity
Not Before: Apr 16 05:06:51 2026 GMT
Not After : Apr 19 16:23:51 2026 GMT
Subject: CN=51B06CFF071FA545333E3D7AA24989F9735BDE96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:ef:e4:dd:5b:e2:14:33:c4:88:e9:1e:9c:
0a:19:3f:75:44:6c:d4:b3:f6:38:c9:21:ec:08:88:
67:bb:02:25:17:26:38:c8:77:b9:88:0d:13:9c:af:
fc:e9:d4:7f:3b:17:0e:ca:8e:b2:81:23:dd:f7:f1:
b7:92:3e:1d:67:0e:74:9c:71:54:05:b8:24:bb:2b:
e1:cc:6c:11:48:b7:df:6a:32:bd:74:d0:20:fb:78:
8d:6f:be:b9:64:28:a5:74:db:94:b1:be:89:79:7b:
fe:2b:a8:62:55:80:11:f7:a9:5f:73:2c:2f:b0:b8:
a9:40:e8:10:19:9e:95:cd:aa:f4:a8:2b:eb:c3:80:
cf:5c:74:de:8f:53:8a:a3:9a:bf:18:d2:5c:27:d4:
69:8d:b8:92:da:4d:4f:f9:16:7c:90:01:66:40:dc:
b4:b7:34:21:30:72:17:7d:3a:bf:9b:7f:94:2f:34:
87:2c:fa:a5:04:21:3f:7a:c5:13:02:df:b0:1b:d1:
45:de:4d:30:65:ad:fc:2c:11:01:48:c8:f2:55:c8:
6e:1d:3d:79:6a:83:27:18:4d:39:93:57:55:b2:76:
72:15:70:fa:9a:72:98:43:bb:7b:12:67:ce:95:ac:
5c:fc:6e:9b:07:4d:f4:e4:90:27:5f:46:79:8e:5d:
5d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B0:6C:FF:07:1F:A5:45:33:3E:3D:7A:A2:49:89:F9:73:5B:DE:96
X509v3 Authority Key Identifier:
keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5e:cd:88:ab:21:c5:f9:1c:07:79:26:2a:58:ad:14:a6:0d:
7a:a7:ca:ac:f7:a3:27:32:18:af:60:60:7e:5b:99:0e:58:36:
8f:e4:f2:5b:08:2e:74:d9:f9:be:06:b3:6a:5a:15:bb:07:47:
41:81:90:8b:25:20:b4:12:79:a0:73:91:37:ee:8a:9f:8f:89:
d5:09:12:4a:a2:1a:fa:af:d1:f4:55:4a:00:16:32:64:e9:13:
8b:d9:54:86:5c:b1:05:28:9a:71:58:53:0b:80:7a:ad:8b:a2:
88:66:02:fb:c1:65:31:08:28:1e:0c:48:47:e4:d0:45:88:85:
90:1c:f1:fb:bb:57:0e:7b:fe:d1:8a:af:1a:5b:3e:fb:98:7a:
9a:12:16:b9:45:30:11:eb:2c:88:54:d9:80:53:67:a4:74:85:
c2:16:e3:2d:9d:c2:b7:51:5e:0e:98:27:c0:e1:22:88:f5:3f:
a3:a5:96:32:11:46:eb:52:84:21:90:24:05:cd:ba:3e:52:18:
e0:04:08:57:17:80:a8:a5:9b:92:97:80:5f:24:3f:9a:79:24:
84:69:55:d6:21:eb:77:c3:0f:a0:47:bd:44:78:71:10:d7:42:
d3:a2:1e:2c:f3:8e:80:2e:3e:a3:4f:e3:2a:1f:d2:4e:28:24:
68:5e:9b:0f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbMniMiefEcTVQHhpyE5Qk8BBDc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0
MTcyODc2ODAeFw0yNjA0MTYwNTA2NTFaFw0yNjA0MTkxNjIzNTFaMDMxMTAvBgNV
BAMTKDUxQjA2Q0ZGMDcxRkE1NDUzMzNFM0Q3QUEyNDk4OUY5NzM1QkRFOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChB+/k3VviFDPEiOkenAoZP3VE
bNSz9jjJIewIiGe7AiUXJjjId7mIDROcr/zp1H87Fw7KjrKBI9338beSPh1nDnSc
cVQFuCS7K+HMbBFIt99qMr100CD7eI1vvrlkKKV025Sxvol5e/4rqGJVgBH3qV9z
LC+wuKlA6BAZnpXNqvSoK+vDgM9cdN6PU4qjmr8Y0lwn1GmNuJLaTU/5FnyQAWZA
3LS3NCEwchd9Or+bf5QvNIcs+qUEIT96xRMC37Ab0UXeTTBlrfwsEQFIyPJVyG4d
PXlqgycYTTmTV1WydnIVcPqacphDu3sSZ86VrFz8bpsHTfTkkCdfRnmOXV33AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUUbBs/wcfpUUzPj16okmJ+XNb3pYwHwYDVR0j
BBgwFoAUne7rDLlJLa3eR7MWKazackFyh2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NGNmNjMyZC1kNjFhLTQ4MjYtYjU3Mi05ZjE5NDhhZTU4MGMvMC85REVFRUIwQ0I5
NDkyREFEREU0N0IzMTYyOUFDREE3MjQxNzI4NzY4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RBNzI0MTcy
ODc2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjZjYzMmQtZDYxYS00ODI2LWI1
NzItOWYxOTQ4YWU1ODBjLzAvOURFRUVCMENCOTQ5MkRBRERFNDdCMzE2MjlBQ0RB
NzI0MTcyODc2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADFezYirIcX5HAd5JipYrRSmDXqnyqz3oycy
GK9gYH5bmQ5YNo/k8lsILnTZ+b4Gs2paFbsHR0GBkIslILQSeaBzkTfuip+PidUJ
EkqiGvqv0fRVSgAWMmTpE4vZVIZcsQUomnFYUwuAeq2LoohmAvvBZTEIKB4MSEfk
0EWIhZAc8fu7Vw57/tGKrxpbPvuYepoSFrlFMBHrLIhU2YBTZ6R0hcIW4y2dwrdR
Xg6YJ8DhIoj1P6OlljIRRutShCGQJAXNuj5SGOAECFcXgKilm5KXgF8kP5p5JIRp
VdYh63fDD6BHvUR4cRDXQtOiHizzjoAuPqNP4yof0k4oJGhemw8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:00:32 2026 by rpki-client