
$ rpki-client -vvf repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft
File: B152586AE46FCAB640629D941147319E05FCF34B.mft (raw, json)
Hash identifier: X1uDvChVgXzabIrnTRv7H1ierD2qVkh76K+afLIRnNs=
Subject key identifier: 6D:56:5C:66:BB:64:A5:59:2F:BB:E2:E6:D0:2F:86:1E:7E:50:8A:97
Authority key identifier: B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B
Certificate issuer: /CN=B152586AE46FCAB640629D941147319E05FCF34B
Certificate serial: 6E935519480AA01697835297D61842BC83F82D8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft
Manifest number: 0299
Signing time: Fri 17 Apr 2026 11:52:18 +0000
Manifest this update: Fri 17 Apr 2026 11:47:18 +0000
Manifest next update: Mon 20 Apr 2026 23:51:18 +0000
Files and hashes: 1: B152586AE46FCAB640629D941147319E05FCF34B.crl (hash: IUuC9Z5foXQR+KufWn6mCxVumUx1l1b+xIGS5qCAz/8=)
2: 3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa (hash: DwzbcXroI8gNYKGQ4eUqNjfcLXfCqCYoHIzRD47u86M=)
3: 323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa (hash: U633ym5jUdptckJshhV25CxUbvCB8/wjZ9iL8MKR52I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl
rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 20:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:93:55:19:48:0a:a0:16:97:83:52:97:d6:18:42:bc:83:f8:2d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B152586AE46FCAB640629D941147319E05FCF34B
Validity
Not Before: Apr 17 11:47:18 2026 GMT
Not After : Apr 20 23:51:18 2026 GMT
Subject: CN=6D565C66BB64A5592FBBE2E6D02F861E7E508A97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:89:c5:b9:47:93:3b:db:63:7b:98:b5:4d:
2c:4a:8c:72:20:14:52:eb:bd:3c:6f:43:1d:4d:09:
ce:43:36:94:d5:b2:e3:7a:b0:90:58:38:3f:ac:6e:
7a:61:27:5c:f8:41:ea:1d:18:5d:c6:5a:f6:99:8b:
43:c0:f9:cb:bd:9a:fd:09:cb:6d:9e:5a:5e:b9:2a:
80:0f:b5:4d:3c:a6:d0:4a:85:82:09:b6:c2:a7:33:
ac:99:79:d2:d2:9b:82:34:fc:3d:b0:8f:87:68:ce:
a1:5c:c6:1c:62:69:d0:41:7d:58:cf:0e:d3:0e:8a:
80:fd:f0:a1:4f:63:44:0c:cd:60:2c:99:f2:a9:0a:
c7:22:c3:88:18:59:53:ef:21:17:b1:73:45:26:b9:
f1:72:98:18:3c:a3:cc:ff:e3:5b:f8:15:b7:b1:fb:
51:2f:94:1d:fc:73:f4:50:42:88:86:43:7c:21:97:
f3:22:f9:94:9f:60:3a:5a:d0:32:30:1f:7a:5f:55:
12:66:cd:ff:50:28:7a:20:5a:47:72:a2:0d:94:25:
58:94:a6:bf:4b:73:73:6b:be:25:96:4a:52:b5:63:
b9:47:39:df:d9:d5:5c:51:56:1b:a9:bb:5d:3b:ff:
17:c2:f4:fe:fd:34:d2:73:c1:3c:12:10:c3:21:e0:
26:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:56:5C:66:BB:64:A5:59:2F:BB:E2:E6:D0:2F:86:1E:7E:50:8A:97
X509v3 Authority Key Identifier:
