
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft
File: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft (raw, json)
Hash identifier: fW6rVUmxmWM33R0w2zahWIRs8FSwCfr6bu7+S48aGy4=
Subject key identifier: 23:35:F3:02:34:62:C1:53:5C:B8:DA:FD:4B:AD:C8:00:A7:5A:C7:44
Authority key identifier: A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5
Certificate issuer: /CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5
Certificate serial: 3C324838A0B49BA877F9FDFBB4619AE577B37E02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft
Manifest number: 01F8
Signing time: Fri 17 Apr 2026 03:41:22 +0000
Manifest this update: Fri 17 Apr 2026 03:36:22 +0000
Manifest next update: Mon 20 Apr 2026 06:59:22 +0000
Files and hashes: 1: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl (hash: mZpYov8zcEflAEqBfpmG9JcjLiqAGcOOuYkdySgr80Y=)
2: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: vGWib/ZMzGPAxY4ZeXyIPjhvX8AUDKQVTzcT6lw1mtE=)
3: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: 4LNzIiiVAjfAPDaN3C6qI+UuH36Wsb+t94eV+et+GFs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl
rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 06:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:32:48:38:a0:b4:9b:a8:77:f9:fd:fb:b4:61:9a:e5:77:b3:7e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5
Validity
Not Before: Apr 17 03:36:22 2026 GMT
Not After : Apr 20 06:59:22 2026 GMT
Subject: CN=2335F3023462C1535CB8DAFD4BADC800A75AC744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:cc:3b:36:35:80:13:63:5a:c8:af:af:a7:
88:9f:7e:7c:b3:c4:d1:9a:65:64:fd:03:97:8a:e5:
5d:5b:cb:df:df:89:01:e1:c0:37:dc:72:36:6d:fd:
16:96:7d:7b:3b:88:52:a0:20:79:9b:d4:42:58:e4:
57:eb:cb:a6:67:98:25:ba:cc:79:98:87:c4:31:b8:
6a:5d:22:12:79:81:3e:6f:13:31:47:a1:cf:a0:76:
12:8e:77:7c:ac:6e:55:82:b4:53:41:73:40:5a:77:
2a:1e:e0:2b:d5:c3:f2:95:e0:4f:27:4f:fa:52:8d:
50:a5:92:ee:9e:33:c6:2c:85:31:b0:de:9c:ff:dd:
92:1d:fe:bf:94:43:f6:5c:09:09:ce:76:f3:99:c5:
b4:b8:8d:8f:69:7f:43:a2:31:ba:aa:45:78:43:e7:
08:3d:11:68:a6:4f:f3:d5:89:bc:30:57:da:a1:80:
94:ac:3a:0d:54:62:7c:af:78:9a:7f:3e:ef:3c:21:
5a:a5:d9:b9:c2:8b:18:a0:9c:d6:cb:73:a7:33:d5:
39:eb:b8:a0:53:dc:a2:c9:f9:58:14:84:9e:4a:ef:
62:00:12:44:cf:c0:8d:43:07:35:50:2b:0b:57:e2:
ba:53:8b:25:8c:0d:88:5d:34:73:a0:a0:3c:c3:70:
79:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:35:F3:02:34:62:C1:53:5C:B8:DA:FD:4B:AD:C8:00:A7:5A:C7:44
X509v3 Authority Key Identifier:
keyid:A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a6:e5:78:f2:62:a0:f2:58:1c:b7:8c:dd:6d:38:26:9d:71:
f3:a2:7c:a4:33:e4:29:0a:ad:1d:2f:d7:59:6d:b1:93:c2:0d:
2a:7f:fc:f0:46:7c:df:e1:4f:75:35:86:2c:fe:1b:d7:ee:8c:
17:c8:c0:dc:21:e3:04:5d:81:24:a9:38:e1:ce:4e:c9:06:af:
3d:53:56:db:8b:1e:79:b1:8b:11:85:d3:3a:b0:55:ec:47:e1:
b1:b6:c2:d1:fc:11:8e:9e:2b:25:6f:1d:21:01:11:87:0b:90:
e0:cc:ef:50:21:82:d1:d6:f3:29:0a:4a:39:1d:d4:f6:bd:f4:
7a:eb:25:e7:de:d7:c5:d5:d9:54:45:61:6d:5d:70:4f:41:6e:
35:45:ff:4c:f9:43:d6:e2:14:0f:bd:80:07:d8:bd:fd:0d:7b:
91:92:aa:87:8a:76:aa:64:9e:f3:20:c2:d0:73:3b:6e:b2:e2:
94:7d:d8:9b:8e:b3:aa:ce:c7:3a:71:09:3a:08:bb:19:9b:ab:
e4:44:7e:52:87:de:5a:df:70:b2:3b:7b:c8:4b:88:ef:f2:f4:
f0:9b:24:ad:94:d6:c5:06:39:da:fb:70:e4:9f:94:97:20:34:
cb:ca:d5:4b:b9:05:32:ce:fc:92:0a:98:63:68:c1:02:a2:b3:
1b:1d:e8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:00 2026 by rpki-client