
$ rpki-client -vvf repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft
File: 871B4235DFC56C482416E7BBA192562092FFE055.mft (raw, json)
Hash identifier: 7O+gy7X4piJUkteH1Dnbm4n9Ta5HWNWs/5nC7wlaIEc=
Subject key identifier: 13:81:3A:DB:20:58:A9:1D:A4:08:AB:C2:5C:0E:0D:52:7C:9F:F1:F9
Authority key identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55
Certificate issuer: /CN=871B4235DFC56C482416E7BBA192562092FFE055
Certificate serial: 4C4699FF4B533B0BCAEED70C2A3AD59E3B8B1696
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft
Manifest number: 0156
Signing time: Wed 15 Apr 2026 05:12:27 +0000
Manifest this update: Wed 15 Apr 2026 05:07:27 +0000
Manifest next update: Sat 18 Apr 2026 16:30:27 +0000
Files and hashes: 1: 871B4235DFC56C482416E7BBA192562092FFE055.crl (hash: aNyr+I+JdwW2eJEJ4a7Pv4diT8op1iVzQfGBrAUzs8M=)
2: 3135372e32302e39332e302f32342d3234203d3e20313532343037.roa (hash: 7xhwBLoxBcZfSoTZvdUTvLkraKKygpQjYGPK+6LQ1oA=)
3: 3135372e32302e39322e302f32342d3234203d3e20313532343037.roa (hash: QrSBRaxGaWU8ZoD0zYmeD1ZaWtynoFSmr/bVUUg5r5E=)
4: 3135372e32302e39322e302f32332d3233203d3e20313532343037.roa (hash: P7Y8t8QlzVHnPDCRyEAdHrWqFac2Md1CGzVdP33gimk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl
rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 16:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:46:99:ff:4b:53:3b:0b:ca:ee:d7:0c:2a:3a:d5:9e:3b:8b:16:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871B4235DFC56C482416E7BBA192562092FFE055
Validity
Not Before: Apr 15 05:07:27 2026 GMT
Not After : Apr 18 16:30:27 2026 GMT
Subject: CN=13813ADB2058A91DA408ABC25C0E0D527C9FF1F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:be:01:50:c6:0b:47:2d:e2:c3:ca:b6:8c:
21:d3:63:c0:f0:bc:cc:b3:93:e8:dd:2a:5a:c9:ee:
93:3e:98:00:84:d7:9e:84:9a:9c:63:2d:84:f6:ab:
1e:e5:16:67:fb:81:67:f5:cb:b6:4a:27:07:92:54:
dc:c6:06:cf:3f:cf:09:15:87:47:6e:07:d3:6e:59:
dd:84:89:06:1d:ce:ee:51:29:7d:13:0a:e5:80:0d:
e9:93:e0:7f:ee:e7:5d:55:81:d7:4c:5d:1b:8f:67:
63:06:31:52:22:8c:10:dd:ea:66:09:45:73:36:f2:
fa:de:ad:fe:cf:f4:bd:96:17:72:f5:07:5f:31:21:
d7:32:b4:61:b0:ae:bd:61:f7:f6:9c:a7:a6:09:85:
6e:94:eb:f9:b6:f2:c7:61:d4:8b:2f:06:5f:6f:64:
4f:ad:4c:7f:64:e0:7b:ea:b2:ae:0b:1b:97:49:c1:
7d:db:0d:29:40:c5:8b:0c:cf:7c:11:dc:10:3d:ef:
68:3d:73:d4:10:26:02:ca:c5:8e:af:80:36:a4:10:
7b:ac:c2:dc:d1:4b:00:22:2e:90:9d:e5:8a:2a:6f:
d5:65:ad:8e:6e:5f:64:ee:9a:f3:be:e5:43:5b:46:
8d:d5:b5:18:d2:77:f2:f9:64:45:fb:1f:d8:6b:f2:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:81:3A:DB:20:58:A9:1D:A4:08:AB:C2:5C:0E:0D:52:7C:9F:F1:F9
