
$ rpki-client -vvf repo-rpki.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/72E90153B34DF85D4459456F6F7BE39270AF164E.mft
File: 72E90153B34DF85D4459456F6F7BE39270AF164E.mft (raw, json)
Hash identifier: QW+2XLDAJ/VPAS0hK4hRs8dKUbv/rd9r9AQ26ZEcWTw=
Subject key identifier: E1:AF:43:97:4C:30:AB:A6:03:6C:10:55:B3:F3:F7:96:67:BE:53:EF
Authority key identifier: 72:E9:01:53:B3:4D:F8:5D:44:59:45:6F:6F:7B:E3:92:70:AF:16:4E
Certificate issuer: /CN=72E90153B34DF85D4459456F6F7BE39270AF164E
Certificate serial: 6E334A035160B9B31B686D01D8B03B19813C6F67
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/72E90153B34DF85D4459456F6F7BE39270AF164E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/72E90153B34DF85D4459456F6F7BE39270AF164E.mft
Manifest number: 04
Signing time: Thu 16 Apr 2026 03:51:32 +0000
Manifest this update: Thu 16 Apr 2026 03:46:32 +0000
Manifest next update: Sun 19 Apr 2026 09:15:32 +0000
Files and hashes: 1: 72E90153B34DF85D4459456F6F7BE39270AF164E.crl (hash: lP3zlMsEUBQnFPdu0+X3YSsYXNOCXaGo6yW/9QEeZMk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/72E90153B34DF85D4459456F6F7BE39270AF164E.crl
rsync://repo-rpki.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/72E90153B34DF85D4459456F6F7BE39270AF164E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/72E90153B34DF85D4459456F6F7BE39270AF164E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 09:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:33:4a:03:51:60:b9:b3:1b:68:6d:01:d8:b0:3b:19:81:3c:6f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72E90153B34DF85D4459456F6F7BE39270AF164E
Validity
Not Before: Apr 16 03:46:32 2026 GMT
Not After : Apr 19 09:15:32 2026 GMT
Subject: CN=E1AF43974C30ABA6036C1055B3F3F79667BE53EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:4e:ed:52:c7:ea:09:5a:c8:5f:79:a5:c5:
c1:47:bd:49:09:d3:68:ad:0c:4d:ca:22:f2:73:7d:
7e:a9:e9:22:87:94:5a:52:f5:ee:ca:b5:04:7f:1f:
47:67:b3:ba:6f:6b:4b:57:32:31:bc:2d:a0:0d:b4:
e2:df:b4:d3:74:a9:f7:e7:3e:f4:46:c1:0d:41:5a:
40:0c:2b:aa:a4:9b:75:3b:0c:3b:0a:fe:ab:f9:99:
6a:00:7a:87:69:0d:31:eb:4d:29:f9:ea:54:d0:0b:
58:93:29:69:ec:d8:ec:a4:df:31:1d:b8:03:e3:ff:
d1:55:80:6d:33:a0:3e:ed:c7:c4:53:d0:55:e6:c8:
50:60:f3:86:65:79:33:05:cd:d2:e6:01:21:70:03:
c4:03:d2:ef:b6:fb:c5:20:b5:cd:e9:6d:1f:b2:e6:
b8:2e:8a:24:f5:f1:83:9c:96:65:2f:f8:87:6e:f2:
fa:cb:55:74:8d:56:64:ab:a6:74:8a:e0:ee:78:32:
44:79:8d:07:e4:86:d6:f8:97:da:a5:10:46:d1:26:
dc:84:42:54:c9:00:47:fd:e5:bf:e4:0d:fe:5d:02:
68:92:67:23:94:c1:b1:af:33:f0:8b:9f:be:17:3a:
2c:6b:e4:8a:14:8f:4c:4b:60:c3:89:19:86:99:72:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AF:43:97:4C:30:AB:A6:03:6C:10:55:B3:F3:F7:96:67:BE:53:EF
X509v3 Authority Key Identifier:
keyid:72:E9:01:53:B3:4D:F8:5D:44:59:45:6F:6F:7B:E3:92:70:AF:16:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/72E90153B34DF85D4459456F6F7BE39270AF164E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/72E90153B34DF85D4459456F6F7BE39270AF164E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/72E90153B34DF85D4459456F6F7BE39270AF164E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0e:7e:c8:b1:e9:17:37:a1:8f:65:29:0d:b3:55:04:f0:43:
75:7f:90:7f:5a:56:16:4d:14:fb:02:41:8d:21:1c:8d:91:a6:
be:bf:b8:9b:70:91:88:fd:65:16:37:5f:94:73:39:27:39:8e:
b7:8d:1f:4a:61:10:34:ab:e5:d7:60:a7:13:2f:5b:4e:d0:1d:
b3:06:a1:35:96:5a:48:05:6e:d6:e8:d9:88:65:ff:42:fe:5c:
3d:6d:8e:f2:e4:90:e6:92:ce:0c:80:65:2a:b1:b0:db:be:f9:
f6:0d:25:c0:f7:73:85:bc:28:16:68:36:21:77:3c:ae:51:49:
7c:9a:49:ff:45:fb:e6:a3:74:40:d5:e2:3f:cf:00:4b:53:c8:
20:09:0a:1e:c6:c3:bc:5c:73:9b:a6:f2:82:70:6a:6f:f2:50:
91:af:45:7b:78:03:16:6e:0b:8f:33:b7:08:e9:87:b0:b6:f6:
77:b9:40:20:f9:48:b7:55:6d:39:f9:8c:f9:4d:7f:15:64:25:
ac:d1:b4:b5:10:74:a6:0b:f1:8f:51:a3:53:18:8f:6e:c6:ef:
48:51:7e:a6:59:94:9e:6f:80:58:db:7a:df:8f:70:6a:b5:26:
af:42:f1:38:c3:32:3e:f5:76:84:46:ed:72:0f:01:cf:d1:88:
30:2e:a6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:13:28 2026 by rpki-client