
$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft
File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json)
Hash identifier: IjVufyRwWVbJfxwYT87dEy3/KR/gFMRXy9oSJNoHNOE=
Subject key identifier: 74:60:4F:00:BE:59:E1:AD:A4:6C:56:81:C2:78:93:F1:2F:D1:C4:2C
Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55
Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255
Certificate serial: 30597FA330B55BE13C456EE1010B8A1411507A34
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft
Manifest number: 0173
Signing time: Wed 15 Apr 2026 15:11:58 +0000
Manifest this update: Wed 15 Apr 2026 15:06:58 +0000
Manifest next update: Sat 18 Apr 2026 22:25:58 +0000
Files and hashes: 1: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 2xXRATtqKTFJTL45kpKCrmgQ+OKbp2ZlcGtRfjkIZUg=)
2: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: r0yQckJKHz7cgtDpBZ5DT3GZabnNshDA9NVYp4KqxPI=)
3: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: ZinxtAnhS2Pg2RxoaZT2pXf/yYHQ73tjQ2o1/hxWgl4=)
4: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: iu1Dc54YlpkWXrRrlgFt9MyI1bbMWnH2lViKwPc2SC4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl
rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 22:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:59:7f:a3:30:b5:5b:e1:3c:45:6e:e1:01:0b:8a:14:11:50:7a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255
Validity
Not Before: Apr 15 15:06:58 2026 GMT
Not After : Apr 18 22:25:58 2026 GMT
Subject: CN=74604F00BE59E1ADA46C5681C27893F12FD1C42C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:43:41:09:88:84:14:52:e0:9a:5e:00:99:
7a:55:9e:62:2a:3b:bb:47:41:3c:ef:fc:c9:20:d2:
13:ce:48:82:ce:66:f0:09:5b:1a:0f:f5:b3:d2:05:
fa:82:57:08:0e:81:d9:8e:63:31:6a:ee:99:fc:2f:
22:63:e4:33:39:34:8c:88:e0:a0:92:ac:a6:4e:46:
ed:c1:63:2e:e3:f1:b8:a0:5c:11:95:ad:ad:e6:3f:
93:37:2a:72:3a:19:69:d9:ca:39:f3:12:8f:d2:cf:
9c:d1:b8:df:73:f7:29:8e:50:42:db:ce:09:d1:95:
46:2e:5d:4b:32:87:b2:df:31:5e:6e:8f:36:45:07:
e6:8b:47:85:2b:1c:2b:13:ee:65:d1:57:b1:82:4c:
32:24:ae:48:d1:43:83:22:58:2b:c7:b8:93:57:dc:
c7:c0:66:42:d0:32:d8:36:ff:f7:b6:09:96:89:41:
c6:18:0e:45:39:26:48:43:08:90:2b:72:95:83:67:
96:82:aa:da:2a:9b:56:cc:c7:27:3f:1c:1e:67:5e:
f0:2a:61:d2:55:5e:b0:92:3a:e4:9d:48:24:b0:1c:
d0:b6:20:ed:52:77:f3:d5:43:76:44:73:ad:d9:60:
b5:54:ee:a0:c8:67:98:7e:5e:a8:e9:db:f7:2f:27:
57:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:60:4F:00:BE:59:E1:AD:A4:6C:56:81:C2:78:93:F1:2F:D1:C4:2C
X509v3 Authority Key Identifier:
keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e8:52:e5:a1:b7:9e:37:90:76:00:09:36:c8:20:88:0c:6d:
f3:90:1e:55:fc:9f:54:3b:0c:54:a5:73:c8:28:53:ff:37:5b:
ff:7c:0b:d1:19:d9:88:e1:e6:a3:d6:c1:4b:77:06:c2:76:f1:
c2:fb:7a:39:44:6a:63:9b:20:71:98:5b:c4:1b:72:06:f3:d2:
6c:57:21:27:2b:67:5f:a9:50:17:50:74:a7:fa:f4:13:f4:12:
ac:59:72:3e:dc:5f:1d:59:05:55:f3:1b:98:0d:84:c8:a4:24:
11:8c:3c:ae:4c:13:39:09:e1:b2:bc:46:76:83:b3:a0:c0:d3:
71:53:40:2f:9a:a1:d3:ee:35:ad:d9:a7:0c:86:76:22:19:77:
82:2d:b6:0d:0b:c2:d9:e4:fc:9e:8d:78:78:2a:05:93:1f:13:
ae:d1:85:04:ca:a3:3e:ee:fe:ba:4f:3d:82:94:1b:16:65:63:
c6:b4:9f:7e:1e:f8:99:ea:d2:d6:8b:6c:88:db:25:69:56:ed:
19:e7:ef:41:47:75:9b:3b:24:57:f2:c8:6d:96:cd:54:f3:84:
ca:8b:e4:41:d9:6c:50:05:98:17:a0:19:84:b6:23:5a:ef:7b:
af:0e:fe:58:9e:56:f0:68:c3:81:47:4d:63:e2:9f:e1:1f:fd:
53:3c:85:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:18:00 2026 by rpki-client