
$ rpki-client -vvf repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft
File: 9D23189F67CA669A4612567DD77CC645E3AFDF71.mft (raw, json)
Hash identifier: H/mYmfqblBMKxx+aP7lU8eL6AywGREgJBkFYPwI2KOw=
Subject key identifier: 6E:C5:ED:D0:B8:C0:EF:97:24:A0:77:6B:D5:87:60:A9:58:60:2E:AF
Authority key identifier: 9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71
Certificate issuer: /CN=9D23189F67CA669A4612567DD77CC645E3AFDF71
Certificate serial: 37E91D0B87A72B777D3406F4034231B3CA077314
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft
Manifest number: 014E
Signing time: Wed 15 Apr 2026 02:12:33 +0000
Manifest this update: Wed 15 Apr 2026 02:07:33 +0000
Manifest next update: Sat 18 Apr 2026 13:02:33 +0000
Files and hashes: 1: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: tYgibkzzAtGjQKdmBmuyqmxYY+aFNcFxJWH78M/BK54=)
2: 9D23189F67CA669A4612567DD77CC645E3AFDF71.crl (hash: Fjs5CMeUMvmJC8Mo64PXtKarMvGDymnKDHJh7+qtHhs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl
rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 13:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e9:1d:0b:87:a7:2b:77:7d:34:06:f4:03:42:31:b3:ca:07:73:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D23189F67CA669A4612567DD77CC645E3AFDF71
Validity
Not Before: Apr 15 02:07:33 2026 GMT
Not After : Apr 18 13:02:33 2026 GMT
Subject: CN=6EC5EDD0B8C0EF9724A0776BD58760A958602EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:f5:a5:57:b4:c1:6a:c9:95:c4:3b:ac:7b:
bf:f2:db:00:e1:d7:3e:08:c4:00:4d:ff:56:f0:e2:
24:df:3e:c8:04:ab:54:ac:a9:96:dc:e5:fb:05:69:
24:00:4b:a7:70:d3:38:26:bc:dc:38:72:f3:1a:61:
99:3a:be:35:5d:59:f6:c4:cc:85:70:16:38:09:9c:
c5:84:1d:ce:29:76:d5:9c:03:6b:da:dc:ed:40:53:
39:15:df:44:bc:b1:d6:32:ec:5e:f4:da:09:6f:fb:
c6:ce:85:33:3b:79:e3:59:4b:32:cb:4a:c3:36:50:
8f:75:6f:62:94:52:7d:14:df:29:7d:3e:a6:5f:15:
ad:9d:7c:4a:b3:79:41:d0:5c:71:c3:be:a5:41:78:
69:5e:c5:ed:c7:92:95:58:55:69:b6:75:27:8b:17:
c8:7f:26:3d:9d:93:e2:fd:11:e0:29:72:54:a5:b9:
c0:9a:f0:6a:86:ea:45:e5:d0:40:6e:59:0c:91:47:
83:17:7e:72:3d:09:f8:96:9d:4f:18:af:42:da:00:
da:df:2c:42:03:53:75:ca:c6:36:63:0d:5f:b5:48:
1f:90:a3:97:39:fd:9a:89:b2:20:0c:a0:09:51:ad:
22:63:bc:3a:fd:62:b0:ff:5a:38:54:88:f4:35:b4:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C5:ED:D0:B8:C0:EF:97:24:A0:77:6B:D5:87:60:A9:58:60:2E:AF
X509v3 Authority Key Identifier:
keyid:9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4a:ca:34:ce:df:9c:84:14:f0:2f:86:07:92:f9:b7:25:86:
6e:b5:3b:20:9f:d5:31:ce:39:19:56:66:61:b8:d5:a6:7f:af:
56:1b:c7:fc:86:e3:56:d2:c0:96:cf:6b:d8:33:1c:f8:6d:e5:
32:ab:6b:76:da:62:93:50:41:0c:b3:ba:72:ea:bb:f6:74:19:
ce:ae:54:54:7c:f2:36:32:8e:eb:b4:7e:29:f7:af:7d:54:d5:
19:17:97:c0:5f:cd:5b:07:f0:b3:cb:37:2a:9f:b2:2c:07:bd:
e0:53:76:a4:8a:43:a9:4b:91:f6:0c:24:e9:2d:1a:da:0b:a3:
32:ae:a5:25:57:ac:5a:93:9a:82:6c:9b:b1:de:aa:ca:13:68:
e4:e6:9f:1e:e0:14:48:7b:30:cb:55:9d:b1:3a:8a:1e:a9:0e:
30:af:4d:9e:ab:8e:90:2b:88:1a:52:2d:6c:67:b1:2a:64:00:
79:cf:32:e7:96:35:75:e0:94:45:f0:59:1d:e1:bf:1e:37:42:
ae:07:57:2c:b8:6a:e0:16:94:75:bd:dd:e5:92:6d:45:18:56:
59:29:6f:a2:bf:e4:ed:a8:f1:3b:21:ea:cb:50:70:92:1f:ad:
6d:14:29:35:0f:87:92:99:7b:43:33:7f:6c:98:1e:4e:db:e5:
f2:3e:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:51:56 2026 by rpki-client