
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft
File: C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft (raw, json)
Hash identifier: +MEQ0Qn7b1+uFHH+Y3+jooBP5n88rrPasgee78sAF+g=
Subject key identifier: 1E:6A:D3:AA:6B:D9:36:96:3D:DC:EA:C8:D8:B3:B2:A6:A8:16:AA:FD
Authority key identifier: C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1
Certificate issuer: /CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1
Certificate serial: 04A3C6CBE7AD48B33D67CD9750676A74429B6924
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft
Manifest number: 02EA
Signing time: Fri 17 Apr 2026 09:02:17 +0000
Manifest this update: Fri 17 Apr 2026 08:57:17 +0000
Manifest next update: Mon 20 Apr 2026 20:50:17 +0000
Files and hashes: 1: C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl (hash: CvZvOXaBfsAcUosy+I8t/fOFEotCByu8VwoG+k37CuA=)
2: 3130332e3137382e322e302f32332d3234203d3e20313431303737.roa (hash: 0uhRI2twQUwOL4bXfxCRKkhSHjZlw1Z+9ZZ7PGpOhe4=)
3: 3130332e3137382e322e302f32332d3233203d3e20313431303737.roa (hash: Ngt//yoU0gPCcUNIg6gz5GqlpjqLXC6sDwhwp1ku9U0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl
rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 20:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a3:c6:cb:e7:ad:48:b3:3d:67:cd:97:50:67:6a:74:42:9b:69:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1
Validity
Not Before: Apr 17 08:57:17 2026 GMT
Not After : Apr 20 20:50:17 2026 GMT
Subject: CN=1E6AD3AA6BD936963DDCEAC8D8B3B2A6A816AAFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:c9:a7:0f:46:df:88:7e:81:b0:30:7e:b1:
c2:8b:f7:a5:34:73:8e:cb:9b:2e:b4:16:0f:61:a1:
15:22:4d:cd:57:e1:e0:33:2b:18:7e:f3:57:52:ef:
09:8d:b1:26:c3:21:85:e1:7b:da:8e:b9:b1:76:f8:
fc:1e:8d:57:d2:6e:fe:8f:8d:a9:65:80:d4:6a:c1:
ec:e9:72:24:41:28:79:05:88:02:4c:06:ff:40:db:
d3:8e:da:97:e1:8b:35:48:b4:e6:18:88:05:7e:a5:
92:06:57:03:af:04:07:fa:31:28:bb:60:fe:10:f1:
bf:79:c7:cb:d4:d8:ef:0b:e0:46:5a:64:aa:68:db:
3b:be:37:56:d6:4e:48:a0:15:97:5e:62:58:55:db:
5b:4c:7d:b1:4c:54:54:9b:38:65:de:51:96:92:3f:
64:a2:a5:ca:a9:04:29:b1:0c:2b:f0:ff:bc:1a:e7:
8a:ee:f3:25:c5:35:92:ab:d5:9a:e2:1c:3d:ee:ca:
95:7c:f2:cb:c2:a6:c6:a1:98:0b:78:80:5c:41:fa:
b6:58:fb:48:e4:b5:b3:b3:06:7f:38:e7:bc:bb:aa:
b4:b7:a5:db:90:a7:00:1c:2d:f7:3e:28:34:ea:d3:
80:40:b1:12:b9:d9:56:a8:d9:12:4b:16:01:09:c0:
07:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6A:D3:AA:6B:D9:36:96:3D:DC:EA:C8:D8:B3:B2:A6:A8:16:AA:FD
X509v3 Authority Key Identifier:
keyid:C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b7:e2:18:de:c6:33:bb:77:71:89:14:df:74:0d:8e:fd:25:
40:c8:79:e4:49:bd:3c:c6:45:f7:34:ff:fd:c0:ef:0e:78:ed:
10:11:c5:81:0e:be:ff:b2:f3:21:f7:66:38:57:74:92:f8:f0:
2b:2a:d2:d4:7f:78:6e:95:de:97:c0:88:a7:06:43:cd:23:f0:
46:03:5d:fd:8f:35:c9:0c:89:a7:f3:86:56:dc:92:17:25:96:
ef:52:f8:fc:12:94:29:30:fc:97:c0:c9:cb:c2:0a:4f:6f:59:
f8:ce:a5:48:fa:75:13:c2:fe:c6:6c:4e:45:f7:62:4d:13:38:
62:69:56:2e:94:92:7d:e7:e8:2f:99:e8:da:0d:ea:e8:e0:a4:
d7:a9:c8:6d:9a:e7:44:81:76:cc:1e:53:a7:b0:bd:7f:64:9a:
ae:e5:5f:8a:35:10:70:9e:03:6b:1c:a5:4a:d5:ec:90:b9:1e:
ac:d2:40:7e:cc:a7:10:cf:7a:f4:f3:60:d6:cd:1a:2a:6b:b4:
f2:24:cb:a2:cd:15:8f:5a:33:5e:cc:a6:70:31:8f:aa:85:42:
2f:6c:9b:71:3a:a0:11:00:73:10:a9:00:0e:ee:75:e2:d5:29:
49:eb:1a:f1:9d:3a:f6:9f:ad:99:85:4f:a9:65:b9:52:98:91:
75:0f:5b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:15:22 2026 by rpki-client