
$ rpki-client -vvf repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft
File: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft (raw, json)
Hash identifier: Jl811Mj9wb0DbFHNoxWArRRqLPOe2g7WQo7WFZ+Apq8=
Subject key identifier: 83:55:38:07:19:17:D6:8A:74:C0:7E:4D:E8:ED:CA:76:FD:DD:77:33
Authority key identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2
Certificate issuer: /CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2
Certificate serial: 778EFC0AA1D801D6AF8CE135FEFCED42593AD144
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft
Manifest number: 04F4
Signing time: Wed 15 Apr 2026 11:21:12 +0000
Manifest this update: Wed 15 Apr 2026 11:16:12 +0000
Manifest next update: Sat 18 Apr 2026 22:02:12 +0000
Files and hashes: 1: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: KCTbEne5sAEJgzltW4gEKsISpQ0m8wEifogPI/+bnQs=)
2: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl (hash: W+niKAHm7J7PSI7/TdDnvjRYtqAyIXw6sW0AqtQcH3g=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl
rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 22:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:8e:fc:0a:a1:d8:01:d6:af:8c:e1:35:fe:fc:ed:42:59:3a:d1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2
Validity
Not Before: Apr 15 11:16:12 2026 GMT
Not After : Apr 18 22:02:12 2026 GMT
Subject: CN=835538071917D68A74C07E4DE8EDCA76FDDD7733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:e8:c7:db:6f:3d:7c:6e:04:bd:5b:a3:d6:
16:a3:99:6a:9d:f0:60:38:15:1d:c0:8c:b5:52:29:
e3:28:a5:ba:0c:d7:c2:20:d3:0c:ad:2d:0c:6d:82:
29:db:0c:b7:17:0a:8b:6c:f1:dd:7d:a7:77:53:07:
41:03:3f:a0:40:03:81:71:39:12:81:6a:d1:6b:5c:
b6:69:e5:52:16:1e:ff:dd:d5:dc:28:ba:56:48:47:
01:f1:90:57:1b:9b:af:da:a2:ba:4e:c2:d5:ad:be:
48:3b:f7:50:b0:19:01:1e:2a:91:de:72:60:de:cf:
c2:ff:d0:67:24:0c:8f:27:ab:b9:3d:cd:16:fc:4c:
5e:22:22:20:77:10:5f:14:20:e4:13:7a:c6:dd:e9:
b5:a9:d5:c7:92:9a:90:48:30:bc:7a:69:cd:d4:24:
a0:f9:49:cf:5d:8a:d7:5b:c3:27:7a:bb:93:2c:23:
3f:92:d7:7d:df:3e:eb:84:6b:75:37:dc:cb:8f:20:
ad:8c:1e:57:99:d1:62:0a:91:22:99:46:71:2d:0a:
4f:23:ab:c8:83:b7:4a:4c:be:8d:a7:9a:ec:41:08:
22:fc:a3:66:fc:df:3d:17:ac:50:3b:22:7b:35:ce:
8b:04:4d:2b:2f:09:01:87:ae:a8:62:4c:8e:d1:a7:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:55:38:07:19:17:D6:8A:74:C0:7E:4D:E8:ED:CA:76:FD:DD:77:33
X509v3 Authority Key Identifier:
keyid:40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:81:5d:0e:72:80:9c:1b:55:a7:35:da:cb:5d:73:c2:11:1b:
fe:1f:da:f3:43:76:52:4e:25:b2:db:50:79:8e:9a:bc:20:50:
33:f4:ad:22:69:bf:bb:20:a9:92:e1:fb:8d:c4:c1:33:89:83:
99:05:bd:ff:11:97:f3:68:c5:5e:f4:68:ae:92:28:32:ca:ca:
aa:4f:25:be:0e:5d:88:e1:a6:57:6a:c0:ad:25:b5:2a:ad:46:
4a:5a:46:91:d1:eb:37:88:96:40:11:12:6a:99:a6:5e:25:c2:
4a:22:70:04:18:6a:9c:5f:36:e3:fb:f0:41:76:7a:4f:e3:30:
cd:b5:11:57:c0:3b:0b:09:84:c1:b7:9f:b8:ab:75:08:45:5a:
89:cf:80:f3:ee:c1:24:88:01:38:27:06:eb:cd:f7:64:bf:c1:
65:86:2d:52:a2:bc:14:11:a7:b8:0e:42:aa:00:bd:07:a4:01:
1b:a4:0b:a0:1b:82:84:20:ca:50:67:69:52:ee:a7:be:8a:01:
db:e5:e2:54:9c:a4:67:90:6b:46:7d:a7:fa:8f:0a:b5:c1:09:
c6:9e:ae:28:70:3f:41:13:35:78:55:aa:f6:7e:ca:ca:13:d8:
98:f6:6e:94:6e:b3:66:5b:4b:31:e6:54:3c:fd:39:5c:d4:ae:
b8:36:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:35:37 2026 by rpki-client