
$ rpki-client -vvf repo-rpki.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/0D0090DA37553F18D2F93B05E139E93C3293E075.mft
File: 0D0090DA37553F18D2F93B05E139E93C3293E075.mft (raw, json)
Hash identifier: y0Sp92VSYjtHff6zjwqb4aLvE14wWi/WZTCOusxX+x4=
Subject key identifier: 82:1B:32:9F:F8:BC:A2:71:C3:48:5D:6B:DC:D5:CA:7A:04:45:A4:8D
Authority key identifier: 0D:00:90:DA:37:55:3F:18:D2:F9:3B:05:E1:39:E9:3C:32:93:E0:75
Certificate issuer: /CN=0D0090DA37553F18D2F93B05E139E93C3293E075
Certificate serial: 4092F6CB6CABBF4E64932FD4E940210C658363BD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0090DA37553F18D2F93B05E139E93C3293E075.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/0D0090DA37553F18D2F93B05E139E93C3293E075.mft
Manifest number: 08
Signing time: Wed 15 Apr 2026 08:11:19 +0000
Manifest this update: Wed 15 Apr 2026 08:06:19 +0000
Manifest next update: Sat 18 Apr 2026 17:03:19 +0000
Files and hashes: 1: 0D0090DA37553F18D2F93B05E139E93C3293E075.crl (hash: jpakxNshVdY8e4bLEQs/ovyLFIl+fA3N/hw41ytGcsI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/0D0090DA37553F18D2F93B05E139E93C3293E075.crl
rsync://repo-rpki.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/0D0090DA37553F18D2F93B05E139E93C3293E075.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0090DA37553F18D2F93B05E139E93C3293E075.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:92:f6:cb:6c:ab:bf:4e:64:93:2f:d4:e9:40:21:0c:65:83:63:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D0090DA37553F18D2F93B05E139E93C3293E075
Validity
Not Before: Apr 15 08:06:19 2026 GMT
Not After : Apr 18 17:03:19 2026 GMT
Subject: CN=821B329FF8BCA271C3485D6BDCD5CA7A0445A48D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:7c:09:d8:09:e8:a9:28:5e:3a:a8:c4:f5:
70:15:89:b8:f5:14:e8:1d:0b:04:67:b7:c4:11:bc:
21:ca:56:4e:b5:ff:c2:d6:79:21:ed:36:8f:26:70:
a1:f6:f6:0a:b1:c7:d3:b2:f2:c2:78:c5:b2:d4:ef:
27:d4:73:aa:d6:dd:d2:64:43:9a:f9:65:b8:5a:41:
0a:d0:45:2f:dc:f4:de:dd:4f:15:53:ec:49:ff:a7:
21:c5:7a:ce:3a:26:06:77:ec:50:8d:72:8d:d3:56:
31:b7:67:ef:df:49:a9:6b:14:d8:a7:de:fe:73:be:
a7:e0:29:29:da:1c:14:3b:db:49:44:08:a7:e7:de:
63:79:3d:60:41:98:9b:c6:17:8d:ca:f8:2b:a2:2f:
90:21:ca:1a:09:15:c5:ae:f5:2b:78:e1:f6:8e:4c:
8f:f0:bd:fb:f3:9c:5d:79:1d:97:c1:90:c5:bd:ca:
91:ea:96:fa:0a:ee:bc:7e:8d:1f:1c:58:45:c2:d1:
fc:57:c6:ea:91:7a:ce:73:fc:36:a1:28:80:42:f2:
74:ba:bf:db:2e:a0:82:d0:46:76:b7:46:ad:72:4a:
6e:91:7e:2b:22:b0:ca:50:27:e2:1c:ce:f0:db:ac:
48:3a:a8:ff:82:ee:33:fd:05:9a:64:9a:1e:56:3f:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1B:32:9F:F8:BC:A2:71:C3:48:5D:6B:DC:D5:CA:7A:04:45:A4:8D
X509v3 Authority Key Identifier:
keyid:0D:00:90:DA:37:55:3F:18:D2:F9:3B:05:E1:39:E9:3C:32:93:E0:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/0D0090DA37553F18D2F93B05E139E93C3293E075.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0090DA37553F18D2F93B05E139E93C3293E075.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/75564e79-b679-46d5-b1fd-028d177b68c0/0/0D0090DA37553F18D2F93B05E139E93C3293E075.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e8:ea:3c:75:8d:c0:70:8e:8e:83:d3:d5:e0:be:32:82:69:
95:1e:db:dc:08:84:af:97:33:97:8a:50:8d:6f:fa:b2:66:6a:
6a:76:c9:da:d3:a0:c2:8d:38:b9:5e:6d:60:fc:84:94:35:70:
3e:37:5d:26:26:19:3f:17:ce:a1:30:be:b1:17:3c:7c:c8:22:
82:cf:b5:17:52:73:09:ff:87:88:24:23:4e:7d:97:a6:22:c5:
b6:b5:d9:ee:bd:3c:6a:93:0e:8b:98:a2:0b:5e:ea:c5:e1:f3:
1a:4c:06:15:7a:fb:42:13:37:c0:6a:a2:80:a0:38:51:6a:08:
7e:a0:72:c9:21:be:da:84:ff:b6:6e:a8:92:99:68:c2:ef:76:
c2:da:79:6f:37:f4:69:b0:e8:8c:af:bc:eb:86:77:c2:89:30:
ee:4e:e9:26:67:ff:c4:c1:ed:74:dd:a2:5f:83:03:ba:ae:ed:
bd:7a:f9:64:8c:05:a5:d1:76:db:4b:35:b8:b8:ac:75:70:1e:
53:25:73:a0:e6:78:a6:ea:38:bc:7f:9d:5d:4d:71:12:a3:5d:
5f:fa:60:56:0d:f6:c9:7e:69:b3:4d:55:44:ea:82:c6:12:5a:
20:69:37:75:50:9b:ef:60:79:25:bf:20:88:bd:d5:78:21:11:
ef:1c:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:55 2026 by rpki-client