
$ rpki-client -vvf repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft
File: DA680D591E9E6B4622614F94CF255933B6749212.mft (raw, json)
Hash identifier: YV0T5o43Z91PuLBLEMijmX/jrpHvL7VbOtLKxF4/1LY=
Subject key identifier: 66:70:12:94:52:D7:DA:DB:17:6C:CC:5F:0D:7A:39:52:8D:EA:86:49
Authority key identifier: DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12
Certificate issuer: /CN=DA680D591E9E6B4622614F94CF255933B6749212
Certificate serial: 24DDE4249F95EF9FCC4B885208E64A8CA51BA347
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft
Manifest number: 0166
Signing time: Wed 15 Apr 2026 18:52:03 +0000
Manifest this update: Wed 15 Apr 2026 18:47:03 +0000
Manifest next update: Sat 18 Apr 2026 20:05:03 +0000
Files and hashes: 1: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: JJoDtolcZE+KR7sFSmDxYz3v23eUKolYl+DqisOigZw=)
2: DA680D591E9E6B4622614F94CF255933B6749212.crl (hash: iz8sF/GMFuWQYonenjH4IBJCFEmHWtVaeTNkYuZTs3U=)
3: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: 1Y22heZzLW1uLBI2dj0FhbkrNAtQ677tG4XL0MCWVic=)
4: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: VHpWx/ELEtp63dh9v37pcf0dfq0fnpuWymrPIJ3Qc9I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl
rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 20:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:dd:e4:24:9f:95:ef:9f:cc:4b:88:52:08:e6:4a:8c:a5:1b:a3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA680D591E9E6B4622614F94CF255933B6749212
Validity
Not Before: Apr 15 18:47:03 2026 GMT
Not After : Apr 18 20:05:03 2026 GMT
Subject: CN=6670129452D7DADB176CCC5F0D7A39528DEA8649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:47:26:c7:4f:79:ec:78:ba:1c:c1:f5:11:
df:12:d4:de:ab:80:6c:a6:9e:6b:6c:5c:3a:8b:3c:
c4:e9:16:75:8e:45:d9:95:34:58:ac:a3:77:b9:d2:
53:4c:a9:3f:d6:73:c1:ee:a6:10:1d:0c:5e:65:b9:
86:e0:68:e2:37:f2:a6:93:94:d8:60:21:af:80:57:
da:5f:e9:9b:93:e5:e8:3a:be:56:79:d2:45:97:ae:
62:43:5c:7f:ee:1c:4b:79:2a:88:c5:7d:a0:0f:b8:
24:52:ff:e8:3d:33:6a:cc:a9:fc:16:63:cc:5f:f2:
40:bc:a9:dd:93:ee:c8:2a:3a:1b:35:94:71:5b:fe:
d9:b1:5a:f6:35:b7:70:bd:78:61:8c:88:49:33:e8:
95:50:bd:55:0a:6e:cb:c8:33:50:0f:11:ee:fd:c2:
9c:88:8d:e0:b6:2d:9a:16:85:f5:67:74:1b:37:8f:
4f:29:ab:d2:67:ef:d9:12:e7:5d:a0:83:37:9d:37:
ca:2c:08:5b:10:38:d7:81:7c:19:54:c1:b3:04:00:
02:b2:7a:43:c5:7b:0f:31:5f:0e:85:00:54:db:b9:
c2:f4:a4:70:21:ef:97:4f:87:b5:c0:19:a9:c7:c5:
e6:b3:43:bf:3d:f6:6e:eb:3b:c1:31:50:5b:40:df:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:70:12:94:52:D7:DA:DB:17:6C:CC:5F:0D:7A:39:52:8D:EA:86:49
X509v3 Authority Key Identifier:
keyid:DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:05:36:3f:15:de:14:9b:50:3e:76:b4:97:72:88:0e:07:5d:
52:a1:b6:d9:ee:13:93:ae:e8:a0:b3:a0:bb:04:a4:d5:91:51:
2f:fd:cc:8c:73:05:07:cf:92:03:de:14:c6:57:34:1b:55:0e:
f7:26:da:99:aa:b7:39:4f:65:90:80:80:2c:42:b3:ce:14:9f:
ec:35:fc:ff:9f:b2:7b:17:3f:71:1a:97:d7:20:a5:fb:29:91:
f1:f9:f3:51:2c:9f:99:06:c9:5f:60:ad:bc:01:30:c0:71:df:
a7:43:f6:6b:ac:76:02:bc:af:ef:ac:13:91:35:c7:12:44:d9:
53:f9:60:1d:98:e1:44:3b:b9:f8:b5:e4:3f:4b:bc:a3:c6:45:
6f:96:12:0f:c6:9b:e4:09:8d:94:b7:04:4a:ea:54:b6:3c:8e:
63:13:f7:b6:a5:9d:6a:bd:d6:c8:c2:59:f9:f2:90:a7:9b:da:
2c:68:40:81:03:f9:0a:7c:89:2b:ea:6a:93:1e:f9:99:13:58:
2a:3e:16:ea:55:3e:a0:b3:4a:25:8b:9d:e2:58:0d:7f:cb:a1:
db:d5:a6:78:32:c3:6d:0c:23:62:7a:5a:5d:f2:d2:5b:6a:c2:
0f:4a:57:01:e0:5b:e0:e7:24:d4:9f:4e:73:66:da:23:22:53:
54:00:65:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:54:39 2026 by rpki-client