
$ rpki-client -vvf repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
File: 42467B1885830A9908EAE67935311639B090AA77.mft (raw, json)
Hash identifier: oyydESWf0YaTm23uxjwoi8ANKRFcgQyshoOLSU3IbT0=
Subject key identifier: 97:EC:B1:9D:C1:B0:4C:9F:17:B1:D3:B6:63:F2:B8:56:D3:D8:DF:D4
Authority key identifier: 42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77
Certificate issuer: /CN=42467B1885830A9908EAE67935311639B090AA77
Certificate serial: 47A874B00B8E56F64A6DEB7B2B2EF6DB87CF67EA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
Manifest number: 019C
Signing time: Wed 15 Apr 2026 11:21:58 +0000
Manifest this update: Wed 15 Apr 2026 11:16:58 +0000
Manifest next update: Sat 18 Apr 2026 19:14:58 +0000
Files and hashes: 1: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: DxKIyMO6WjD2qxH8BuKIvj+fKDvOwuaoHadDVnwc7A0=)
2: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: ZWtRALMquKEFwYIWcUiF1poTwDnT8MPEPPx4FTc8PK0=)
3: 42467B1885830A9908EAE67935311639B090AA77.crl (hash: /gK+B8SqV3I66Tf4ZForIJYNwQZcUlqSOvSBYm54+3c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl
rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 19:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a8:74:b0:0b:8e:56:f6:4a:6d:eb:7b:2b:2e:f6:db:87:cf:67:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42467B1885830A9908EAE67935311639B090AA77
Validity
Not Before: Apr 15 11:16:58 2026 GMT
Not After : Apr 18 19:14:58 2026 GMT
Subject: CN=97ECB19DC1B04C9F17B1D3B663F2B856D3D8DFD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:83:68:98:25:da:ec:c4:60:96:b4:43:a7:
38:3a:ca:d0:14:63:06:a4:72:e1:34:c5:68:f2:60:
ea:b0:8c:5e:9f:10:97:ca:c9:4e:e1:ae:12:f8:b2:
3a:39:4a:29:5d:3c:dd:d9:fd:38:b1:d8:93:31:7c:
39:73:65:75:9b:cf:e2:71:c7:5c:60:93:32:b8:f2:
14:ee:b1:90:1b:33:28:52:2f:3c:f7:45:7f:a2:64:
eb:db:c4:cd:f6:2b:92:37:b4:8d:6a:b1:38:07:2e:
30:0f:90:89:c3:dc:99:2f:ea:32:bf:55:6c:cc:68:
21:03:4e:ae:b9:05:10:55:e3:7e:4e:bc:95:08:7b:
24:f2:52:0e:42:88:59:5c:74:ec:d4:48:86:eb:65:
b2:97:de:eb:57:18:6a:0f:3c:80:86:52:db:52:d4:
91:f4:51:b6:9a:38:0e:7f:e7:ec:39:5a:7b:df:f7:
30:ae:eb:95:56:8e:07:ef:d7:9c:14:7e:bf:b8:a5:
c5:53:27:97:6a:16:78:45:2a:de:ef:44:64:ef:93:
40:3e:4f:78:29:e4:9b:a3:4c:83:82:f3:59:48:a2:
68:62:6d:70:54:b3:29:10:9d:14:1e:5e:e4:e0:52:
8e:b8:46:85:b5:bf:29:f6:24:ed:d6:d1:95:d7:b9:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EC:B1:9D:C1:B0:4C:9F:17:B1:D3:B6:63:F2:B8:56:D3:D8:DF:D4
X509v3 Authority Key Identifier:
keyid:42:46:7B:18:85:83:0A:99:08:EA:E6:79:35:31:16:39:B0:90:AA:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42467B1885830A9908EAE67935311639B090AA77.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/42467B1885830A9908EAE67935311639B090AA77.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:92:04:e2:01:ce:4e:f5:94:be:60:18:33:20:51:37:68:84:
9f:7f:18:df:84:d0:06:de:67:5c:be:32:9a:d0:66:d2:f7:3d:
09:70:07:9e:07:21:75:c6:a3:bc:d6:96:3e:2a:a6:d1:19:31:
78:ae:d5:ed:e3:44:c3:f7:5d:5a:f0:6f:35:d3:92:5b:56:10:
a2:d5:a4:eb:47:39:02:9a:e9:57:e5:dc:ab:5e:6d:78:57:cd:
b3:2e:0a:e8:26:03:05:3c:ec:94:ad:b1:78:7d:bd:1a:f6:3a:
9b:c1:28:95:7d:d0:8f:f7:94:ff:00:33:36:18:94:67:99:9d:
55:bf:f3:6c:19:90:6e:d9:64:77:73:83:1f:7a:26:17:04:28:
f1:45:a5:63:95:15:0a:03:a8:79:06:3c:39:9e:b1:29:db:ea:
64:08:e5:9b:4f:de:63:be:30:55:bc:cb:a2:ff:01:59:02:d9:
e1:f0:c4:0b:53:e7:c0:d4:8f:02:0d:3f:76:b6:87:d2:cc:1e:
53:f2:71:2c:3e:38:e8:96:78:30:fd:af:97:ab:24:6a:67:50:
ff:d7:82:3a:bc:bc:39:53:3a:ed:b9:7f:e9:27:f6:c6:92:d8:
99:1a:25:6e:e8:f3:2d:da:8d:92:81:0b:d3:31:21:a1:f8:c8:
67:c4:88:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:05:44 2026 by rpki-client