
$ rpki-client -vvf repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
File: E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft (raw, json)
Hash identifier: HllgGpH3Xdyxp59BSopjpAKFaa+G4VGzKHmjR8SZwNg=
Subject key identifier: B6:0A:8B:2F:52:30:0E:61:C9:4B:10:31:11:44:EE:AC:0E:89:76:25
Authority key identifier: E6:E7:10:DA:CC:1F:6D:6D:D9:D7:8F:A6:11:7E:43:62:66:42:E6:F6
Certificate issuer: /CN=E6E710DACC1F6D6DD9D78FA6117E43626642E6F6
Certificate serial: 5F358BE8F380D9D337A466CE050F29802B6A734E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
Manifest number: 0153
Signing time: Fri 17 Apr 2026 23:01:05 +0000
Manifest this update: Fri 17 Apr 2026 22:56:05 +0000
Manifest next update: Tue 21 Apr 2026 03:15:05 +0000
Files and hashes: 1: 3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa (hash: lACmpGVHsyrMldz7jGg52ZaHGDv45aSE8H1uNtq/C7Q=)
2: E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl (hash: 7b2/QD1R2pavDVvf+VQBC0IC8sMS1IC3rIVPMQNC74k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl
rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 03:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:35:8b:e8:f3:80:d9:d3:37:a4:66:ce:05:0f:29:80:2b:6a:73:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6E710DACC1F6D6DD9D78FA6117E43626642E6F6
Validity
Not Before: Apr 17 22:56:05 2026 GMT
Not After : Apr 21 03:15:05 2026 GMT
Subject: CN=B60A8B2F52300E61C94B10311144EEAC0E897625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:9c:53:a9:fb:5d:2f:0f:d2:ef:69:e3:a2:
1e:73:48:59:90:2b:14:f7:00:1d:72:b9:3e:3a:c6:
cd:4c:db:91:1b:fb:f9:a8:56:75:1e:11:59:98:77:
cc:e6:0b:87:44:c9:c5:96:ad:02:88:69:a1:25:13:
3b:04:1e:1e:bf:81:5e:00:eb:2b:81:cb:d7:c5:31:
91:35:24:fb:e9:7a:74:d9:63:d1:68:93:03:ec:39:
68:55:37:c4:12:76:c7:95:18:61:34:a7:b4:36:1d:
33:fc:0e:1d:4d:62:59:7c:aa:89:eb:96:25:dc:2b:
24:08:6d:6b:27:8a:bf:5d:8a:b6:17:b8:66:1a:9f:
3e:e0:2c:23:88:34:cd:a6:d4:bb:42:7b:80:fb:96:
8c:6c:a2:f2:59:dd:0d:28:00:a6:b3:91:af:23:a8:
26:83:6e:07:8f:b1:db:05:1e:eb:1f:4a:67:d6:bc:
42:15:68:06:31:e8:ff:46:f4:3e:42:39:95:97:ed:
54:28:6a:a9:3c:26:57:f3:9d:aa:a8:04:fc:4c:25:
ef:3f:56:35:1c:82:5f:d5:3b:29:72:ef:32:6e:fa:
b9:f8:84:1b:d1:df:28:a1:8f:b1:f4:ab:1d:ef:67:
85:17:96:75:a0:1b:09:65:f5:2d:4d:ad:3a:2d:3b:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0A:8B:2F:52:30:0E:61:C9:4B:10:31:11:44:EE:AC:0E:89:76:25
X509v3 Authority Key Identifier:
keyid:E6:E7:10:DA:CC:1F:6D:6D:D9:D7:8F:A6:11:7E:43:62:66:42:E6:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:21:76:44:45:94:da:cb:c4:62:8f:41:c6:2a:91:63:7d:f1:
44:8b:c6:0f:20:9b:90:5a:1b:a1:c2:78:4d:dd:dc:27:ea:73:
09:1c:09:74:d9:03:3e:4d:99:37:fe:27:e0:32:8d:6c:30:13:
6b:0e:13:1d:e8:8a:98:cb:9d:75:0d:05:bb:8b:95:8b:5e:a7:
8a:5c:ba:b6:25:ad:db:c4:e7:ca:85:79:0e:a8:d7:b0:54:bb:
fb:fb:f8:9c:34:a2:37:ac:62:97:47:a9:a1:2c:fd:4d:c2:1c:
2c:5d:52:96:02:2b:ef:f2:4c:89:6f:65:d9:4e:4b:4d:4f:6f:
af:64:69:b8:66:c2:5e:f4:61:81:fd:e8:a1:f2:c6:8c:c4:83:
35:f0:11:aa:ef:d1:5f:e9:ad:84:fa:9d:59:31:9b:34:33:ac:
96:99:cd:30:de:d7:90:92:02:9d:48:60:67:91:32:bd:80:07:
cf:91:fe:b9:b7:ab:cc:18:38:33:70:37:fb:c5:66:28:27:cb:
63:50:dc:25:02:d3:a5:18:45:f6:0e:97:bc:0e:5b:84:94:d8:
7d:50:99:04:02:8b:de:04:42:04:4b:a7:af:bb:4a:1a:e4:ba:
f9:ef:4b:4a:23:96:ef:bc:12:88:2a:01:9e:b0:66:5a:41:5e:
ea:13:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:00:40 2026 by rpki-client