
$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft
File: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft (raw, json)
Hash identifier: URTkTyy1RDpzSVcRW4GcszDoZWi+NRoz2TfdkG4CpEQ=
Subject key identifier: 58:FB:01:C3:29:AC:17:18:A8:B8:C3:50:AA:7C:66:AD:F4:C0:1D:87
Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0
Certificate issuer: /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
Certificate serial: 03180F711BC8602C3EB04FDD6A8354BD5ABD497C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft
Manifest number: 0407
Signing time: Fri 17 Apr 2026 15:32:15 +0000
Manifest this update: Fri 17 Apr 2026 15:27:15 +0000
Manifest next update: Tue 21 Apr 2026 03:30:15 +0000
Files and hashes: 1: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: v7Ey731jJwlD4HvgKBVZcbXNxnHRRgslCOi7jV3EI/A=)
2: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: 4JnfTGjY9X7X8+n4/R+zY+BatEjhdtcbcnnxtg34W0k=)
3: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: gpChKqdsCYOp/lH5E0Zrms5qo7Kcyfa0mYD/MLgV2Ps=)
4: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: x7A5/ydvWW7sOuPV1cJAWpXthBYyUBZokt+o03RLsFU=)
5: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl (hash: rk8MzIzCD43ovT7EolareRb+ttL5tmBMQjXUahZkO+w=)
6: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: 2GOcbt6lKgz0uDS+iD9xaVBtEJLrOlEfoFcSzaU8sBw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl
rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 03:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:18:0f:71:1b:c8:60:2c:3e:b0:4f:dd:6a:83:54:bd:5a:bd:49:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
Validity
Not Before: Apr 17 15:27:15 2026 GMT
Not After : Apr 21 03:30:15 2026 GMT
Subject: CN=58FB01C329AC1718A8B8C350AA7C66ADF4C01D87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4e:e3:69:24:d0:eb:76:30:24:5b:1b:50:83:
f3:02:47:ec:e1:be:3d:1d:58:7b:4b:91:c9:91:6d:
5e:2a:f0:88:0a:5d:46:34:83:10:9d:76:89:93:7c:
68:67:f4:1b:d1:d5:2b:e1:17:d5:b6:3f:46:32:df:
9d:4f:31:76:99:e9:1a:06:d7:97:d2:5e:3f:49:42:
55:3e:ce:a3:9a:b7:04:d8:b1:e6:2c:33:61:ef:e9:
a6:91:96:3f:35:03:98:1d:db:12:f6:52:a4:61:53:
58:98:c6:7e:40:59:42:cf:2e:85:bf:33:6d:a1:08:
5b:47:50:f3:f3:48:b6:bb:d9:ce:29:77:60:27:e1:
79:f0:86:f8:fc:2b:d4:0b:2f:f7:0f:4b:19:6d:82:
eb:37:49:9f:e6:35:a1:51:99:6f:d6:54:57:28:8f:
8b:23:77:87:d9:3a:16:cc:82:d8:ed:46:c0:e4:53:
9d:61:ae:4d:e6:e9:c0:ce:be:c9:59:3a:66:33:44:
da:7c:63:42:b8:a0:5f:a0:22:25:77:3d:58:dd:df:
38:7c:3e:7b:16:7f:01:11:1c:12:49:0a:27:64:e5:
7d:54:f6:12:84:1a:97:2c:49:a2:92:6f:b4:cc:5e:
b0:a2:c8:1b:81:5e:28:36:ab:87:cf:a8:69:50:3a:
02:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FB:01:C3:29:AC:17:18:A8:B8:C3:50:AA:7C:66:AD:F4:C0:1D:87
X509v3 Authority Key Identifier:
keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e1:c3:32:3a:04:bf:03:47:76:c5:60:73:d6:06:ea:72:ff:
fd:48:ac:7d:0a:38:99:6c:85:50:63:70:4f:75:4a:59:00:c2:
c0:7c:5a:ec:7c:5b:56:a2:32:91:16:ff:63:9b:c3:3f:b5:fd:
e6:7e:a8:8d:9d:60:e4:03:a8:78:8b:b6:ba:13:a4:5f:b7:25:
8a:2d:03:e2:c9:67:72:64:5a:eb:3a:b8:ef:74:1b:d2:fc:9e:
d0:45:6c:36:88:b6:ad:ad:4e:93:42:00:8a:91:b3:4e:63:af:
41:21:5e:01:c3:05:c8:b6:ca:c1:a0:89:64:5a:d3:7c:87:b0:
db:3d:7f:29:28:3f:d2:79:70:e2:af:de:23:ef:7d:b0:4e:74:
fb:47:cb:f8:41:f9:94:6c:fb:67:bf:3e:9b:4d:60:59:da:c3:
f2:f2:f7:b9:bf:4b:c9:4e:05:c6:a7:e1:31:5a:26:c8:cc:1c:
1c:04:83:86:1c:1e:e7:59:73:76:4a:99:0f:2b:dd:c1:87:43:
2d:56:eb:4b:9d:d0:0b:70:a1:6c:d6:89:0c:8e:f1:bf:cd:f4:
c0:b6:4e:24:e7:b0:46:30:29:25:11:b0:8d:64:21:ca:e5:6f:
06:ac:ec:45:09:8c:de:e8:93:e6:16:31:05:78:08:3e:e1:95:
02:c0:91:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:05:30 2026 by rpki-client