
$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft
File: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft (raw, json)
Hash identifier: zLEvzzBkCRi5vjW8sFLQOCqI86KVBqfGTu0gXk5gU4E=
Subject key identifier: 81:96:A4:58:75:01:05:2B:AA:BE:6A:9D:92:04:30:8B:4D:FC:4D:49
Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Certificate serial: 3AF4B24EB60DB38B4C2299EB7B57C9B285A880CD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft
Manifest number: 024D
Signing time: Thu 16 Apr 2026 10:50:53 +0000
Manifest this update: Thu 16 Apr 2026 10:45:53 +0000
Manifest next update: Sun 19 Apr 2026 21:03:53 +0000
Files and hashes: 1: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl (hash: s+DhPkALcK2y7Sluen90EAzJTnaBz3g5izrznbwxa30=)
2: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: V3NQepAED/G4v92/Kw8wwvusDJ/oK/3dp6EJLA6gw0s=)
3: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 7IiFMO+HhVDLxjHT2X4iJ4FHi1Re2KahShbn05EtlK4=)
4: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: Q9gcXsnmhgdIFiAoT+4PlNJP+vGRpaSMes16ABWpf6E=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl
rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 21:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f4:b2:4e:b6:0d:b3:8b:4c:22:99:eb:7b:57:c9:b2:85:a8:80:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Validity
Not Before: Apr 16 10:45:53 2026 GMT
Not After : Apr 19 21:03:53 2026 GMT
Subject: CN=8196A4587501052BAABE6A9D9204308B4DFC4D49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5b:90:09:58:26:cb:90:09:da:23:9e:80:16:
50:c2:52:05:4f:1d:36:a1:cf:c1:9e:f0:3f:78:f5:
de:c1:2a:39:ca:fe:a4:ff:f2:19:f3:d8:a8:33:0b:
1e:7c:83:94:75:4e:a7:e3:1c:dd:6c:4f:b0:fa:92:
83:e1:32:84:a9:99:03:bf:bf:53:b6:83:d3:57:17:
66:f0:92:e5:ff:00:bd:2e:76:c1:6b:8e:78:59:d8:
b6:a4:5e:9a:96:28:f2:2a:33:49:39:f0:21:ce:e1:
b9:5c:b6:c6:3b:78:2f:a0:c8:18:30:73:e4:36:b5:
3b:7d:b7:9f:bb:cd:4c:dd:40:24:00:0c:22:ed:da:
f6:d0:50:cd:8d:f2:4b:30:d6:6b:2a:2b:67:59:0e:
c1:e1:fb:ed:3c:cc:c0:b1:08:b4:45:3b:9a:2a:03:
15:59:ec:1d:ad:7d:55:2b:8d:70:73:62:ff:d8:b1:
b6:a4:13:23:7a:68:b6:62:38:a6:93:a6:6d:ae:98:
36:a9:d4:f3:14:5e:b5:a4:62:5b:71:48:89:2d:44:
9a:38:e7:18:0a:e5:fc:cc:fa:d1:94:46:3f:ef:84:
34:10:3d:8d:24:d3:76:0a:e4:42:66:59:8a:8a:80:
d1:d0:1d:d7:9f:89:6e:d3:79:01:ac:a6:40:e0:e8:
a3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:96:A4:58:75:01:05:2B:AA:BE:6A:9D:92:04:30:8B:4D:FC:4D:49
X509v3 Authority Key Identifier:
keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:01:f1:12:be:ff:f6:a4:8d:01:30:fd:2d:10:0d:58:ca:6d:
d0:fa:3a:ef:6f:d1:d7:bb:81:f5:2b:70:b8:60:86:a8:96:ef:
1a:77:4a:59:df:67:eb:f1:fc:60:3a:75:1d:0a:69:20:f8:a6:
46:7c:71:6a:93:db:2f:bf:93:b6:2c:02:2a:33:01:03:90:f5:
ce:ab:49:7e:73:85:52:a7:de:96:3b:51:f1:09:b3:a5:30:7e:
2d:cb:db:e8:c3:0c:7f:c5:31:6d:ba:b4:25:5d:d0:60:74:97:
1f:0a:9d:a1:23:2a:eb:4b:91:d0:96:5c:d9:fb:47:81:e4:7e:
3b:65:89:a9:6c:51:05:1e:86:07:03:47:ae:14:d7:64:e9:cc:
b7:9b:a6:c6:f1:5c:5d:83:0d:23:da:65:72:b8:2c:49:c9:87:
2e:17:a2:ec:83:2f:91:9a:77:81:b5:06:7a:b9:75:4a:5a:4f:
e9:1a:37:42:8c:ad:d5:0e:62:40:03:a9:f3:8b:84:83:db:7c:
f3:9a:71:92:1e:34:24:25:29:52:e0:f6:05:9a:0c:86:a2:f4:
47:2b:38:7b:d0:f4:e7:3c:86:34:7d:d5:ce:df:a2:08:d4:57:
3e:77:7b:86:d1:ea:89:6d:bf:52:5f:9b:02:b8:fb:d7:aa:c1:
ff:e0:fe:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:33:33 2026 by rpki-client