
$ rpki-client -vvf repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft
File: E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft (raw, json)
Hash identifier: Nof+ZxuFdGJjRcEnTmAxYR/Ppo7ATlS/RjonDYeUMMY=
Subject key identifier: A8:63:38:B7:45:73:6F:B6:72:36:E0:11:EF:AC:96:A9:86:94:B4:0C
Authority key identifier: E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A
Certificate issuer: /CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A
Certificate serial: 447DBB2ED44C59566C5C5F2363916A3223CA7F97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft
Manifest number: 04AC
Signing time: Wed 15 Apr 2026 23:51:59 +0000
Manifest this update: Wed 15 Apr 2026 23:46:59 +0000
Manifest next update: Sun 19 Apr 2026 08:17:59 +0000
Files and hashes: 1: E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl (hash: rbC1fFbsbTidg9eNE/q1v8P1c2sk9ZsY19i1m9C95L4=)
2: 3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa (hash: c+kaUi4De+/vm5rVBRPjrkkr1HTjdZlHY3+0tiasoH8=)
3: 323430353a633934303a3a2f33322d3332203d3e20313430303132.roa (hash: 0Ch00VaMiPntZrLpBaDMR1Y+kpCG3oxMGYz3YYRWkbY=)
4: 3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa (hash: ftn9K7p77+T5MEgcZnDpxyUXZFHtofZmQssGsi+FEgo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl
rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 08:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:7d:bb:2e:d4:4c:59:56:6c:5c:5f:23:63:91:6a:32:23:ca:7f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A
Validity
Not Before: Apr 15 23:46:59 2026 GMT
Not After : Apr 19 08:17:59 2026 GMT
Subject: CN=A86338B745736FB67236E011EFAC96A98694B40C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:a9:f3:7b:80:94:cf:4b:f7:42:8d:0a:a4:
97:a6:0a:c7:da:3e:0f:53:26:66:f7:0b:eb:8e:95:
9a:8e:ff:35:69:2f:25:2c:bb:af:c3:f2:ee:f3:e2:
5f:bd:cf:11:07:2d:9a:11:ac:45:05:7b:e8:18:db:
11:59:d0:7f:40:6c:80:42:f5:ca:a0:6d:3b:a0:55:
7b:72:58:a5:fe:3c:44:cf:44:32:07:ee:ef:06:8f:
25:b5:46:5d:ae:de:43:b5:4f:aa:49:50:15:99:11:
08:8a:b3:29:03:29:8e:bb:79:e3:fe:ef:4c:c6:70:
30:07:69:05:96:a0:1b:38:9e:47:3a:ca:e6:ed:90:
a8:b7:4a:73:2b:b9:a9:89:b1:b5:98:eb:a6:ff:49:
22:41:46:ae:aa:de:ac:0c:3c:d8:0f:30:ce:84:4d:
39:b8:ae:40:d7:5d:13:ac:91:92:57:db:4d:c6:b7:
22:9e:29:2f:95:4a:fe:08:f4:72:ee:f7:4b:dd:85:
a7:68:52:0c:15:1e:3b:c9:57:92:0e:0e:d5:7b:5f:
68:0c:25:04:b1:18:45:70:3f:61:ac:b1:37:17:fb:
dc:56:92:e3:fc:86:ac:ef:0e:c5:a6:3b:32:c3:cb:
a7:65:e5:97:e8:b5:23:76:4f:bc:8b:32:d8:6d:b3:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:63:38:B7:45:73:6F:B6:72:36:E0:11:EF:AC:96:A9:86:94:B4:0C
X509v3 Authority Key Identifier:
keyid:E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:39:65:16:fd:18:3a:16:0e:8d:09:90:7d:86:51:df:17:db:
de:8c:7a:eb:ef:05:35:6c:aa:09:4d:3f:5b:39:5b:86:91:a8:
8c:fc:6e:76:b7:ee:d7:7e:8d:ba:d1:97:53:d9:f7:62:b1:2b:
87:72:f6:b1:98:cd:e3:8f:6d:e3:e0:ec:a6:a6:09:e5:15:3d:
f2:38:dd:8e:8a:e2:04:45:75:7a:83:03:b8:ae:47:e0:47:d6:
4f:db:3c:51:f5:ed:be:c3:d6:50:8f:13:5a:71:7c:9a:4c:a2:
ef:f5:51:1a:4c:73:64:9c:e5:9a:26:05:d2:f8:30:6c:03:6b:
e3:21:a3:b0:e6:49:29:89:72:28:36:58:85:a0:0f:a3:18:1f:
0c:df:91:85:d1:d5:04:39:e6:50:4c:5d:42:ef:27:5d:83:d0:
37:92:0a:3b:9b:de:a2:41:71:e9:c2:b8:41:f0:54:45:37:4b:
3a:41:f8:d7:27:49:72:24:20:12:87:77:38:fb:bb:fd:14:5a:
7e:07:b8:88:bb:10:7f:96:7b:1f:d2:7f:4e:ed:ec:15:49:38:
56:1c:9a:c2:4e:e6:8c:09:8e:eb:3b:94:fd:f8:f7:41:a9:d6:
ff:7c:50:12:b9:9b:14:35:ba:f3:e7:7c:f8:3d:51:4f:d3:90:
6f:49:52:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:49 2026 by rpki-client