
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft
File: A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft (raw, json)
Hash identifier: u6Pp9RFe5ydJPN4zlNis5r06armuvreanYZAbbZfARo=
Subject key identifier: 61:F5:C0:12:38:67:7C:00:46:86:7C:62:CD:B9:28:62:55:73:3B:3F
Authority key identifier: A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96
Certificate issuer: /CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596
Certificate serial: 24F5987BEE978160F97300A6B88A23AF1C6C2604
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft
Manifest number: 0176
Signing time: Sat 18 Apr 2026 10:11:34 +0000
Manifest this update: Sat 18 Apr 2026 10:06:34 +0000
Manifest next update: Tue 21 Apr 2026 12:56:34 +0000
Files and hashes: 1: A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl (hash: YBYxghG9Hyxrus6iWS0CPSaK5CQiO6nMSmUYG5Wu5ys=)
2: 3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (hash: DfqIL490+LsA+4agQ2y8Kna/SVON2TJhoIAx11noI9Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl
rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 12:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f5:98:7b:ee:97:81:60:f9:73:00:a6:b8:8a:23:af:1c:6c:26:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596
Validity
Not Before: Apr 18 10:06:34 2026 GMT
Not After : Apr 21 12:56:34 2026 GMT
Subject: CN=61F5C01238677C0046867C62CDB9286255733B3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:b5:38:1e:06:8b:92:88:14:1b:19:78:f9:
2c:25:c0:52:23:13:ac:4b:ed:ab:1f:ae:44:e9:a5:
80:ae:57:46:64:3d:3b:ad:ee:d1:4a:64:04:6d:64:
cf:1c:e8:bf:35:3e:df:6c:e6:4c:61:68:7b:43:73:
fb:a2:be:6b:24:1b:16:85:3e:81:df:d9:22:23:66:
25:8b:52:69:fb:40:92:60:69:d4:79:3f:d3:54:dd:
4c:78:12:27:58:27:73:b5:54:53:56:09:70:fa:70:
0e:87:c0:f2:76:24:a5:23:62:b7:a0:ea:07:23:0a:
62:5b:3a:e7:8b:0e:9a:32:75:2e:9a:1a:e6:f6:95:
ad:4c:b6:29:27:c2:fc:f5:45:71:39:e1:03:e5:fe:
e5:1c:f1:e3:a9:34:20:ba:65:eb:a7:cc:fe:a0:19:
d5:da:be:a4:a4:56:2b:2d:1d:c1:34:0d:6b:7d:3e:
18:d1:77:f8:f3:ee:1c:37:3b:43:45:3e:c7:f0:40:
8a:6f:11:0f:a8:a6:d3:73:52:df:9d:f7:f9:b9:3b:
bd:d7:a8:52:4e:8d:9c:98:f6:c0:75:5d:b7:3f:89:
83:12:88:98:a3:28:8e:10:db:53:c8:5e:65:d7:d7:
ad:2d:ab:11:ca:3d:f3:45:8d:fd:2f:cc:07:c9:47:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F5:C0:12:38:67:7C:00:46:86:7C:62:CD:B9:28:62:55:73:3B:3F
X509v3 Authority Key Identifier:
keyid:A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b3:96:5c:47:fe:fa:57:7c:0f:a2:ae:21:64:00:b9:ac:57:
b5:c3:7e:6b:c8:f6:65:dc:b5:6c:55:26:6a:d9:bf:35:ee:07:
8f:b3:bc:3d:95:2b:e2:ff:97:7b:9c:3b:eb:14:4b:7d:ca:2c:
c6:80:71:df:f6:8a:97:e6:04:e3:70:69:0f:27:4f:55:37:cd:
3d:1a:d7:4e:d3:c6:79:ff:fe:74:83:c2:26:d6:98:6d:00:9f:
dc:4b:2d:a3:f6:c3:72:78:a1:4a:43:ee:e0:f8:2a:d1:28:65:
75:08:71:42:02:ee:e8:7e:a6:bc:1a:f4:48:f7:18:6e:d9:26:
1b:6b:b6:b0:af:07:52:d2:ff:a0:ac:21:8a:26:f9:43:2e:49:
b0:77:ba:c6:9f:ac:7e:16:69:cd:7e:17:ae:a7:af:9a:4f:7c:
e9:c4:74:17:06:de:93:cf:d5:80:16:5e:e5:49:bc:d8:a1:e0:
a4:15:1f:a1:14:e6:c1:0e:67:86:ff:92:97:39:55:0d:5e:19:
ba:6c:e7:42:57:5e:ad:d0:e8:89:60:6b:67:c6:26:48:92:3a:
0b:66:cf:a8:a2:9e:3b:e8:c5:4b:2f:e1:83:02:83:33:d6:6f:
36:07:69:a2:1d:79:08:14:be:1f:e3:73:c7:3d:91:bd:91:bc:
37:e1:93:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:23:41 2026 by rpki-client