
$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft
File: 196DBD061B4577EF848600B17A266D689F5A70B5.mft (raw, json)
Hash identifier: ur+qnl5QLv3xxfBWEI/EuFscVZma/ZTuG4sRsGg3uzA=
Subject key identifier: 96:2B:37:DA:56:64:63:E2:9E:33:3C:97:8B:2E:7B:B7:0E:41:36:B6
Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5
Certificate issuer: /CN=196DBD061B4577EF848600B17A266D689F5A70B5
Certificate serial: 728D188A8008AEBA84627AE47932577866D17E54
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft
Manifest number: 0256
Signing time: Thu 16 Apr 2026 22:01:48 +0000
Manifest this update: Thu 16 Apr 2026 21:56:48 +0000
Manifest next update: Mon 20 Apr 2026 06:17:48 +0000
Files and hashes: 1: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: EDPK0eOxqBPQlG42EiZMre0RjhVvjul6NQmz0+X17bE=)
2: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 5lY4f9V94dB+03La5b3P91qI5RBjwa5CSpgEJJRGvxc=)
3: 196DBD061B4577EF848600B17A266D689F5A70B5.crl (hash: MdB9TTwT50yRAsQN5asMdQrtK8/swXAsfvkYn0BqP+Q=)
4: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: 34/R8QTjCFJsUx7prL6eX2eJ9Y/fnEucfem7nusLMB8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl
rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 06:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:8d:18:8a:80:08:ae:ba:84:62:7a:e4:79:32:57:78:66:d1:7e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5
Validity
Not Before: Apr 16 21:56:48 2026 GMT
Not After : Apr 20 06:17:48 2026 GMT
Subject: CN=962B37DA566463E29E333C978B2E7BB70E4136B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:77:bb:0f:90:3a:e5:3f:c3:3c:a6:8d:5f:
60:d7:36:28:ee:7f:81:04:7a:3a:eb:bf:4b:09:3f:
2f:20:be:5c:88:b0:f2:b7:e2:0a:83:0b:f3:99:f4:
43:67:71:cd:c3:3d:6a:ae:4c:06:6f:2d:3c:68:ec:
14:49:a9:b7:06:f6:06:99:e0:1b:9e:05:ea:02:6b:
dd:73:16:db:89:a0:42:2f:08:8f:3d:af:c8:6d:ad:
8e:87:8e:03:b0:e3:c5:a7:5f:48:99:95:ac:78:4a:
ae:a9:f3:b1:57:95:8c:bd:4b:07:da:b0:4c:0a:1e:
fa:35:e3:98:60:20:eb:bf:d8:61:1a:79:d9:58:97:
a6:d2:f2:a3:1b:33:43:b0:e2:18:25:74:58:b1:21:
c6:1a:be:4c:5b:b8:db:de:06:ab:67:b4:e1:66:c2:
51:3b:e1:2e:5e:ae:9b:80:2e:fc:d6:3f:93:76:f4:
59:ad:40:bb:75:c0:5a:ed:f7:1d:e6:7c:68:34:d5:
dc:e6:b2:84:e0:d6:1d:9a:f9:41:76:a4:98:4b:bf:
eb:ae:2d:f1:bc:9e:f2:d9:2b:69:94:65:a1:92:e3:
b7:3b:9e:59:ae:d6:ca:2f:ff:41:64:61:5a:d4:d6:
d2:23:d6:a8:91:04:3c:86:4e:4c:ee:0b:09:01:94:
fa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2B:37:DA:56:64:63:E2:9E:33:3C:97:8B:2E:7B:B7:0E:41:36:B6
X509v3 Authority Key Identifier:
keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:06:fe:0e:14:6f:60:3c:60:a4:32:a2:37:f9:a9:9d:03:a9:
f6:5b:b5:d6:d8:65:5b:74:c7:d0:57:88:0c:a8:5f:48:48:67:
63:c5:ae:06:be:a4:94:11:2f:79:a5:f6:93:66:77:16:32:71:
34:a6:1a:ca:92:34:af:15:a1:b9:83:6e:4a:73:2a:b0:25:a4:
5a:55:50:4c:6e:70:27:6f:0b:69:a2:6f:4f:3e:ac:23:70:1c:
ee:76:76:88:be:d2:8b:88:5f:2a:60:85:0a:5e:79:ad:d8:cd:
be:52:3c:2e:9e:a4:38:4b:30:7e:61:4e:30:05:0e:84:d7:a4:
0c:ca:71:c3:26:b2:01:ce:59:13:cc:44:02:e4:7f:27:d2:79:
b4:1a:f7:7b:9b:4e:49:c4:b2:da:34:e8:31:08:e2:59:9e:88:
51:df:f6:38:dd:a5:37:24:1c:cd:d6:b9:cf:f1:9b:f0:92:f5:
0c:e5:d1:a6:77:e4:c7:df:84:21:09:9e:da:f2:94:21:e4:74:
f4:c1:2d:aa:0b:c0:6b:9a:65:5a:90:1f:7c:9e:e4:c3:1c:95:
6e:8a:11:f7:a8:1e:e8:dd:d8:fd:a8:1a:5e:76:f3:f1:67:62:
9a:b4:55:09:62:41:02:9f:7c:3d:30:9f:97:ea:4a:35:cc:88:
05:3b:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:02:44 2026 by rpki-client