
$ rpki-client -vvf repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft
File: E64D2B2A02A172B64A71F75C753571C841216A21.mft (raw, json)
Hash identifier: xZStuQLLiJl/Ta+QYvHiNX8XKVtHqDGHDUu9NhI5amI=
Subject key identifier: AB:86:8E:67:DD:A1:A8:E1:AB:D1:54:D8:8A:C6:00:F9:E2:75:0E:11
Authority key identifier: E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21
Certificate issuer: /CN=E64D2B2A02A172B64A71F75C753571C841216A21
Certificate serial: 3151A3D8431E6BAC6B4E4A45C616104BD0F0956E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft
Manifest number: 0111
Signing time: Sat 18 Apr 2026 06:40:57 +0000
Manifest this update: Sat 18 Apr 2026 06:35:57 +0000
Manifest next update: Tue 21 Apr 2026 14:14:57 +0000
Files and hashes: 1: E64D2B2A02A172B64A71F75C753571C841216A21.crl (hash: J/2ESiOogAwgEQ3/qkS/s09kPuAlX8GovDHpCwdLtaM=)
2: 3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (hash: 3wY6YhGHW2FNk89iUabtEb3voGoMeSvrsN+5cal1TNI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl
rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 14:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:51:a3:d8:43:1e:6b:ac:6b:4e:4a:45:c6:16:10:4b:d0:f0:95:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E64D2B2A02A172B64A71F75C753571C841216A21
Validity
Not Before: Apr 18 06:35:57 2026 GMT
Not After : Apr 21 14:14:57 2026 GMT
Subject: CN=AB868E67DDA1A8E1ABD154D88AC600F9E2750E11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:92:19:74:0e:7c:3a:d8:5b:f1:6f:f7:56:
c3:7c:15:52:db:bd:5c:39:d2:f5:03:51:70:87:09:
5b:d6:54:65:4e:79:b5:60:49:f9:89:3d:d4:fc:62:
e7:f7:85:08:20:22:2f:ed:8b:a8:f4:a8:4a:5f:25:
5c:12:16:f6:7a:9e:c7:81:ec:81:ff:ae:af:92:e5:
a3:e5:eb:f8:16:30:ee:38:ac:91:3b:74:65:14:80:
03:c2:a6:49:72:9e:cc:6e:a2:1e:0b:ab:d4:0e:9d:
36:8c:49:c6:67:0d:11:86:e4:5d:0e:f3:80:a5:37:
e2:bf:03:6b:54:9a:35:2a:7c:37:ae:f5:ef:35:a8:
0c:8b:9a:76:00:f1:ee:0d:bc:6d:0f:b5:aa:2e:d7:
81:db:31:f6:2e:30:3b:60:d1:71:d3:7f:c4:b1:c0:
d1:f9:f1:89:44:4e:b2:f7:09:bb:71:b0:77:a7:f2:
f3:04:3b:ef:5b:66:e8:81:6e:98:46:c9:12:7a:d8:
c8:10:b6:95:78:1f:09:92:fc:6b:7c:31:d8:63:9f:
cc:6f:f5:51:72:69:ae:a4:23:b0:6b:b6:cb:e6:7e:
35:7b:be:46:a4:06:36:e7:4d:fe:29:ec:f2:24:3f:
11:a8:97:14:58:9e:86:71:39:ca:cf:d3:c3:19:77:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:86:8E:67:DD:A1:A8:E1:AB:D1:54:D8:8A:C6:00:F9:E2:75:0E:11
X509v3 Authority Key Identifier:
keyid:E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ae:74:0d:7f:35:43:36:b1:b7:f5:ab:f4:8d:81:ef:99:85:
16:f1:e1:aa:3b:ca:9f:ce:4f:64:5f:2d:fd:81:c6:c0:8e:de:
eb:54:58:f8:c7:ce:17:30:f6:65:5c:26:31:73:75:00:99:ca:
c8:ce:20:e1:0f:df:1a:96:6c:d0:15:b2:c8:6a:77:6e:69:2e:
ad:be:12:d7:68:e0:97:20:95:cd:05:b7:a7:cb:ba:d6:a5:d5:
fe:fb:ae:36:7f:e0:fa:75:73:9e:be:c0:ea:2d:5a:02:33:66:
16:71:91:4d:99:af:00:b0:be:f8:4d:a3:71:2c:6b:5d:9d:79:
bc:3e:5b:4c:11:5a:c8:28:78:c0:0c:d7:ad:95:82:71:8a:3a:
8f:d9:fc:ec:fe:d4:0f:48:f3:0d:be:94:46:8f:6e:15:cf:60:
7f:c1:b2:3f:67:3f:ef:1b:8b:84:08:69:c2:45:e6:1d:9e:a3:
55:08:98:46:90:94:6c:5d:77:91:80:51:ea:07:bf:c5:49:99:
eb:c9:fc:31:dc:11:76:73:13:e3:be:73:65:31:d0:1f:08:e3:
51:1c:d0:e2:3f:19:56:b2:d1:dd:21:ad:6e:ee:7c:68:36:f5:
96:1d:60:55:d6:3d:1b:91:85:76:d9:91:62:11:b1:c0:db:d6:
be:e0:c0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:51 2026 by rpki-client