
$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
File: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft (raw, json)
Hash identifier: Ukr+Jdsz/ZXdVLrk3cGRDfXp8jP9fSQoyHXVJ6zeCpM=
Subject key identifier: 36:D1:65:B7:54:9F:43:E2:B1:AA:9D:EF:AF:A5:24:CC:B1:D4:D3:69
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Certificate issuer: /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial: 7174DAC979672A21FF1EBD540EE5B7F1F1FD9FCB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
Manifest number: 057A
Signing time: Fri 17 Apr 2026 06:10:05 +0000
Manifest this update: Fri 17 Apr 2026 06:05:05 +0000
Manifest next update: Mon 20 Apr 2026 11:48:05 +0000
Files and hashes: 1: 3131302e352e39362e302f32302d3234203d3e203234353233.roa (hash: YQwpls/VIYk0HtO6le+F2vrKuryHDRtN3YkX83o6jq0=)
2: 3230332e3137342e382e302f32312d3234203d3e203234353233.roa (hash: CCYyG9Lvz2JHKUXuBts3OmPCfqvhkN40wl/1YoY63Gk=)
3: 323430323a313230303a3a2f33322d3438203d3e203234353233.roa (hash: RF31+hlg7a1h6KD8MpJ2iWEMUqzQM6jZSnJZLrwUpW8=)
4: 3230322e36322e31322e302f32322d3234203d3e203234353233.roa (hash: rkvfltc1XeXNlZR/3yH5i2rDhAOYYmSdXeT/IyFdjyk=)
5: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl (hash: 3BsqIUxM9nLTV0/wj4Utp01lA62RUxA0hgN1r0LzJmg=)
6: 34332e3234372e32312e302f32342d3234203d3e20313331373830.roa (hash: 75jsZ2/RYGs14ieUtfuhtsNjuwyC8On82jjkJYD2UMY=)
7: 3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (hash: O8/63tusLe+8VPLAAqnF2wRbO5seVh0CdjonLiqJ+TA=)
8: 34332e3234372e32302e302f32322d3234203d3e203234353233.roa (hash: 888dPGU9cyqiOHv+DUDaPyXxOutzs00FvG2o8cpIqPQ=)
9: 3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (hash: sHtP5I2fCL/ByfK8+QejX4fzdx/zVWKbMfpBHH71lYU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 11:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:74:da:c9:79:67:2a:21:ff:1e:bd:54:0e:e5:b7:f1:f1:fd:9f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Validity
Not Before: Apr 17 06:05:05 2026 GMT
Not After : Apr 20 11:48:05 2026 GMT
Subject: CN=36D165B7549F43E2B1AA9DEFAFA524CCB1D4D369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:ac:ce:1f:3a:95:db:45:db:d3:c9:7e:ec:
bb:19:20:00:83:6b:60:31:71:4f:22:49:4b:10:c2:
af:40:03:15:8d:d1:8d:f8:67:bc:02:37:55:32:f3:
88:a3:5e:ad:5e:f7:a8:d8:d0:65:9d:a4:d5:18:b2:
63:6a:ac:22:c0:25:f9:a2:bf:b5:53:c5:f3:f4:29:
e7:0c:c7:4a:b1:d8:d3:7d:56:f1:8b:36:86:0d:94:
bc:72:58:65:fc:8c:6e:fb:40:40:ad:ba:96:8c:72:
70:93:84:f4:16:f2:d4:d9:39:75:dd:a9:01:e9:ac:
52:91:dd:54:a2:c9:54:de:bd:fa:e4:28:ec:9a:af:
5d:92:05:33:1f:cc:3e:aa:9d:ab:20:6c:7d:c8:42:
54:bd:e9:5b:e0:d5:56:c6:9e:41:a9:74:f6:fd:ce:
59:85:9d:3f:d1:47:9d:57:0b:3b:24:64:84:50:44:
10:f0:94:f2:ff:d8:01:f1:bd:1b:c1:c9:19:23:7d:
f7:61:27:90:78:8b:e5:23:8c:57:37:8a:43:1e:0a:
99:9f:c7:1d:2a:2e:dd:fb:35:7b:fa:80:60:0a:c6:
20:a1:c0:3d:51:c7:12:0b:0b:c5:20:80:23:22:12:
1c:4d:de:89:d6:4f:4a:cc:c7:62:e1:11:eb:17:6b:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D1:65:B7:54:9F:43:E2:B1:AA:9D:EF:AF:A5:24:CC:B1:D4:D3:69
X509v3 Authority Key Identifier:
keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bf:81:a3:e0:9f:d4:9a:cb:0e:aa:34:c5:23:42:06:73:43:
04:21:17:df:b8:ca:7f:ea:be:a5:74:9e:c4:26:69:f6:15:5d:
69:c9:2f:8f:96:ea:ec:da:aa:01:53:0a:bb:c6:99:40:0c:a5:
0e:66:19:05:ab:4b:fa:b7:71:c9:c0:41:53:a0:94:7a:74:a5:
21:59:21:17:0b:03:97:65:1a:96:02:90:bc:12:d6:ec:5e:10:
ef:e7:42:11:c5:4a:a8:a6:2e:60:2f:c8:e5:da:1e:91:c7:69:
f5:55:f1:7a:ca:26:4a:11:43:12:4a:6f:9e:56:66:63:ff:5a:
13:41:15:93:29:65:9e:f9:a7:19:59:22:4f:a1:79:03:8e:98:
19:01:51:44:e7:ac:fe:f6:7b:f6:47:e2:93:0f:6d:80:c6:3c:
f8:aa:01:80:75:49:eb:1f:ee:7c:ed:e5:a8:d5:8c:1f:43:4c:
d3:4a:70:6a:fa:cb:73:bc:fa:e4:1d:99:7b:1b:92:a7:cb:6a:
63:ef:28:90:40:64:3e:08:61:4f:a0:2b:43:50:96:9a:16:c1:
a3:7a:2b:91:0f:7a:af:a9:66:de:9f:83:de:fd:3b:1c:5e:07:
1b:27:b8:bc:6e:83:eb:16:38:72:37:47:a5:6c:19:36:96:0d:
03:b3:eb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:43:02 2026 by rpki-client