
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
File: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft (raw, json)
Hash identifier: SltP3pLHhQlCWTmB6oHtLEBwE3v8f0XFOazOPL6d0ys=
Subject key identifier: AE:78:E2:B6:B0:B4:8F:53:B0:79:0A:9B:77:83:E9:EF:03:04:60:82
Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC
Certificate issuer: /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
Certificate serial: 364FF8D5D4094B8B09E93D33F0ACC747906F88E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
Manifest number: 04C7
Signing time: Thu 16 Apr 2026 09:11:53 +0000
Manifest this update: Thu 16 Apr 2026 09:06:53 +0000
Manifest next update: Sun 19 Apr 2026 16:55:53 +0000
Files and hashes: 1: 3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (hash: tWY/6umjYIKYO4Yi6unWY6z8ANffH061XFtZ500p3RI=)
2: 3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa (hash: 0BDcpOLIRVqH1LqrD2HTtyqqS166kEUq73to5WDYQTw=)
3: 3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (hash: YDn+UkbOnA22nwNbzvw75sJ6kzbC7kgwQ8ntSkUIEQE=)
4: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl (hash: GGXSi/nfpLewBzwiORGC/2xmsxmomamY+5J34sphwV0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl
rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 16:55:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:4f:f8:d5:d4:09:4b:8b:09:e9:3d:33:f0:ac:c7:47:90:6f:88:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
Validity
Not Before: Apr 16 09:06:53 2026 GMT
Not After : Apr 19 16:55:53 2026 GMT
Subject: CN=AE78E2B6B0B48F53B0790A9B7783E9EF03046082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:40:83:75:80:8d:e6:44:f3:a8:9a:4b:fc:
2a:38:40:f0:f7:81:d0:4a:b3:79:6f:d4:e0:fe:61:
9b:ab:5e:dc:9b:5c:43:56:5b:9d:4c:03:b3:7e:5c:
3d:f8:e0:13:96:dc:b1:36:14:f4:fa:b4:e4:77:de:
0b:d3:09:3c:7c:e8:57:fa:c5:9e:34:15:3a:bd:f7:
a2:52:54:49:9c:19:83:96:4f:1c:13:cd:e3:7a:02:
a1:ad:71:69:fe:98:68:71:86:d8:6e:eb:13:d0:74:
fb:ec:a9:0f:df:a4:07:39:ff:8f:eb:88:47:5e:49:
00:41:3c:4d:d7:fb:17:4d:4c:43:ee:23:5b:5e:3d:
be:f6:cf:94:6b:91:3c:5b:4e:6c:8b:a6:5b:38:cb:
4f:88:a3:8b:e2:f4:e8:27:a5:cc:ad:da:71:31:67:
ce:74:84:3b:ca:e5:4a:52:81:9c:d1:a4:99:fb:2e:
c8:7a:fb:a4:f8:80:e8:15:53:4b:e6:59:6e:92:7e:
91:3c:95:42:f5:cf:18:a0:41:c3:84:98:25:4a:82:
f7:4a:fb:bf:f8:d4:20:b7:98:59:8d:53:d2:64:dd:
47:99:c6:10:c0:3b:3d:41:c3:06:e8:ca:8d:4b:2a:
68:bf:38:5e:b3:8b:c2:c2:ce:47:30:96:44:d3:48:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:78:E2:B6:B0:B4:8F:53:B0:79:0A:9B:77:83:E9:EF:03:04:60:82
X509v3 Authority Key Identifier:
keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:fa:79:7b:b4:7c:c4:8c:66:fd:f9:ae:f8:bb:2d:2c:c1:48:
a8:33:26:8f:ee:f9:c9:1f:9d:8d:18:c1:b1:f8:22:2c:dc:6d:
fb:5f:f8:79:8d:de:94:50:a2:47:cd:8e:84:cd:62:e1:d9:78:
73:8c:c1:d0:cb:5e:dd:4d:43:4e:a6:4c:19:bf:bc:7f:2e:87:
04:13:95:6c:c2:15:17:9d:6d:b0:a2:dc:60:18:e3:05:d7:77:
45:cb:fa:eb:44:f8:a8:db:b8:29:de:ed:bf:2b:06:62:92:44:
f2:85:ff:58:94:03:87:20:4f:bb:b8:8c:de:af:bf:8e:49:ca:
c3:22:0e:33:52:fb:c6:25:d2:c8:64:16:09:fa:16:3c:e9:5e:
ef:51:ff:46:4f:09:18:30:1d:0c:19:33:82:d9:fd:ef:56:ff:
0b:ec:9e:ae:08:89:6a:c1:49:1d:b0:97:55:19:13:ba:8d:ae:
24:1e:6b:89:ff:c2:13:19:48:88:a0:ed:72:df:0e:4c:11:88:
17:9e:23:ee:35:bc:89:38:59:96:bd:fb:77:ed:c9:d2:09:d6:
bf:a8:9d:fd:6d:2c:ee:bb:f1:5c:1d:51:4f:0c:95:dc:c5:e6:
e5:a1:72:0e:bc:a6:80:47:76:d4:57:3e:bf:68:09:23:d4:28:
5f:98:1e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:31:51 2026 by rpki-client