X509v3 Authority Key Identifier:
keyid:87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1f:35:c7:1a:ff:56:4e:23:d7:ee:c3:47:fd:11:6b:95:ee:
1a:9b:d5:80:9f:bd:1a:28:fc:2b:ad:1b:3a:f6:76:3d:48:0d:
ef:90:f3:bc:52:27:b4:ce:7d:57:0f:a4:f5:35:f2:36:d1:45:
00:45:e6:f3:3a:88:27:23:ca:da:37:33:b5:4e:b1:d0:86:f9:
e2:c7:9f:ef:07:17:bf:14:81:61:7f:e2:8e:9c:01:f6:6e:7b:
07:35:92:fe:f1:da:b9:94:10:32:70:8e:be:ad:55:df:43:25:
8a:61:fe:b2:ba:80:20:2d:68:90:67:d7:9f:60:97:c8:8b:14:
80:1a:72:15:47:39:a5:7a:40:e7:ad:f8:cc:ef:eb:5a:85:bf:
84:7f:d4:84:b7:8b:0b:33:30:ee:4d:0d:d5:3a:74:a3:25:ab:
da:87:be:e1:cb:3d:b8:32:8f:af:84:39:80:93:c7:6f:53:a2:
54:b5:08:00:3d:87:f4:47:3d:4a:2a:bd:31:23:9a:7c:27:04:
d9:47:46:ff:99:ca:b1:c5:17:93:3c:48:ec:d7:b7:59:74:43:
92:9c:31:de:c5:cb:72:eb:17:51:d4:1d:a2:f4:ce:f1:a0:07:
c7:83:ca:cc:00:3f:ce:f7:41:13:34:d3:58:96:03:8a:1e:ae:
0c:30:0c:ee
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTEaZ/0tTOwvK7tcMKjrVnjuLFpYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5
MkZGRTA1NTAeFw0yNjA0MTUwNTA3MjdaFw0yNjA0MTgxNjMwMjdaMDMxMTAvBgNV
BAMTKDEzODEzQURCMjA1OEE5MURBNDA4QUJDMjVDMEUwRDUyN0M5RkYxRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2O74BUMYLRy3iw8q2jCHTY8Dw
vMyzk+jdKlrJ7pM+mACE156EmpxjLYT2qx7lFmf7gWf1y7ZKJweSVNzGBs8/zwkV
h0duB9NuWd2EiQYdzu5RKX0TCuWADemT4H/u511VgddMXRuPZ2MGMVIijBDd6mYJ
RXM28vrerf7P9L2WF3L1B18xIdcytGGwrr1h9/acp6YJhW6U6/m28sdh1IsvBl9v
ZE+tTH9k4Hvqsq4LG5dJwX3bDSlAxYsMz3wR3BA972g9c9QQJgLKxY6vgDakEHus
wtzRSwAiLpCd5Yoqb9VlrY5uX2TumvO+5UNbRo3VtRjSd/L5ZEX7H9hr8kabAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUE4E62yBYqR2kCKvCXA4NUnyf8fkwHwYDVR0j
BBgwFoAUhxtCNd/FbEgkFue7oZJWIJL/4FUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YTg5NmZkYy01NjM4LTQxZDItOGE5OS02OGNlODE2YmQzY2YvMC84NzFCNDIzNURG
QzU2QzQ4MjQxNkU3QkJBMTkyNTYyMDkyRkZFMDU1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5MkZG
RTA1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmE4OTZmZGMtNTYzOC00MWQyLThh
OTktNjhjZTgxNmJkM2NmLzAvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2
MjA5MkZGRTA1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEQfNcca/1ZOI9fuw0f9EWuV7hqb1YCfvRoo
/CutGzr2dj1IDe+Q87xSJ7TOfVcPpPU18jbRRQBF5vM6iCcjyto3M7VOsdCG+eLH
n+8HF78UgWF/4o6cAfZuewc1kv7x2rmUEDJwjr6tVd9DJYph/rK6gCAtaJBn159g
l8iLFIAachVHOaV6QOet+Mzv61qFv4R/1IS3iwszMO5NDdU6dKMlq9qHvuHLPbgy
j6+EOYCTx29TolS1CAA9h/RHPUoqvTEjmnwnBNlHRv+ZyrHFF5M8SOzXt1l0Q5Kc
Md7Fy3LrF1HUHaL0zvGgB8eDyswAP873QRM001iWA4oergwwDO4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:30:19 2026 by rpki-client