
$ rpki-client -vvf repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft
File: D8F283D13C79D458461D8E83A481638975B3D90B.mft (raw, json)
Hash identifier: 1a3lBSuiR/nJXROSPweglJjrjcjrc9yGOwkcwt4ncNI=
Subject key identifier: 75:44:90:34:6E:AF:48:F4:A9:C8:E9:7A:E5:05:EE:57:57:2F:8F:E5
Authority key identifier: D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B
Certificate issuer: /CN=D8F283D13C79D458461D8E83A481638975B3D90B
Certificate serial: 346CAC1D1648D53E84E13C5B3AA49C6066CD22D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft
Manifest number: 0305
Signing time: Thu 16 Apr 2026 03:42:40 +0000
Manifest this update: Thu 16 Apr 2026 03:37:40 +0000
Manifest next update: Sun 19 Apr 2026 07:42:40 +0000
Files and hashes: 1: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: K0k+hTBsNJncES2akZnEP3mlQpVqZGGF0g7QmATvqxQ=)
2: D8F283D13C79D458461D8E83A481638975B3D90B.crl (hash: hVkD8JUokqQcrVwKlBepMtPdYgGYbxtWTDDWFGaG4l0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl
rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 07:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:6c:ac:1d:16:48:d5:3e:84:e1:3c:5b:3a:a4:9c:60:66:cd:22:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F283D13C79D458461D8E83A481638975B3D90B
Validity
Not Before: Apr 16 03:37:40 2026 GMT
Not After : Apr 19 07:42:40 2026 GMT
Subject: CN=754490346EAF48F4A9C8E97AE505EE57572F8FE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c2:f1:ab:1d:66:aa:af:af:c1:fd:be:3c:c8:
bc:39:4f:58:00:38:e0:82:4d:7d:ba:3c:e4:3d:06:
b0:70:8b:1d:0b:d7:6e:b6:8b:b8:58:74:3b:c4:35:
14:c1:89:28:f4:84:04:4a:82:3e:4d:d8:3b:d8:b9:
60:a9:eb:65:f1:7a:ea:91:e6:c6:ad:c4:0b:c4:06:
7d:b0:05:00:1d:4f:17:67:a7:ab:a0:8e:13:ee:59:
1a:9c:b0:ad:1c:f3:2d:74:9f:09:3c:c1:7c:14:44:
6d:f6:0b:17:b3:ec:be:7b:b9:e0:73:65:82:7f:c4:
b2:94:49:cc:9c:be:bb:ca:a3:7c:7d:7d:f0:d0:90:
ab:79:18:ee:f8:59:78:40:87:99:e4:81:b6:f7:73:
24:d8:70:3d:4b:d9:f6:31:2d:58:a9:a6:1a:44:ab:
24:90:23:88:57:03:ca:f1:5c:b0:7f:d7:db:9b:07:
79:1c:55:2c:0f:f5:82:85:6b:ec:42:35:cd:8b:ae:
3a:69:0d:d2:0f:9d:04:00:fd:ec:26:d7:58:70:f7:
f5:13:9d:a1:0c:fe:c2:99:38:33:7a:d6:04:53:26:
18:87:3b:a4:bd:10:c4:37:b9:53:8b:9a:df:c3:92:
0d:f5:20:e3:7a:d1:4e:d0:df:64:d4:a4:b2:70:a8:
c3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:44:90:34:6E:AF:48:F4:A9:C8:E9:7A:E5:05:EE:57:57:2F:8F:E5
X509v3 Authority Key Identifier:
keyid:D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:92:13:3a:d0:98:3d:76:29:f5:40:f8:03:44:1b:84:f9:fa:
4b:3c:09:1a:b6:f6:04:3b:24:15:e8:05:38:a3:98:63:8b:c6:
90:58:ca:e9:85:da:db:fc:40:2d:55:b0:d7:8b:c7:59:24:0b:
9f:f4:df:ad:29:1d:73:6f:64:7d:84:7a:79:c8:20:cf:b0:7a:
a0:ea:b6:ab:a9:3b:87:15:43:5f:1e:fe:27:8c:49:87:a8:eb:
d4:03:c0:3f:ed:19:df:56:c6:af:99:60:dd:cc:d3:23:70:2d:
39:b5:ee:ad:67:1a:9d:13:48:66:95:4d:54:20:69:10:c2:4a:
54:fd:70:1c:53:21:c8:a9:21:ad:3c:35:55:97:9f:05:ec:16:
ea:1f:46:cb:03:12:d3:f4:e9:3a:87:74:db:5e:0a:23:84:de:
e8:04:19:ba:b0:b8:87:b9:b6:dc:bb:33:b6:cf:31:8d:92:ee:
1c:ff:45:fc:3a:3f:9b:c1:5f:70:b1:c4:b1:64:ca:bd:d7:f3:
c9:f3:cc:4a:44:7a:ee:ad:a7:3d:50:92:1b:ee:af:1b:be:a7:
c4:11:ce:4d:b5:8d:c7:79:b9:b8:a8:92:99:6e:94:93:7c:96:
76:3f:21:ad:b9:bd:38:72:47:2e:82:f1:6b:52:54:07:ef:8b:
91:02:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:54 2026 by rpki-client