
$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft
File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft (raw, json)
Hash identifier: Yoo5aY4xPeb7ExR8tbB9mEOCnJSu3DrFw6c9Xa9MDy0=
Subject key identifier: F5:F0:69:CD:4A:44:3F:D1:6A:94:1D:EB:B2:9A:EB:DD:99:99:58:E9
Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94
Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794
Certificate serial: 16507E916A77C05C695707A34AEDA9C6C57663A7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft
Manifest number: 0292
Signing time: Sun 19 Apr 2026 03:21:27 +0000
Manifest this update: Sun 19 Apr 2026 03:16:27 +0000
Manifest next update: Wed 22 Apr 2026 03:59:27 +0000
Files and hashes: 1: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: qAILqHxIh//KPfkbqwXoLWKwUymM3YkGbuohytyxcQQ=)
2: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl (hash: 3TNrrzzZFoL7I5VOIf4DvsYUwDjlYX4n6Wf8VFSrfug=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl
rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 03:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:50:7e:91:6a:77:c0:5c:69:57:07:a3:4a:ed:a9:c6:c5:76:63:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794
Validity
Not Before: Apr 19 03:16:27 2026 GMT
Not After : Apr 22 03:59:27 2026 GMT
Subject: CN=F5F069CD4A443FD16A941DEBB29AEBDD999958E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:b7:66:e9:90:f3:9b:f7:e9:b9:c9:61:c0:
0e:ba:ab:ab:e5:0d:f7:ee:72:05:28:e6:ba:4f:ad:
b4:d1:07:18:6d:ee:30:69:32:cf:7d:f9:15:0a:6a:
15:d5:94:8e:24:d7:71:d6:43:ab:7c:97:2a:8e:b0:
3e:40:e1:ec:88:22:83:b2:27:b7:ca:37:85:1e:df:
da:87:d4:ff:86:82:3f:d3:13:1b:e1:b4:25:12:13:
88:54:19:f4:03:d7:3b:cd:b5:f6:ac:0d:9a:d6:86:
f6:8e:a0:83:2c:f3:cf:a3:dd:33:2f:83:38:ae:b2:
8e:d9:cd:23:47:df:21:4d:92:59:11:a8:f9:2a:7f:
24:d4:14:b8:0d:6c:91:26:e8:f0:bc:b7:6a:c3:8c:
60:6d:e6:07:88:9a:c6:c8:87:6d:73:3c:62:a2:c4:
41:aa:7e:0f:d4:4b:81:e8:e3:bb:e8:6c:78:f1:1a:
8c:cc:55:d5:1e:32:59:5a:ac:bc:ed:bd:37:c7:06:
d0:2d:0b:d5:d7:9e:f9:6e:a8:74:0e:29:a0:ec:e4:
c7:99:3a:8d:5f:0f:05:b7:0b:63:8c:71:14:d9:f9:
8d:62:95:99:39:b8:e3:ed:50:12:ce:d6:95:94:42:
d5:b3:c9:5b:60:34:6a:49:03:2e:dc:41:a6:13:68:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F0:69:CD:4A:44:3F:D1:6A:94:1D:EB:B2:9A:EB:DD:99:99:58:E9
X509v3 Authority Key Identifier:
keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:72:9b:79:de:98:f6:3f:a2:bf:73:c9:35:2d:8f:7c:97:ae:
7e:c8:03:05:98:a3:9b:29:b7:06:c6:9b:6d:3d:62:e2:3b:8d:
b9:3f:47:b4:5e:d3:56:31:08:a8:af:6c:6a:21:c0:4b:9d:77:
f5:d0:ba:8c:bc:24:97:54:3c:67:a3:74:06:4f:81:21:7a:d2:
60:95:6d:49:b7:53:4b:2b:19:ef:36:fd:32:22:96:1b:0e:cc:
93:f9:ab:9d:86:6e:3e:db:b7:a3:26:06:ce:17:06:09:fb:c5:
22:9a:8f:44:48:1f:c4:7c:56:79:a5:f2:c1:36:aa:37:e0:45:
c0:71:61:3c:6c:a0:5b:81:ec:a2:f3:f5:c7:3f:c4:f3:ed:88:
c2:7c:d0:bf:82:b0:dd:06:6e:85:7e:8f:6e:5b:84:f6:aa:04:
66:59:5a:52:58:56:e2:09:a5:63:47:90:22:2e:63:f4:7d:02:
63:ab:07:b4:6b:87:14:be:9f:cb:a9:50:fd:8e:8a:6c:47:2f:
ef:ed:e0:09:f9:a1:18:5b:9e:55:95:88:ce:01:6c:0f:b5:48:
83:d6:0a:7f:d6:02:ff:8d:e6:d1:d0:78:53:65:08:00:35:39:
6b:2d:ef:3f:e1:5e:a3:1b:a5:05:94:87:bd:94:aa:4e:e3:1b:
78:2e:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:38:03 2026 by rpki-client