
$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
File: 065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json)
Hash identifier: pap2+NFyVbzmej1+M5LXMomCNo4Y9Idp4ngHwE6zjvI=
Subject key identifier: 9C:7B:8B:30:9D:9B:CD:49:58:37:55:76:1C:D3:C6:4D:9C:90:61:49
Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28
Certificate issuer: /CN=065943D1744CF4841A6D3D50944D2A4DB537A128
Certificate serial: 620BEB7E480CC34A9ABDC77B14BD58E5B8CBC333
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
Manifest number: 015F
Signing time: Thu 16 Apr 2026 20:12:08 +0000
Manifest this update: Thu 16 Apr 2026 20:07:08 +0000
Manifest next update: Sun 19 Apr 2026 21:25:08 +0000
Files and hashes: 1: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: rUoPOh8q+qLJVBJ/fS9fv+y0rYlnpitpfrwgIU81VCE=)
2: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: I8arlV9bMVGsAQTZtHx6y++6HiyiMdDVTXwTw+QSjwU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl
rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 21:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:0b:eb:7e:48:0c:c3:4a:9a:bd:c7:7b:14:bd:58:e5:b8:cb:c3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128
Validity
Not Before: Apr 16 20:07:08 2026 GMT
Not After : Apr 19 21:25:08 2026 GMT
Subject: CN=9C7B8B309D9BCD49583755761CD3C64D9C906149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1e:23:fa:87:9d:11:5e:c7:7a:d2:1b:e9:2e:
31:65:1c:53:83:c2:8d:7e:7f:8a:24:64:cd:da:e1:
ad:44:c9:7e:d0:57:21:d0:f7:db:0c:3e:2f:09:e7:
fd:d4:27:00:e2:23:8c:f4:7f:7a:ce:04:3e:64:1f:
85:e0:ec:3c:a8:54:61:d1:3b:19:e8:98:42:a3:a4:
f6:c5:37:c7:ce:d3:df:0b:ca:62:21:b5:f8:5f:b9:
60:16:8a:14:5a:cf:dc:6b:10:7d:d1:19:64:de:90:
66:d1:01:24:96:64:de:d9:63:74:bd:25:21:98:04:
7a:9f:84:98:dc:d2:bd:b2:ba:03:78:1e:b3:75:a8:
46:53:e4:75:94:23:89:4c:74:bc:66:ce:42:5f:dd:
76:6f:0c:d6:f7:b4:84:58:0f:d8:7d:f4:15:7e:a3:
38:8c:31:94:a1:f6:cb:1a:92:06:e0:0a:5d:c6:bb:
9a:ff:d0:2e:82:c1:ad:b5:aa:47:03:96:e5:d4:3c:
09:37:bf:a7:8f:38:0f:1d:e7:76:fb:ed:8c:02:a9:
4f:48:79:bd:8b:5f:7b:8b:79:a2:91:ac:6a:1e:f4:
91:28:b1:0e:d4:bf:1c:db:71:75:7b:18:b8:aa:19:
08:d8:6b:f8:41:2d:88:2b:53:55:e8:fa:16:03:5b:
23:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7B:8B:30:9D:9B:CD:49:58:37:55:76:1C:D3:C6:4D:9C:90:61:49
X509v3 Authority Key Identifier:
keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3c:1e:de:df:77:04:e3:de:52:30:e9:cb:d0:b5:aa:97:d4:
0f:65:d5:ce:69:3b:3f:23:e4:42:5b:1d:89:cf:6b:17:77:b8:
dc:37:76:81:c7:c6:2d:bf:cd:5f:e0:47:8c:c3:eb:b1:ef:e4:
12:63:a3:87:52:1c:ff:63:8d:5c:be:d9:11:27:14:5e:b2:3e:
1c:d6:a7:b7:ed:9a:89:12:85:d3:c9:a1:2f:d1:f4:ea:12:07:
da:87:f6:ee:61:fb:df:04:04:be:c3:c8:6d:bf:72:c4:20:80:
6d:45:cc:45:c3:4b:ec:82:1d:45:88:42:3e:01:cd:2b:4b:9c:
ee:f3:33:94:d8:fd:cb:ec:06:42:20:56:d3:c8:a1:22:64:1a:
f4:b4:18:e9:22:3b:3d:c0:4d:7c:a4:48:3b:c1:72:da:76:ef:
63:5f:09:cc:0d:25:b1:dd:86:18:7f:39:bd:d8:e2:00:5d:8e:
8c:a1:84:16:18:b9:20:26:ab:80:50:69:e8:95:af:6a:1a:3d:
28:2f:31:21:7e:60:07:ee:9b:7e:83:df:7f:22:a5:8a:4b:05:
72:6a:82:ea:ae:69:59:16:cd:9f:90:4b:d6:54:93:ce:ee:f6:
78:a1:9e:39:c4:45:91:2c:4c:6e:41:7b:4d:d7:de:07:e2:2e:
63:12:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:49 2026 by rpki-client