
$ rpki-client -vvf repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
File: C7D4D30314160FDACB9582CF972E90EC10AE206F.mft (raw, json)
Hash identifier: Bh5PdpyMQbLOt62PIo2+heEoy9N2TKrHZp9DBpacIdg=
Subject key identifier: 71:3A:53:83:BC:A3:85:B1:8E:76:F7:2A:F2:82:5B:63:B2:D4:87:54
Authority key identifier: C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F
Certificate issuer: /CN=C7D4D30314160FDACB9582CF972E90EC10AE206F
Certificate serial: 5F782EFFE8B2A20C21D30275CA421EE9683B67F2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
Manifest number: 0568
Signing time: Sat 18 Apr 2026 02:01:46 +0000
Manifest this update: Sat 18 Apr 2026 01:56:46 +0000
Manifest next update: Tue 21 Apr 2026 02:06:46 +0000
Files and hashes: 1: 3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa (hash: xsM8R50wRfdlN5JweHjZIfTpmduLeILF/fWliK+i37M=)
2: C7D4D30314160FDACB9582CF972E90EC10AE206F.crl (hash: 3bqZULeZlSzI2aDDwVSMxhH58OmKNhRDIY1AFiKTaN0=)
3: 3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa (hash: llGSDUYqSL3OD7TtVsp6ArCR8mqRzLPhfJs1tW9L5wg=)
4: 323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa (hash: 4N6LRCptGvt5p5Z3fi0q5sQmHj3OTG0hHztRBZdu+t8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl
rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 02:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:78:2e:ff:e8:b2:a2:0c:21:d3:02:75:ca:42:1e:e9:68:3b:67:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7D4D30314160FDACB9582CF972E90EC10AE206F
Validity
Not Before: Apr 18 01:56:46 2026 GMT
Not After : Apr 21 02:06:46 2026 GMT
Subject: CN=713A5383BCA385B18E76F72AF2825B63B2D48754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:3c:12:6b:dd:65:47:c2:98:cc:ad:cc:da:
e1:d6:96:85:2d:8e:3a:69:aa:43:1a:28:7a:38:0e:
1d:ea:f5:47:bd:89:49:5d:fd:9d:36:3d:2f:13:c2:
17:a8:4b:a7:c4:53:ed:5f:ed:e5:b8:1c:e3:9a:34:
ea:7c:ed:3f:3e:ea:93:3b:cf:6d:7b:2f:df:d9:90:
33:91:41:fe:d2:89:88:8c:d8:4f:de:96:05:2d:28:
7f:0a:31:68:24:ad:55:b6:e9:d1:86:39:14:01:78:
d1:3d:cd:45:d0:55:64:03:8a:11:85:c6:c9:ad:7c:
d7:bf:ad:1a:d5:08:9d:0a:c0:42:b6:2e:dd:4a:39:
ee:d8:5f:dd:11:5a:da:22:12:23:f7:79:21:28:05:
21:f9:6c:8f:0a:b5:33:57:c7:b4:72:5c:d4:33:eb:
ef:78:8c:64:df:e4:18:f1:d5:75:4a:14:31:a2:17:
f1:f3:37:1c:f2:87:20:ca:2f:87:cb:1d:d0:64:c7:
15:bd:df:25:44:75:12:cd:cb:47:15:f7:0c:27:2e:
0c:ad:39:5b:b9:9f:ba:88:2d:01:f1:2a:7e:e0:4e:
96:f9:71:08:43:08:63:45:24:5a:e4:39:fd:3e:00:
1d:1d:7c:b2:c8:bc:f0:89:bd:42:2e:2a:9e:4c:77:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3A:53:83:BC:A3:85:B1:8E:76:F7:2A:F2:82:5B:63:B2:D4:87:54
X509v3 Authority Key Identifier:
keyid:C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:27:0b:87:47:3c:19:bc:5b:91:53:cd:32:70:13:31:ec:76:
82:da:ea:4f:9e:81:6f:59:24:a1:12:97:e2:30:ba:04:d0:17:
7e:5d:23:9a:50:6f:d2:bb:e9:8d:08:4f:1a:5b:26:d0:59:d3:
60:2f:2a:f8:27:d9:b9:6a:cf:36:b1:11:fb:ab:d6:96:f9:4e:
7e:6f:04:bd:90:db:6f:c6:7a:4d:3b:59:37:df:85:64:69:e9:
b6:09:3a:6a:ab:7f:6c:ef:ba:5d:2f:8e:09:f8:65:5b:e7:06:
25:f8:fb:2f:98:c5:f6:f3:b4:52:78:9f:e1:51:6e:0e:ac:0a:
76:04:ea:87:24:d7:6d:64:8a:38:4d:41:2d:23:5c:b5:08:b2:
aa:e7:10:c4:90:da:72:73:a0:3a:b2:a9:b6:9c:62:10:a1:d3:
96:95:3e:f1:92:6f:4c:b3:3b:bc:90:e0:c3:53:46:4e:70:1f:
2b:ab:6e:39:e0:ec:cb:66:3f:0e:52:24:c8:66:b1:57:dc:cc:
7f:c3:d8:30:81:4c:28:ff:3f:bc:ec:ce:45:98:2b:04:f7:31:
24:34:34:5b:23:88:4d:db:45:20:14:6d:ae:90:34:19:68:0b:
72:ce:df:a0:cf:2f:e1:66:86:0a:56:be:47:74:b9:3e:b3:82:
36:f4:9a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:43:39 2026 by rpki-client