
$ rpki-client -vvf repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft
File: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft (raw, json)
Hash identifier: hP87zMypEMVVAWMv14h3vaIeqfJq8onDub4yfl3H9+g=
Subject key identifier: BB:28:B3:8A:95:D0:C9:0E:52:8E:10:48:F8:59:DF:8B:43:EE:79:B9
Authority key identifier: 14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7
Certificate issuer: /CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7
Certificate serial: 2A91FBC50CB6AD1BF559567FF58F49FA74B6C239
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft
Manifest number: 0119
Signing time: Fri 17 Apr 2026 02:00:43 +0000
Manifest this update: Fri 17 Apr 2026 01:55:43 +0000
Manifest next update: Mon 20 Apr 2026 12:03:43 +0000
Files and hashes: 1: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl (hash: 5zLDZZ2ufJzu8E6d4AQwKsdTMT9y2ym4uYV8/VPe2Lk=)
2: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: Ags6qEj8G1tNVxqoTo734mNPZsVwGq25ouTkNgTgiXA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl
rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 12:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:91:fb:c5:0c:b6:ad:1b:f5:59:56:7f:f5:8f:49:fa:74:b6:c2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7
Validity
Not Before: Apr 17 01:55:43 2026 GMT
Not After : Apr 20 12:03:43 2026 GMT
Subject: CN=BB28B38A95D0C90E528E1048F859DF8B43EE79B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:bd:be:c9:d2:54:b2:3d:7e:bd:bd:31:69:d8:
70:be:d5:08:97:43:d2:45:12:8f:cb:56:3a:bb:64:
b9:b2:3d:f8:b2:f3:0e:79:1b:45:5e:18:0a:cd:0d:
8c:b0:70:2c:03:0a:67:1b:a7:73:42:88:f7:2b:1d:
11:a2:3b:45:4c:af:c5:ed:1d:29:4f:b5:34:93:9f:
45:b4:cc:b3:87:67:25:1d:5c:25:51:bc:2f:ea:08:
34:bc:4b:b3:9a:44:98:23:2e:d7:5c:40:9f:4b:13:
fd:ec:7f:da:c8:f6:9f:77:77:ee:42:3b:6c:95:41:
eb:6d:04:12:04:ea:81:88:d1:42:72:4c:74:9d:76:
24:f8:1f:5f:c0:44:66:92:d6:0e:17:87:a9:39:41:
77:64:23:e9:cb:4a:13:fd:68:68:d5:04:29:35:5c:
6a:bf:c1:c8:7b:7e:c3:da:ee:0a:80:98:34:2c:de:
af:30:e3:34:5d:2d:7a:06:3c:84:bb:63:e3:33:5f:
16:c0:39:50:0c:c8:fa:4a:2b:3c:65:3b:6c:40:8d:
44:13:c7:65:09:42:a4:c6:24:45:2a:b5:88:58:ee:
89:22:f5:2d:a1:0b:80:58:00:9f:e9:9e:c1:ff:2b:
4f:b2:57:b9:a8:e7:d1:e6:f4:96:4d:93:60:cc:5f:
8b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:28:B3:8A:95:D0:C9:0E:52:8E:10:48:F8:59:DF:8B:43:EE:79:B9
X509v3 Authority Key Identifier:
keyid:14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:15:a8:bd:c9:da:a0:b8:83:92:54:15:9f:87:43:0b:ba:26:
26:fd:67:67:2d:a8:74:16:ff:fa:6c:8b:3c:5f:a3:4f:2e:56:
f2:2d:71:5e:5a:ee:52:78:0b:a9:be:c6:fc:5b:ac:a6:5c:87:
a4:ec:15:34:e3:55:da:00:28:c4:04:82:3c:b7:7d:f9:2a:97:
d9:97:9e:1e:c5:f1:53:31:24:e4:2b:69:a5:1e:2e:fb:3a:40:
fc:62:ec:80:66:ae:d3:0f:9a:a2:39:39:40:b7:8b:09:d0:49:
b8:56:43:37:f7:13:12:88:ac:5a:73:39:2d:91:fa:3c:9d:3a:
ff:52:e6:58:34:40:c4:f2:0e:34:c9:c2:ae:90:c4:65:e8:ad:
d4:9e:28:37:f8:94:3b:e7:a6:b5:c7:5b:24:71:05:ec:a5:af:
ba:7a:05:ce:72:a4:f4:49:bf:8a:3c:16:84:86:65:8d:7e:86:
bc:47:5c:e0:e7:80:02:a9:13:80:4e:5c:45:a3:bf:61:d3:06:
24:9d:77:fa:88:8c:ce:29:c7:a7:f3:ec:b6:4d:23:f4:dd:9d:
15:8e:5b:4e:5c:97:02:87:e2:35:df:79:80:c6:0a:9a:aa:77:
5a:b7:5f:cc:2e:12:b7:86:71:bf:14:7b:4e:32:3e:b1:02:4c:
f2:af:ff:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:43 2026 by rpki-client