
$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft
File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json)
Hash identifier: GPBxiT3l2l5DPAwh4fkEs1V+QJuLd63Jagz+7d+cX7w=
Subject key identifier: 7D:38:0A:67:2D:25:74:E7:57:AE:79:38:76:46:A7:E8:23:06:84:12
Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6
Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6
Certificate serial: 7E3ADD02357D7FC5A2381BE8DD14F9241DCAA1A8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft
Manifest number: 0267
Signing time: Wed 15 Apr 2026 22:41:19 +0000
Manifest this update: Wed 15 Apr 2026 22:36:19 +0000
Manifest next update: Sun 19 Apr 2026 05:01:19 +0000
Files and hashes: 1: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: Hk9QRmIGnLmOj8q0rSsWs18WVjVSZhp2AEPBmLDYG+0=)
2: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: xKO2CXnPQI2NViGwkl0YgPqxk11jmuJGUEqkoy47iBc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl
rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:3a:dd:02:35:7d:7f:c5:a2:38:1b:e8:dd:14:f9:24:1d:ca:a1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6
Validity
Not Before: Apr 15 22:36:19 2026 GMT
Not After : Apr 19 05:01:19 2026 GMT
Subject: CN=7D380A672D2574E757AE79387646A7E823068412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:9d:f4:c5:8a:4b:c8:1c:c1:9c:55:bb:3b:
ec:18:77:41:9e:ed:65:38:48:6f:7e:9d:ad:1f:43:
e9:3a:cd:42:79:f0:07:75:53:1b:cb:36:e9:f2:5a:
3a:22:e2:3e:5b:bc:2b:bb:00:72:fb:48:f1:79:16:
1a:25:b7:0f:54:56:32:44:8c:7b:b0:1f:94:8e:3e:
27:75:ed:61:f6:10:bb:2b:a8:ad:87:f4:97:d9:8a:
93:43:f0:6e:6c:75:ec:eb:98:fe:9c:47:20:1b:81:
a8:e9:c3:62:b2:fd:ec:ed:d8:27:6f:8a:0a:2e:38:
5c:20:b4:82:e7:f5:3d:5f:e8:47:7a:d9:9a:45:23:
dc:34:7e:6b:3e:ee:5d:10:3e:ea:43:78:4d:39:35:
46:98:65:c6:a4:56:7e:7b:37:0b:97:af:0c:5d:44:
1e:9f:c0:50:8f:a5:43:4e:fe:78:53:1f:df:d4:54:
b1:6b:ca:a4:37:02:ad:ab:d0:8c:57:fb:89:86:01:
56:af:4a:15:cc:66:6c:54:45:21:cd:3d:8e:b7:ef:
c2:25:db:58:0f:5c:0e:e7:c1:96:f5:1d:ae:e7:86:
27:a9:1d:39:e9:ac:0d:74:1b:81:fc:ae:d7:41:34:
5d:63:a1:a0:3a:6c:a4:00:99:05:6c:c2:f8:5e:39:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:38:0A:67:2D:25:74:E7:57:AE:79:38:76:46:A7:E8:23:06:84:12
X509v3 Authority Key Identifier:
keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:88:26:bb:22:22:91:a8:86:ec:dc:41:1b:c8:c3:de:aa:92:
77:cc:77:2b:0a:6a:df:3a:07:53:4a:cb:bb:5a:12:70:19:dd:
5c:a6:1f:cd:eb:44:b0:8c:71:0b:9b:fe:2a:bf:16:94:3b:eb:
b4:81:f3:e6:d7:fd:57:a3:a5:3c:b8:94:28:dd:c0:a3:76:f2:
72:06:4f:7d:a6:d4:73:0c:c3:cc:58:ff:06:f1:a6:f0:55:96:
14:2b:63:08:79:61:1b:21:f9:a2:58:14:45:cd:e5:b2:9b:45:
36:f5:76:9a:0d:12:93:b7:da:0a:b3:2a:0f:17:cc:73:f2:da:
9a:77:97:e5:59:28:ce:1c:d5:d0:04:3a:cf:f8:24:9b:d1:db:
99:d2:1b:11:93:4b:23:44:f9:cc:0c:3f:19:ff:02:13:ee:79:
d9:df:6d:89:73:bc:2e:73:6e:6c:7e:f1:09:71:40:29:ce:52:
f7:ac:69:18:14:fb:38:90:70:63:4f:48:f5:69:6a:c8:c3:5d:
2f:0e:04:8c:36:49:08:d8:1a:3f:02:e1:1e:e8:03:9d:6d:cc:
9c:63:5b:1b:6b:ba:2d:3f:f4:28:e5:26:9d:70:03:ed:d4:1d:
7d:11:58:80:7b:3e:51:af:c8:c4:f2:ff:b2:9d:5a:40:ad:76:
ec:13:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:23 2026 by rpki-client