
$ rpki-client -vvf repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft
File: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft (raw, json)
Hash identifier: hVO+AfG/U/xNSVab28zIJSxR3JBfsK2/i8fyMmwHuu4=
Subject key identifier: 41:A9:DD:0F:0E:35:FF:53:03:3D:8C:0B:81:82:E4:6B:77:B5:C3:F8
Authority key identifier: 11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C
Certificate issuer: /CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C
Certificate serial: 56DF82614065FB5CA367A7524C155622CE849D0D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft
Manifest number: 024F
Signing time: Fri 17 Apr 2026 22:42:43 +0000
Manifest this update: Fri 17 Apr 2026 22:37:43 +0000
Manifest next update: Tue 21 Apr 2026 04:38:43 +0000
Files and hashes: 1: 3130332e3136322e3130362e302f32332d3234203d3e20313431363533.roa (hash: Mq4MVaBaSG6/faiiw+ltHUL1lE9B1vG/CMZhMtucH4A=)
2: 11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl (hash: JcDeBjlrG/UONvCaI9+e5pb5g1rKcE+Is9+bQARgQvQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl
rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 04:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:df:82:61:40:65:fb:5c:a3:67:a7:52:4c:15:56:22:ce:84:9d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C
Validity
Not Before: Apr 17 22:37:43 2026 GMT
Not After : Apr 21 04:38:43 2026 GMT
Subject: CN=41A9DD0F0E35FF53033D8C0B8182E46B77B5C3F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:7a:be:f2:33:51:51:79:9f:41:7f:7e:86:
1d:f3:ca:b4:d9:22:87:c3:04:27:52:7a:68:30:79:
49:6e:87:f3:e0:33:4b:fe:31:da:96:2f:48:92:59:
1c:9c:47:f1:b9:ff:a3:fa:db:d6:f6:f6:43:93:b2:
ba:cb:a2:2b:b9:27:33:47:1d:37:7b:cc:53:f1:93:
6c:54:40:39:a5:0f:80:aa:f6:0a:b6:57:1d:ae:2a:
af:85:f0:2b:c2:28:07:93:24:27:91:1d:09:17:21:
a0:3c:6d:91:f0:d7:9c:dd:e0:ee:74:4d:a3:1d:fb:
90:83:1f:7b:f6:37:2f:00:71:f6:1a:46:ea:98:b6:
9b:2a:8f:71:c3:04:c6:9b:af:25:4b:0d:2c:54:de:
ca:7c:10:d1:b0:2d:31:8a:f9:5a:b0:ca:ca:f5:26:
51:a3:15:c3:74:a6:c5:18:3d:ad:74:b7:0b:07:3d:
9a:72:3b:20:dc:90:be:09:42:36:55:a4:a8:66:46:
77:a8:30:42:df:d5:59:fd:04:d5:05:e9:7d:d2:15:
20:a4:9e:7d:ab:f2:08:57:0e:aa:d9:44:b5:e5:7b:
6f:4a:9b:26:7c:b0:7f:68:75:cc:5b:ef:36:f6:5b:
a0:c6:4e:93:29:8e:4b:60:41:94:e5:67:02:6d:34:
f7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A9:DD:0F:0E:35:FF:53:03:3D:8C:0B:81:82:E4:6B:77:B5:C3:F8
X509v3 Authority Key Identifier:
keyid:11:AC:9C:AC:CE:9A:AF:D6:6E:41:83:E6:E0:E5:99:3A:C7:A3:51:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69bbe5c0-79ed-46fa-8989-88d8acc87cf8/0/11AC9CACCE9AAFD66E4183E6E0E5993AC7A3515C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c3:01:1e:4a:85:a8:57:17:7b:f6:81:72:0a:e7:c2:37:6b:
b9:5f:dd:c3:18:89:c4:89:9f:29:8c:3e:8a:db:cf:8f:ec:c4:
c3:16:47:55:5c:73:2b:2e:f6:65:f1:8a:9e:ac:75:60:34:46:
97:94:4f:26:47:e2:be:ce:06:0e:e2:ec:b7:bd:69:32:63:34:
32:9e:67:63:a3:df:5e:13:15:9f:30:e2:d4:14:36:35:98:2c:
ce:2f:10:b5:ef:56:e0:38:d2:07:4b:23:79:4c:03:be:c4:fd:
21:f6:e7:8a:a4:01:25:a0:ec:90:19:91:1e:00:67:5a:c7:3c:
d5:94:19:35:8f:bd:f4:03:3f:54:d5:3d:b1:b5:16:a8:eb:88:
80:89:ab:82:dd:d1:b4:32:13:ac:9b:3b:fa:18:96:c1:8d:f8:
33:eb:9c:82:23:4c:89:48:4b:3c:78:1f:c5:10:ff:10:30:29:
7f:8c:e7:20:49:3d:f9:69:60:4c:11:f1:d4:30:85:82:c7:ed:
bf:0e:b3:ca:e1:3a:2f:75:08:9f:03:56:39:25:b5:f4:7f:c3:
ce:b6:0a:74:cc:1f:f3:dd:dc:ca:3d:e6:44:84:b9:04:3b:96:
8a:1e:46:99:73:4d:49:89:6c:e9:de:db:9f:17:d9:bc:3d:86:
51:27:29:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:07:19 2026 by rpki-client