keyid:B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:02:ea:7c:eb:2e:79:51:70:aa:88:eb:ff:19:a0:17:f6:4f:
98:dd:b1:c5:8a:46:95:74:5a:d3:3d:40:2b:c9:53:9d:77:2c:
be:d6:70:7e:2f:40:71:9a:ce:dd:cc:e2:46:c6:7d:c9:78:0f:
bd:1d:69:da:81:05:a6:70:58:0a:f1:a6:9d:00:c9:ce:c3:41:
51:47:26:cb:37:79:11:47:8a:3f:ab:03:3f:92:8f:1d:a5:1c:
1d:7e:2f:6c:8a:73:7b:f4:6a:39:17:9c:7b:5a:a3:44:00:ec:
1e:d4:70:bd:24:67:7f:c7:f0:8c:38:02:da:62:7e:90:dd:f1:
c8:7c:16:17:8c:de:cf:cf:b6:dd:c0:5e:74:d2:81:4b:e8:a2:
e9:c2:01:bd:1c:e8:a2:ca:2a:22:d4:b2:cc:15:04:64:7a:81:
8f:d4:d3:de:c0:9a:ab:36:f1:83:10:4d:c5:48:d0:9a:e6:00:
4f:1c:76:11:bc:71:9d:b3:16:fb:c7:49:7c:a9:e8:56:f7:6f:
d9:18:70:b6:99:de:05:c3:ae:35:72:b8:a0:57:f3:f5:be:e5:
df:85:b9:7c:bc:16:3f:b6:df:0a:04:b4:53:c4:dd:86:60:a8:
68:a5:72:cc:d5:6f:f1:60:a0:93:8b:08:e6:bf:99:e7:98:e6:
e7:6a:7e:ad
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbpNVGUgKoBaXg1KX1hhCvIP4LY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMxOUUw
NUZDRjM0QjAeFw0yNjA0MTcxMTQ3MThaFw0yNjA0MjAyMzUxMThaMDMxMTAvBgNV
BAMTKDZENTY1QzY2QkI2NEE1NTkyRkJCRTJFNkQwMkY4NjFFN0U1MDhBOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy84nFuUeTO9tje5i1TSxKjHIg
FFLrvTxvQx1NCc5DNpTVsuN6sJBYOD+sbnphJ1z4QeodGF3GWvaZi0PA+cu9mv0J
y22eWl65KoAPtU08ptBKhYIJtsKnM6yZedLSm4I0/D2wj4dozqFcxhxiadBBfVjP
DtMOioD98KFPY0QMzWAsmfKpCsciw4gYWVPvIRexc0UmufFymBg8o8z/41v4Fbex
+1EvlB38c/RQQoiGQ3whl/Mi+ZSfYDpa0DIwH3pfVRJmzf9QKHogWkdyog2UJViU
pr9Lc3NrviWWSlK1Y7lHOd/Z1VxRVhupu107/xfC9P79NNJzwTwSEMMh4CbNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbVZcZrtkpVkvu+Lm0C+GHn5QipcwHwYDVR0j
BBgwFoAUsVJYauRvyrZAYp2UEUcxngX880swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YTllMjg5OC0wMjNiLTQ3NDEtODczNS1hMDcxOGNjNmNmMmIvMC9CMTUyNTg2QUU0
NkZDQUI2NDA2MjlEOTQxMTQ3MzE5RTA1RkNGMzRCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMxOUUwNUZD
RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmE5ZTI4OTgtMDIzYi00NzQxLTg3
MzUtYTA3MThjYzZjZjJiLzAvQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMx
OUUwNUZDRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAEC6nzrLnlRcKqI6/8ZoBf2T5jdscWKRpV0
WtM9QCvJU513LL7WcH4vQHGazt3M4kbGfcl4D70dadqBBaZwWArxpp0Ayc7DQVFH
Jss3eRFHij+rAz+Sjx2lHB1+L2yKc3v0ajkXnHtao0QA7B7UcL0kZ3/H8Iw4Atpi
fpDd8ch8FheM3s/Ptt3AXnTSgUvoounCAb0c6KLKKiLUsswVBGR6gY/U097Amqs2
8YMQTcVI0JrmAE8cdhG8cZ2zFvvHSXyp6Fb3b9kYcLaZ3gXDrjVyuKBX8/W+5d+F
uXy8Fj+23woEtFPE3YZgqGilcszVb/FgoJOLCOa/meeY5udqfq0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:57:24 2026 by rpki-client