
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
File: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft (raw, json)
Hash identifier: hbmNBI2GXVSwcOAJ91F0r77gOdG2/Yhu0zh56QaXG9c=
Subject key identifier: E0:7A:76:8C:7F:F6:31:A3:FC:10:C0:00:E0:27:3F:F6:FE:3E:53:01
Authority key identifier: 31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94
Certificate issuer: /CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794
Certificate serial: 4796F5A39F6DD1E29AFB70C93A49048C407C5DA6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
Manifest number: 04D0
Signing time: Fri 17 Apr 2026 08:10:54 +0000
Manifest this update: Fri 17 Apr 2026 08:05:54 +0000
Manifest next update: Mon 20 Apr 2026 16:00:54 +0000
Files and hashes: 1: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: qCAW9RGYIwqqetHxh1sU75304B2gQRTVVqzCEK/6DVI=)
2: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl (hash: L3SCniY3B7wZjBiCH5jXyyALRexhXfV53vlcHHL6xrw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl
rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:96:f5:a3:9f:6d:d1:e2:9a:fb:70:c9:3a:49:04:8c:40:7c:5d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794
Validity
Not Before: Apr 17 08:05:54 2026 GMT
Not After : Apr 20 16:00:54 2026 GMT
Subject: CN=E07A768C7FF631A3FC10C000E0273FF6FE3E5301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a6:13:bf:f7:b3:4b:14:2f:cf:2e:38:be:be:
a4:31:70:12:80:49:9c:1e:f3:54:8d:95:95:78:ac:
71:09:2b:46:15:29:ec:f4:88:48:83:ea:6b:42:b9:
73:81:22:fc:86:2d:0f:e5:95:b6:b6:3a:9d:69:d3:
95:5a:e1:ab:76:0b:47:90:59:b8:fd:c5:76:d0:7c:
22:67:5f:b7:fd:90:a9:f0:9e:39:67:85:18:a7:7d:
13:fa:b3:63:4f:5d:e5:24:7c:7c:a2:a7:22:5e:2f:
a3:f0:9d:bc:61:d8:92:84:2f:ba:9a:ee:42:ad:a9:
29:a7:16:b6:ef:fa:c5:9e:58:37:9c:fb:b0:d0:6f:
cf:bf:9a:0c:c8:be:56:ab:5d:c0:12:90:6c:6b:9e:
f2:66:c0:92:db:aa:ef:c3:7f:e4:69:42:ad:e8:e3:
eb:b3:84:44:a8:ad:2d:25:de:3e:c2:8b:90:9f:12:
f4:97:26:e8:7b:b0:d3:b2:ac:aa:c2:97:fe:0c:a4:
3f:b0:07:f2:7d:e1:1a:d2:8d:37:c7:a9:2c:75:0f:
83:4e:f7:c4:1b:9f:95:8f:b7:a4:26:ec:97:46:47:
7c:d4:77:82:38:70:a4:b1:55:e3:ff:f3:40:0f:eb:
bf:26:3f:65:14:51:4d:67:74:4f:7e:25:00:d5:a7:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7A:76:8C:7F:F6:31:A3:FC:10:C0:00:E0:27:3F:F6:FE:3E:53:01
X509v3 Authority Key Identifier:
keyid:31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cd:b5:c2:51:47:f1:c1:82:3a:1c:94:eb:37:ca:9b:5a:51:
7d:dd:2a:6f:ce:be:25:df:8d:6e:df:3e:a5:7f:8c:73:b9:c9:
6e:0a:64:20:f8:c9:fd:ba:a2:31:14:a3:73:d4:7e:ba:06:61:
9b:cb:34:e7:92:01:9b:51:f7:cb:d3:bf:2c:bd:13:01:23:4c:
c5:5b:13:98:11:63:43:46:b4:6a:64:56:ea:05:76:8f:14:ab:
42:fe:e9:94:9f:1d:29:60:10:bc:75:18:b3:6b:7d:73:99:52:
00:50:df:c4:90:02:7c:99:98:d5:d5:06:1f:ba:45:d7:c7:56:
16:df:73:0a:d3:da:dd:e7:e3:f6:22:9b:7e:4b:76:22:58:26:
df:72:5b:73:0e:a4:f9:b6:d4:27:2b:3c:80:6f:f2:9b:0d:a2:
39:06:a7:e3:d2:c8:70:e8:69:bd:16:af:58:c4:69:13:b3:6d:
03:31:29:64:74:05:cc:cc:ae:af:e4:a6:16:f5:c7:42:e8:08:
f4:a1:c3:d3:76:a9:14:5e:89:14:a8:bc:4e:c5:b1:6e:42:1f:
84:cb:fb:65:96:92:06:64:5c:89:ee:a8:25:c7:b0:9d:7f:8d:
bb:45:c3:1a:b1:29:a2:fc:7d:ee:93:cc:3f:a1:bf:2d:19:3f:
42:5b:9e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:28 2026 by rpki-client