
$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft
File: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json)
Hash identifier: Z31ZqnknaulfPF8VsQ7lpVpkWXBCDDNWpYEjh6kykMg=
Subject key identifier: 39:10:3E:43:80:CA:9C:6F:DA:57:8E:F0:CE:DE:51:5F:79:E5:47:31
Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17
Certificate issuer: /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317
Certificate serial: 74014CD4EA59AAFE797CC6EE7E092660D14167DD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft
Manifest number: 056A
Signing time: Wed 15 Apr 2026 20:51:57 +0000
Manifest this update: Wed 15 Apr 2026 20:46:57 +0000
Manifest next update: Sat 18 Apr 2026 23:56:57 +0000
Files and hashes: 1: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: Wxz1us2zDXrNlhEeTyTFEnQyiq4EZlAgNa1zZuJQj0g=)
2: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: aD6+P3ipT2aCftroTP0ujYAUpx1SmCKUGJlUH5A3SrM=)
3: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: x+jv4TuSSXN4C68g+x8B9A51ZwulAwMClt9iXTwzSmY=)
4: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (hash: I/le6Te2VCdo9U/Jhbu6/dBd0G0Ft1HGDM8GZasvyxk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl
rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 23:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:01:4c:d4:ea:59:aa:fe:79:7c:c6:ee:7e:09:26:60:d1:41:67:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317
Validity
Not Before: Apr 15 20:46:57 2026 GMT
Not After : Apr 18 23:56:57 2026 GMT
Subject: CN=39103E4380CA9C6FDA578EF0CEDE515F79E54731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:d2:38:33:83:b3:c3:0e:05:56:a2:23:ad:
88:c5:dc:d3:7e:0c:80:1d:7b:0d:3a:10:18:e0:d9:
37:4d:54:8a:2a:83:04:eb:d2:84:0c:f5:5e:dc:bb:
ad:6f:47:79:10:3c:62:b4:54:96:85:f4:8c:7b:28:
de:f0:33:94:ee:fb:0a:c5:50:e8:95:49:e9:24:c8:
77:44:fb:21:37:74:31:49:b0:08:2f:6e:aa:3e:be:
81:ef:04:a5:09:5d:98:7d:7b:47:d6:3e:c5:fe:d8:
63:3a:c8:87:e1:06:fa:d3:56:e0:c6:2b:83:0b:84:
7f:43:36:9f:38:17:91:76:6a:56:91:b7:59:e2:2b:
ad:ea:ed:93:36:b7:6f:a4:b9:20:69:f9:27:fb:af:
ee:87:83:4e:3f:38:ad:f5:f3:6f:f2:20:a1:2e:3c:
f3:01:58:78:f3:c0:85:7e:35:d9:bc:69:c7:58:19:
6c:f3:e0:35:d3:2a:8a:42:28:f7:cc:fd:04:46:17:
22:94:f4:4f:ba:5a:10:5e:3e:cb:61:40:5e:49:e7:
2c:a9:5f:fb:74:92:63:29:53:15:88:43:65:24:4f:
8b:c3:e0:4a:ae:a1:6c:3d:01:29:3d:00:4c:1d:f8:
03:9f:1e:95:70:d4:16:06:0c:f3:ed:7e:5e:c9:d6:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:10:3E:43:80:CA:9C:6F:DA:57:8E:F0:CE:DE:51:5F:79:E5:47:31
X509v3 Authority Key Identifier:
keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:85:83:94:ac:cf:52:f2:46:19:1c:4f:52:6b:20:c3:e0:f0:
5d:4d:27:c6:17:43:61:f7:fd:f9:7c:16:fc:01:7a:8a:58:65:
26:07:14:9f:92:4a:f7:b2:18:97:e8:18:b2:1a:14:49:a0:54:
a6:fb:b8:24:9a:bc:b5:bc:ac:83:71:dd:ab:1a:8e:69:3e:12:
43:31:ae:83:59:15:7c:00:36:9f:b9:f6:aa:88:e2:52:a7:3f:
24:f8:d0:92:b7:3b:0c:dd:dc:98:cd:c5:f0:98:0e:13:91:3f:
7a:d6:06:0d:48:7b:1c:d3:16:81:73:11:73:26:57:66:c2:4a:
c5:5c:02:45:ef:a5:82:9c:f0:31:5f:63:f9:f0:f3:c2:f5:55:
0e:00:e8:a8:82:ec:f9:f6:e7:7b:54:53:81:ab:44:8d:4b:99:
ec:5e:06:29:9c:53:9d:f3:9a:48:bd:74:27:a4:76:f9:c6:c1:
92:71:94:bb:06:2f:16:4e:d8:07:b7:eb:18:34:93:83:19:68:
bd:73:e2:6d:9d:fe:a7:49:7f:40:13:21:1b:ae:96:08:3a:c9:
d1:db:db:f3:df:d0:82:ca:b5:63:ed:48:e2:f7:89:51:5f:ba:
de:ff:94:2f:51:ae:8e:f7:4c:4f:ea:27:29:63:00:67:08:2b:
0a:be:84:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:35:48 2026 by rpki-client