
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
File: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft (raw, json)
Hash identifier: fSiIQq++M95thzV4ZEROKk89QRxkCZT2lj5lPoFplRU=
Subject key identifier: BE:98:2B:76:A5:65:DB:A6:C1:5A:0D:70:B7:4F:9C:DF:52:DC:A3:CF
Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
Certificate issuer: /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Certificate serial: 31EA40C019DA987F02259FD31B8BFA6D7FA90026
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
Manifest number: 0190
Signing time: Thu 16 Apr 2026 10:51:38 +0000
Manifest this update: Thu 16 Apr 2026 10:46:38 +0000
Manifest next update: Sun 19 Apr 2026 15:35:38 +0000
Files and hashes: 1: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl (hash: YgtpoMd0zBPWhRotuZuC1ZMMIh+KcOnHkVged/ojH3A=)
2: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: DWfEMEPWxsUozNiwbgr8ihU7QhgizyAKxGEXUL32Nzc=)
3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: vmmdKTzGdj+WW7oR5Y7BlF5cHcjcyn2ZeY0vBD9tiWM=)
4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: +5s73n1GRDKOs1PLsu8AmlmjjmE1TE3hQKNaKdkD1e0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl
rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 15:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ea:40:c0:19:da:98:7f:02:25:9f:d3:1b:8b:fa:6d:7f:a9:00:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Validity
Not Before: Apr 16 10:46:38 2026 GMT
Not After : Apr 19 15:35:38 2026 GMT
Subject: CN=BE982B76A565DBA6C15A0D70B74F9CDF52DCA3CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:38:e2:e6:f2:8c:7f:c9:1a:4d:71:cd:91:
d4:e1:2a:63:7e:60:f0:5e:b5:90:70:a1:60:b3:bf:
0f:7c:53:0d:62:e6:a5:df:79:ee:5f:c6:d7:ef:58:
23:8e:e7:24:38:0c:27:a7:05:c8:da:74:23:30:10:
40:6d:bb:47:f8:b0:e6:2d:5a:bd:61:fb:b3:28:fd:
fd:16:0a:13:1c:f9:6f:08:17:63:f1:cc:e8:df:57:
3c:98:1f:d1:aa:d8:c6:e0:d1:db:02:fd:26:a8:19:
3a:ff:e0:6f:c8:4f:e0:6d:f9:24:eb:04:23:b4:bc:
a7:1e:c9:8e:9c:e9:fc:ca:dc:d2:53:e9:98:b3:1e:
52:1e:c3:9e:2b:af:f8:5b:42:36:26:40:09:ad:fd:
f1:14:ab:12:b3:fb:98:d4:2d:1d:23:4e:41:db:84:
35:45:fd:3f:d1:eb:2f:36:bc:f5:40:ce:fb:0d:4c:
cb:91:4e:d4:3a:ca:f3:d9:9e:4f:ab:05:3a:91:6c:
0a:00:77:79:84:11:d0:d3:69:ed:65:74:dc:23:3e:
ba:c3:a4:22:f1:b1:30:a6:ed:18:4b:e8:35:1e:02:
2e:04:a4:3a:4d:d3:85:4a:22:d1:59:fa:fd:87:4a:
18:4d:55:94:13:3f:ee:64:7e:30:5a:98:82:39:7a:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:98:2B:76:A5:65:DB:A6:C1:5A:0D:70:B7:4F:9C:DF:52:DC:A3:CF
X509v3 Authority Key Identifier:
keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6f:61:fb:bf:f3:89:5d:99:43:04:42:10:40:1b:bb:25:4b:
9a:95:43:0f:4a:7b:85:44:d7:a7:fb:19:db:8b:42:14:e9:07:
90:d3:ea:e3:24:e4:96:9e:de:e7:0d:65:c7:7b:2c:60:b6:7c:
70:a0:5c:07:59:a8:86:a1:78:8a:b7:d9:54:6a:69:66:5f:a2:
59:53:37:3d:dd:e3:1e:85:14:c0:55:b3:39:88:17:17:ac:33:
0f:7c:da:0c:4c:62:e3:02:7c:14:bb:ff:4b:41:de:6a:9c:46:
c8:b5:12:c2:eb:b1:56:b5:3d:56:7e:15:6c:93:cc:ca:72:df:
fc:a1:b1:76:24:25:66:4a:d4:01:92:63:3c:0a:d7:36:48:39:
de:34:89:7d:97:45:3c:c1:4f:38:30:05:cd:42:f8:47:85:8e:
1d:9c:72:4e:76:4b:6f:3a:2b:eb:f2:a8:79:85:9e:a7:0f:02:
34:77:1e:3a:68:7e:1e:a1:b4:82:a6:9b:b3:02:c0:42:59:4b:
5e:ac:4f:44:b3:3b:c3:ef:5d:76:4f:58:d6:6a:ce:03:0a:db:
dd:1d:41:16:75:1c:58:ed:d7:03:09:f2:69:f9:e5:8e:c9:a3:
c8:69:03:ff:d3:b4:ec:f0:3d:3f:85:a8:27:7c:cb:99:21:19:
22:41:a4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:16:37 2026 by rpki-client