
$ rpki-client -vvf repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft
File: C740DD931883C284135261B25A6958E80CDF63D2.mft (raw, json)
Hash identifier: ce9YXiXAvBPxgxv8132D9dyKbuNq466TRXxj9HlQQVk=
Subject key identifier: 22:5D:0B:A7:B2:3E:E7:1D:97:04:16:A1:C0:4E:40:75:E3:8F:9F:DA
Authority key identifier: C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2
Certificate issuer: /CN=C740DD931883C284135261B25A6958E80CDF63D2
Certificate serial: 02C6190B48410AFC7322B1745E91998073C5CCFD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft
Manifest number: 0220
Signing time: Fri 17 Apr 2026 04:22:00 +0000
Manifest this update: Fri 17 Apr 2026 04:17:00 +0000
Manifest next update: Mon 20 Apr 2026 10:59:00 +0000
Files and hashes: 1: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (hash: GyuTjfSXg8CKV3wiOvbPNmUEDlW/pVUvbq70+NpobI8=)
2: 3130332e3133392e3132312e302f32342d3234203d3e20313336383234.roa (hash: NnF9yGcPKeJ6Bu78J7bQyCHX6RIw79+ioFuiizOGMhs=)
3: C740DD931883C284135261B25A6958E80CDF63D2.crl (hash: R5wJQN6NqKi5nROQdkMBQ1xLbfe+oeLiLWC1q8Nzp+E=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl
rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 10:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c6:19:0b:48:41:0a:fc:73:22:b1:74:5e:91:99:80:73:c5:cc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C740DD931883C284135261B25A6958E80CDF63D2
Validity
Not Before: Apr 17 04:17:00 2026 GMT
Not After : Apr 20 10:59:00 2026 GMT
Subject: CN=225D0BA7B23EE71D970416A1C04E4075E38F9FDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:82:db:31:17:d4:18:bd:e5:ed:dc:ba:75:
21:10:c8:f4:7e:ae:80:66:6c:0f:1b:61:6b:38:76:
b6:a4:45:61:7c:e4:b5:27:9d:13:1a:a1:29:69:6a:
ab:c0:d6:bf:23:49:08:36:46:ae:a3:40:66:77:da:
99:9a:13:57:39:44:65:e8:96:75:60:bd:fa:e6:0a:
ca:80:44:d3:4b:88:a6:45:f6:b2:90:0e:93:28:ea:
4a:a9:24:0c:eb:6b:d2:fa:54:ef:5b:e9:28:f1:b2:
c3:8b:36:c5:12:84:bf:ab:e0:d6:5a:35:6a:3a:29:
eb:44:1d:0b:3d:95:1f:b7:53:f3:63:7b:80:ae:25:
88:7a:90:23:9a:a8:03:f0:5e:25:1d:f9:26:0a:ad:
e6:82:0c:58:3f:d9:b7:e1:3a:f5:45:26:c5:5f:5c:
07:d5:9c:92:de:92:b0:87:ed:af:c6:8a:33:ca:d4:
28:32:59:f0:de:3f:23:80:3d:35:f4:e1:28:eb:50:
67:23:13:53:3f:6a:c6:a4:ff:29:33:4d:82:61:fa:
fd:27:93:e5:34:fb:c8:15:61:10:d5:a1:f8:52:e3:
0b:ae:63:ae:37:d5:81:c1:8e:7a:9e:67:a0:e3:e0:
54:1b:9d:8c:74:86:e7:2a:96:77:da:9d:12:61:76:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5D:0B:A7:B2:3E:E7:1D:97:04:16:A1:C0:4E:40:75:E3:8F:9F:DA
X509v3 Authority Key Identifier:
keyid:C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:25:07:01:ac:15:0f:3b:66:48:1e:6c:06:5b:0b:ac:16:64:
08:3b:b9:be:fc:36:67:28:8b:f5:d4:79:a1:7c:ba:72:a1:67:
02:9a:e8:aa:ae:a2:fd:64:cf:e2:0e:f9:84:34:c2:c0:15:28:
eb:11:f9:af:25:12:b1:7a:aa:50:18:d9:a9:fc:5e:8e:92:e3:
cb:fe:64:9f:2d:46:66:26:d5:15:e5:f4:8b:3a:b9:88:07:e5:
27:5b:d3:9b:b9:31:62:99:17:d5:22:fe:79:0b:a4:55:c7:0e:
96:1f:2e:e6:a3:f6:6f:6b:89:0f:48:39:b5:1e:44:c5:54:9a:
d9:fd:e3:d8:84:8f:ab:ec:89:ff:c4:a5:e4:0a:3b:17:9d:00:
d8:41:ca:2e:ac:51:39:b0:fd:69:e4:11:ea:18:5a:ca:1e:19:
dc:b6:b1:1d:98:98:f0:8b:51:d4:f7:fb:d5:59:c9:8d:45:3e:
76:72:86:89:38:7d:e9:14:d8:de:fb:b9:38:d6:4f:14:12:e2:
8c:a4:d5:a0:7a:d3:07:ec:02:79:2a:40:6f:0b:3b:c0:a6:a1:
cc:7d:82:2a:e6:16:8f:e2:2f:d6:3f:46:8a:b4:96:e6:a6:cf:
5c:a2:99:87:a1:43:72:11:80:39:89:53:b8:c9:01:f9:9b:c4:
89:9e:05:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:25:54 2026 by rpki-client