
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft
File: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft (raw, json)
Hash identifier: w9YcJMI6GG5+GKNMxQJNDj6VWq7xXrKLMAa+U2tPn48=
Subject key identifier: 8D:18:B3:CF:3A:17:15:B8:D2:A9:86:4A:1A:06:8B:41:23:CD:63:1E
Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96
Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
Certificate serial: 54FAA78D21D60EEC9253E23D3729220A0A1DC2A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft
Manifest number: 01E1
Signing time: Fri 17 Apr 2026 05:23:30 +0000
Manifest this update: Fri 17 Apr 2026 05:18:30 +0000
Manifest next update: Mon 20 Apr 2026 13:07:30 +0000
Files and hashes: 1: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: 2uzKcYnU72O5Xi/qNWscVRV4Rkx/gN5uCZaKNsBaNU0=)
2: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: LfOpJuNAFokj2V7rYopo5HcggK0Y2tZWYQ8zCV+kkgI=)
3: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: V7UBWkqs6QKqwFWqiHRbtYPN+2HNCy8jGoSJOuVxEjI=)
4: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl (hash: e8JZJWMgnKITQ/nKaWw99DhlY6UyWJXBSdRZQALi/fo=)
5: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: me4Thz++4xDOJptBVD82BSTSCpqoOV6Ns3JSmzTub28=)
6: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: Ay9vedxkj9NIxBoHD8ESz9hY10sIn+9uaHhelrAKQ/c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl
rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 13:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:fa:a7:8d:21:d6:0e:ec:92:53:e2:3d:37:29:22:0a:0a:1d:c2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96
Validity
Not Before: Apr 17 05:18:30 2026 GMT
Not After : Apr 20 13:07:30 2026 GMT
Subject: CN=8D18B3CF3A1715B8D2A9864A1A068B4123CD631E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:8b:7d:d8:44:6c:97:c1:2a:42:11:59:60:
70:35:b3:96:16:fb:7b:99:3f:e4:05:66:19:87:81:
3a:8a:6a:a0:3c:fc:e0:71:9a:8f:b3:05:3f:c1:5f:
28:d6:97:36:55:17:c2:5f:c7:e8:6d:37:ac:db:a7:
73:0b:77:4a:65:52:91:46:7f:57:4c:0c:45:6f:71:
ef:f9:17:ba:45:73:94:6c:4c:86:7a:84:3d:23:b1:
84:1e:9d:5f:d9:45:14:53:4f:7a:ac:0c:4a:b4:43:
f7:f3:b0:ff:d9:17:d4:e8:b9:b9:96:63:3a:7e:66:
35:9a:84:07:86:b6:77:0e:72:7c:03:17:00:0a:b0:
df:24:12:1f:df:77:0b:0c:d2:b1:8b:24:6b:ff:4f:
77:a6:61:e7:09:8a:73:37:3c:ab:0c:ad:00:44:dc:
b4:6b:cc:0d:b4:01:a0:26:97:3b:3e:cd:6f:e9:36:
0a:2d:ec:d7:ba:b3:9a:2d:46:45:d1:01:30:bf:01:
21:5f:f2:90:6b:ba:34:bd:5a:2e:e4:c2:12:37:56:
a4:79:9e:4c:70:37:3f:80:3c:3b:99:bc:3b:89:11:
fa:11:f7:1d:ee:e8:3a:95:2d:9e:5b:a2:81:8d:99:
6d:49:ba:7d:aa:39:8b:38:97:65:e7:df:06:29:6f:
a0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:18:B3:CF:3A:17:15:B8:D2:A9:86:4A:1A:06:8B:41:23:CD:63:1E
X509v3 Authority Key Identifier:
keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:92:83:ff:a5:03:86:2b:5f:f3:b9:bf:35:45:16:2a:5b:dc:
d0:9b:89:83:b0:cb:a2:9b:02:22:5e:83:f9:f8:6b:59:63:20:
86:91:32:07:22:4b:52:ac:ff:36:a0:e2:52:12:99:e0:39:c4:
28:97:24:16:e1:63:e6:52:79:46:7f:92:8f:74:07:2d:91:07:
d7:10:6e:10:57:c9:68:43:a0:1d:1d:cc:75:83:d1:2a:58:49:
d8:11:67:4c:71:15:fc:1a:12:25:cd:3a:66:84:76:73:bc:23:
92:2b:59:18:ee:be:67:60:cc:7c:34:b1:de:1c:97:27:19:14:
41:e2:f4:10:5a:41:c1:c8:60:74:cc:40:26:cc:8c:a2:0b:8c:
5b:da:15:65:04:a0:81:a6:42:64:0a:7d:2e:70:af:af:85:08:
89:70:d8:27:c5:a3:7b:b0:85:83:ec:b1:fc:83:f3:de:5f:ae:
70:e8:8b:f1:1b:42:de:4b:bd:38:28:2d:4e:64:a8:92:00:c4:
16:f4:77:d6:36:cc:2f:74:3e:91:cf:6d:1e:47:8a:7f:fc:f9:
9c:c9:3e:0f:e4:79:06:ce:c4:2e:de:49:c7:60:db:88:91:4b:
44:6e:d8:2d:01:ab:6e:24:f8:22:35:f6:a4:24:a4:5f:1b:82:
be:6a:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:34:06 2026 by rpki-client