
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
File: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft (raw, json)
Hash identifier: KJMdC/xwL9Zll0QlynW3Vp/A9aUR2UeOgvuNRfx0K5o=
Subject key identifier: 09:CF:61:97:BC:C9:4A:91:DF:A1:C8:B9:65:57:18:0E:31:BE:F9:91
Authority key identifier: A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82
Certificate issuer: /CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782
Certificate serial: 50722C460CA2B2B5B486CDDD860CFEE06D73BAAD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
Manifest number: E6
Signing time: Fri 17 Apr 2026 18:20:56 +0000
Manifest this update: Fri 17 Apr 2026 18:15:56 +0000
Manifest next update: Tue 21 Apr 2026 01:54:56 +0000
Files and hashes: 1: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl (hash: IZxd++owjPSBPjA5Zz0WGr1B5d1TnwkBbsdL74Xx5zI=)
2: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: +4jn9yUTCERVA3g9fI3ooLPb8eRAkmcilsOk4E3ZshQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl
rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 01:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:72:2c:46:0c:a2:b2:b5:b4:86:cd:dd:86:0c:fe:e0:6d:73:ba:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782
Validity
Not Before: Apr 17 18:15:56 2026 GMT
Not After : Apr 21 01:54:56 2026 GMT
Subject: CN=09CF6197BCC94A91DFA1C8B96557180E31BEF991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:f3:f2:db:cb:57:20:e7:d6:71:ca:aa:cc:
40:48:a9:f9:61:c1:95:f8:94:e1:2e:7c:b0:a5:97:
94:e6:f7:50:da:95:b8:41:b8:4a:13:1d:2d:20:1c:
e9:84:5a:a5:21:91:1f:c8:ff:41:19:15:bc:e3:2f:
7d:8d:bc:3b:d7:3e:ba:10:8b:79:e7:07:2d:30:12:
23:84:f3:59:c1:86:e3:bb:7f:da:8e:8c:a2:13:fe:
45:05:48:d9:8a:d0:ca:0d:2b:83:93:62:a5:98:33:
51:b1:ba:d4:30:0b:5e:cf:72:9f:61:31:23:65:b6:
dd:80:34:a4:26:63:3e:0d:d4:8a:4c:85:10:3e:1d:
f1:4f:5e:c2:68:b5:ab:bb:0f:5a:b2:e1:aa:0e:8d:
9d:e5:0f:2c:10:6f:71:63:c6:88:99:32:84:a6:b6:
b5:54:0e:ab:07:be:e0:55:a0:13:ef:c4:32:98:18:
9a:a6:a5:aa:d4:7d:10:e7:4f:15:47:8e:be:75:d9:
59:80:a9:30:b6:e8:6f:dd:8f:95:63:11:a4:e9:46:
fc:7e:d1:76:97:14:e4:d9:75:a3:0e:0e:a9:93:00:
48:8a:64:32:a5:e2:ff:12:44:1c:1c:4a:0d:72:9b:
fb:be:a6:a7:d2:c6:10:88:90:bb:c9:2f:25:13:9f:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CF:61:97:BC:C9:4A:91:DF:A1:C8:B9:65:57:18:0E:31:BE:F9:91
X509v3 Authority Key Identifier:
keyid:A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3a:d9:f9:f2:d8:27:51:19:24:e1:ab:ef:17:da:d9:2b:de:
b5:d0:58:48:67:d9:50:6a:6a:31:12:ce:1b:f0:51:8a:25:38:
c6:da:c9:ee:a0:70:a2:a4:04:6b:c6:17:db:2f:cb:a5:36:0b:
e7:f2:72:3a:04:c9:ae:1b:3f:60:29:fa:a2:ce:02:4a:a7:c7:
ba:10:88:48:09:8b:50:75:08:26:bc:0a:79:22:25:80:9b:3e:
6f:f0:d9:49:e0:d3:4a:84:01:5b:1a:f0:41:ed:c3:68:96:98:
2b:ed:8c:12:0b:e4:58:eb:11:27:20:f2:ba:09:3a:21:35:55:
80:46:02:9b:e2:3f:ca:fc:23:f7:c9:55:06:b6:76:c1:2e:c5:
13:15:c3:d9:6c:f3:86:07:cb:75:c6:37:d1:ee:ea:f6:72:97:
fe:20:a9:0d:9c:50:99:7b:95:00:1f:c1:fd:6b:e0:08:41:2b:
0b:4a:51:55:70:92:e3:21:45:31:c9:ea:e7:fa:f5:d0:31:99:
e4:a7:02:11:06:7f:e1:96:d6:7f:ad:5b:b4:d6:78:3b:bc:e4:
02:a1:4e:32:aa:c7:d9:97:1c:e0:76:43:66:56:ec:d0:56:61:
21:f0:72:20:69:dd:64:5d:7b:15:21:f7:d9:bb:fe:11:1d:95:
6b:b4:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:45:59 2026 by rpki-client