
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft
File: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft (raw, json)
Hash identifier: cwuQ2Dlb5HPXgm/L0AMmLJUHpBwMLfNg6dFLULLHLNo=
Subject key identifier: CC:3B:32:98:14:4F:23:32:FA:B9:6E:04:9C:A8:D9:BA:18:AC:6B:75
Authority key identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09
Certificate issuer: /CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609
Certificate serial: 4C4CBFF8D67B25F6B024284568D1BF0FB1FAAF27
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft
Manifest number: 0197
Signing time: Fri 17 Apr 2026 04:51:22 +0000
Manifest this update: Fri 17 Apr 2026 04:46:22 +0000
Manifest next update: Mon 20 Apr 2026 11:43:22 +0000
Files and hashes: 1: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: KYg2eP+qnyahabsQS5xdyRs5Ya80Q1XBZpzh8eR7p5s=)
2: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl (hash: JDaMLx7lMZUCJX/8nmSaGZFpbydhWrZnDjcNXg5jBt8=)
3: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: MC2FHNE5WiXQAhloZ+T+wgfggYtEdxQ3c82BHu7jCHA=)
4: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: dY9Wzss484cDHvQy3+/U0nuyLvB8FHOPJZ4fbRc99IE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl
rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 11:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:4c:bf:f8:d6:7b:25:f6:b0:24:28:45:68:d1:bf:0f:b1:fa:af:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609
Validity
Not Before: Apr 17 04:46:22 2026 GMT
Not After : Apr 20 11:43:22 2026 GMT
Subject: CN=CC3B3298144F2332FAB96E049CA8D9BA18AC6B75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:cb:28:0c:74:df:b7:a7:0d:02:59:75:60:
c2:54:2e:d2:ca:e0:4b:26:53:28:da:0c:49:82:e1:
7d:10:d9:cc:f5:e0:9c:fb:bc:1f:e1:61:af:9f:e1:
bc:5a:a1:94:62:2d:ea:42:7c:62:d1:5d:25:95:38:
65:69:26:be:67:3e:c6:a2:c4:d5:3a:72:fe:92:25:
ac:a3:51:7e:6e:50:99:38:8d:2e:3d:9b:cc:ef:68:
09:5e:22:a9:72:88:de:d6:c2:59:57:e7:d0:d4:c5:
b0:f4:c4:2e:8b:7c:18:d6:a3:00:7c:bc:f4:59:54:
a4:b7:a6:75:1e:c4:49:fb:55:54:5b:fc:6c:9e:6d:
97:2e:f9:92:1e:c5:02:24:1a:03:f4:42:80:90:5f:
94:ad:0d:98:a3:7b:86:be:3b:1e:d6:dd:5e:b9:a0:
2e:a7:59:8b:d8:3a:75:35:16:73:74:9f:7a:6a:39:
69:94:df:eb:18:d5:40:db:e8:8b:1e:26:d8:63:52:
a6:ad:fd:10:1d:57:2a:e6:21:ed:c5:84:51:e5:c7:
2f:3b:eb:9d:d2:68:c1:1b:87:0e:ad:da:ed:e7:3d:
5b:c2:5f:ef:0b:42:c9:c4:d4:89:bf:8c:61:c3:14:
35:48:29:e7:07:05:54:d3:48:9c:71:a8:1c:36:58:
a6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3B:32:98:14:4F:23:32:FA:B9:6E:04:9C:A8:D9:BA:18:AC:6B:75
X509v3 Authority Key Identifier:
keyid:83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c0:5b:a0:ba:18:12:77:73:4d:c3:f7:83:79:20:63:6f:30:
b7:26:bc:e9:76:24:42:3b:da:e9:c8:fe:6f:b9:02:4d:42:95:
83:31:58:23:0d:72:c9:01:a2:2e:73:a0:08:f8:ad:9f:cb:a0:
b9:36:ea:3f:bb:f2:ca:9d:82:ad:85:f2:53:d8:ff:dd:b5:69:
b1:32:4c:d5:49:8d:84:90:6c:50:e0:2e:e3:93:84:a3:a1:66:
8d:3e:f2:44:cc:c6:5f:3f:a1:ca:06:26:0c:4a:cd:58:5c:1d:
67:24:32:d8:42:7b:1c:99:1a:f6:cd:80:54:92:d1:b9:57:12:
27:e2:1b:1f:a5:33:35:ce:78:21:d5:c3:a2:89:7e:30:4d:13:
3b:c2:78:aa:98:f9:73:dd:2f:4f:fd:a0:14:2c:ab:bc:fc:c6:
fe:69:ac:6b:61:6c:6c:f3:f5:d0:6d:6a:2a:f2:80:8a:11:26:
23:03:d6:05:5c:0d:6c:f7:ff:4b:1e:b7:56:f9:11:b1:4a:3f:
66:bd:10:fe:35:0c:08:70:2b:3a:4e:a8:d1:f3:23:46:20:83:
8e:51:f5:b0:a7:1c:ab:9b:c4:43:8c:85:08:a5:28:53:c9:42:
f7:79:97:b1:3d:2c:53:3c:a6:37:7c:52:2e:8d:bb:4d:d0:be:
8a:62:86:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:22:15 2026 by rpki-client