
$ rpki-client -vvf repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft
File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft (raw, json)
Hash identifier: V19L+hxCNJpYU92kCsAHekGdKfZzWWGTAktZ/f4CBCU=
Subject key identifier: 44:78:1D:B0:4C:9E:18:16:70:90:8C:35:70:C9:EB:0B:46:BA:04:1A
Authority key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01
Certificate issuer: /CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501
Certificate serial: 77B2D0155F36545505E17FAF8B9E05265A25B2C1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft
Manifest number: 0215
Signing time: Fri 17 Apr 2026 16:52:23 +0000
Manifest this update: Fri 17 Apr 2026 16:47:23 +0000
Manifest next update: Tue 21 Apr 2026 01:28:23 +0000
Files and hashes: 1: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: PoHfbIWBTAgg6GV0EgVNoxxVcZmuQWnVjc1te2yrEhM=)
2: D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl (hash: tTCZfva+ZvC+sp4wSTT3MKGaPnpXQ0EVpxsI3nUSAGk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl
rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 01:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:b2:d0:15:5f:36:54:55:05:e1:7f:af:8b:9e:05:26:5a:25:b2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501
Validity
Not Before: Apr 17 16:47:23 2026 GMT
Not After : Apr 21 01:28:23 2026 GMT
Subject: CN=44781DB04C9E181670908C3570C9EB0B46BA041A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:09:b4:ac:0c:cd:d3:44:2e:18:5f:34:28:
26:c3:c7:48:cc:55:cf:09:e1:e6:84:d7:38:be:12:
c0:20:4c:0c:c0:44:5e:3c:17:a7:58:e0:20:3c:b3:
cc:f3:5c:5e:9c:a4:10:cc:b6:bc:a8:46:62:db:4c:
50:49:42:12:68:54:a6:25:be:67:3a:02:95:81:7e:
6a:40:42:48:83:14:62:87:c0:b0:36:6e:d0:69:0a:
0e:6b:a8:4d:cf:42:79:c9:a2:33:48:32:06:79:5a:
85:44:4a:2b:6f:be:c6:d1:d1:8c:06:48:12:d8:c8:
e7:85:eb:92:f9:7a:89:06:c1:37:37:88:da:5b:af:
af:2d:79:08:25:4a:b0:9c:23:e0:7a:61:4f:5d:f1:
44:dc:5f:22:ca:2d:8e:33:70:9f:9b:7e:46:31:0c:
70:af:b7:88:cc:53:69:60:7a:d3:04:51:5b:17:a1:
81:7c:a8:8d:cd:ea:06:ef:c2:09:b3:9d:48:ba:ba:
78:f1:61:51:d6:94:60:53:10:a8:9b:b3:26:44:38:
74:20:4b:fa:40:c7:65:d5:42:2c:21:59:bc:3a:ab:
2f:fb:78:79:52:6c:53:2c:89:87:c7:c2:ec:fa:f1:
24:3c:c7:ae:9c:85:87:30:0a:3b:20:ca:14:da:de:
cd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:78:1D:B0:4C:9E:18:16:70:90:8C:35:70:C9:EB:0B:46:BA:04:1A
X509v3 Authority Key Identifier:
keyid:D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b4:91:78:e5:3a:b7:22:26:36:fc:4c:01:4a:04:14:9c:e6:
2b:a0:e8:76:3d:25:eb:b1:84:f4:21:97:01:b1:c1:06:e4:3f:
e9:ae:89:b0:ef:1d:0b:2b:cf:e2:35:dd:5c:ee:cf:96:ac:6f:
d3:35:db:ab:7b:f2:a5:48:4b:8f:fe:c6:19:ba:5b:66:a7:4b:
96:26:dc:68:fe:ce:9e:d9:62:54:f2:6c:10:bc:6b:c0:99:af:
b3:20:99:2a:42:e7:7d:64:ea:9f:52:26:e7:22:c0:7b:4b:b1:
46:6b:27:e8:dd:d8:ec:b9:eb:82:c7:9d:17:05:15:8b:f6:51:
74:af:0c:f5:72:22:d2:c8:43:23:17:c7:27:a2:30:bc:1a:c6:
78:95:87:c6:78:f1:8b:17:f6:c9:0a:bf:c8:5d:19:b3:e2:0d:
84:ee:09:5d:89:49:f5:15:83:57:28:58:72:52:54:61:56:5c:
0e:b6:85:42:d6:dd:ea:ab:d6:d4:81:48:21:48:f0:35:01:a8:
10:63:01:db:ee:73:08:6b:ba:5d:94:ed:45:4b:a2:71:80:c3:
1c:37:bd:21:61:c5:86:ae:30:1d:fc:e7:a9:60:cb:78:a5:0a:
b5:d8:c3:79:ba:b4:28:c0:06:68:59:33:0d:d9:32:ea:bc:4a:
c5:aa:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:22:32 2026 by rpki-client