
$ rpki-client -vvf repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft
File: 604C441ACDF554F380D7FED8F68B2EC7FB780413.mft (raw, json)
Hash identifier: CASnD+xLVPNDiJyiuOqF/crE4U7Yg3XfTjAQU06iDf4=
Subject key identifier: 27:30:58:EC:61:78:17:F7:F2:86:06:A9:95:34:AE:9D:C6:B7:AB:A9
Authority key identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13
Certificate issuer: /CN=604C441ACDF554F380D7FED8F68B2EC7FB780413
Certificate serial: 6566BCAD8B84AC0D9D108B6E847F968D0B33906C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft
Manifest number: 022F
Signing time: Thu 16 Apr 2026 01:31:12 +0000
Manifest this update: Thu 16 Apr 2026 01:26:12 +0000
Manifest next update: Sun 19 Apr 2026 06:43:12 +0000
Files and hashes: 1: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (hash: OjD7igAi8uIoux+rVxGtZEh2dpv8xELOea0gwWs5+6I=)
2: 3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (hash: EQbr12ySqIrNTM9njp7Wb0XN8yJtB1BDEx2u9gpZun8=)
3: 604C441ACDF554F380D7FED8F68B2EC7FB780413.crl (hash: xSvv7q3U3AqMAupa+zuYRW+0EqK5PphhGsNyNAQxfXM=)
4: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (hash: sm8jeStS9mRgsrGl5CeRQ6sBSscm5f2rHE/KQpXoWj8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl
rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 06:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:66:bc:ad:8b:84:ac:0d:9d:10:8b:6e:84:7f:96:8d:0b:33:90:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604C441ACDF554F380D7FED8F68B2EC7FB780413
Validity
Not Before: Apr 16 01:26:12 2026 GMT
Not After : Apr 19 06:43:12 2026 GMT
Subject: CN=273058EC617817F7F28606A99534AE9DC6B7ABA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:90:14:e7:09:c9:81:1b:d2:06:60:c0:e0:
82:15:8d:f2:4e:6e:d8:9c:21:bb:1e:b2:da:65:6d:
73:b7:19:94:38:f0:8a:c8:cd:49:14:d6:97:f1:e4:
c9:79:dc:91:53:89:3c:3c:11:fe:d4:44:89:e3:e9:
9d:32:7c:d5:d2:d2:cf:8c:96:22:cf:84:83:de:9d:
5b:b4:ba:67:29:9d:7e:d4:0c:f7:86:bc:6f:ea:9a:
46:79:4b:83:b2:50:6c:a3:67:d6:e7:90:67:1e:a3:
8d:9c:a6:d9:c3:6d:ba:d8:79:6d:54:d5:5c:ef:89:
08:85:94:36:12:6b:dd:89:b2:a6:84:e6:8a:d4:cd:
97:da:e9:8d:37:10:1e:65:1e:ac:51:25:0f:fc:ba:
4b:a5:c6:01:80:3c:da:12:7c:c7:7b:28:3c:6a:ef:
2e:68:23:22:ea:9e:fb:39:01:a8:07:56:e6:48:54:
a5:ba:d7:a5:2f:49:db:ef:57:d4:c6:88:a9:43:b2:
b8:d7:79:b5:ab:ec:5e:4b:b2:a9:b9:ce:c7:4f:a8:
64:99:5b:e7:30:83:b4:89:95:b3:61:4d:19:cc:9d:
52:4a:a5:21:fd:84:03:6b:06:9d:b4:16:95:b0:40:
80:1c:a5:50:e3:d2:aa:15:3b:d8:9e:c2:36:99:34:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:30:58:EC:61:78:17:F7:F2:86:06:A9:95:34:AE:9D:C6:B7:AB:A9
X509v3 Authority Key Identifier:
keyid:60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b6:61:2e:a9:37:26:28:6d:3f:c1:12:b6:54:da:a5:f4:15:
68:7a:9a:74:63:95:10:2d:30:03:29:6c:3e:b0:6f:74:c8:91:
92:65:10:82:6a:7d:ee:02:9b:c6:d6:93:16:80:54:4d:28:7c:
ca:a4:b0:37:ba:ac:f8:ad:aa:cc:09:09:11:8a:43:59:ff:2e:
44:0a:11:bc:3b:21:6a:1c:1a:cb:eb:d9:b3:15:bc:85:1f:81:
30:97:12:db:e5:17:df:37:8b:96:f3:7a:32:3c:7e:02:cd:36:
57:0a:44:eb:7b:47:89:de:ba:e6:52:42:89:9e:d0:c5:4f:84:
1c:98:70:ca:ec:5d:c0:7d:0d:bb:c5:d8:56:af:01:8e:f5:83:
6c:ed:2c:a0:54:43:06:4a:9c:87:45:71:ee:b5:f8:e0:54:e9:
66:3d:c0:bc:39:5f:2f:b7:f1:0a:27:b6:76:a7:e0:a4:76:7c:
5c:3d:0d:83:a1:8b:c5:da:59:21:95:b2:da:3f:df:f1:07:c7:
34:74:0f:da:1f:cf:eb:98:36:10:f3:d8:d4:12:44:6c:13:57:
5d:d7:d7:ce:dc:2c:fe:2b:8b:df:dd:80:40:4f:b1:35:6c:63:
69:e9:b9:67:bc:b4:43:ae:ac:58:c7:32:4a:e4:c5:e3:0e:62:
92:80:37:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:20 2026 by rpki-client