
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft
File: 38992A0A64D724D15761F2F9410D85186E2311FE.mft (raw, json)
Hash identifier: JVXrBVuDSLAz/eUOd0LupOgVFg9EKfLoBq6ZEs94YDQ=
Subject key identifier: 17:F8:F8:07:21:5A:94:13:30:75:A4:87:E0:A7:22:BD:37:D7:2B:BD
Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE
Certificate issuer: /CN=38992A0A64D724D15761F2F9410D85186E2311FE
Certificate serial: 6463B5D6B04E557CD933BA10E3189CF9B0075EC4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft
Manifest number: 0214
Signing time: Thu 16 Apr 2026 22:40:49 +0000
Manifest this update: Thu 16 Apr 2026 22:35:49 +0000
Manifest next update: Mon 20 Apr 2026 02:51:49 +0000
Files and hashes: 1: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: kHcd0PiR+avo06lt/QU/A5Sa1D2RSw2rXV6RMIKGIO8=)
2: 38992A0A64D724D15761F2F9410D85186E2311FE.crl (hash: XC+2HGFQRiTumK4AfnpW6lgsGB7wiotSAk/B7z6ZFo4=)
3: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: d6Adr6ZZkYn4Jq27NkWDxIH+Fg4wpxOILm0JtNJ0Cfc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl
rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 02:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:63:b5:d6:b0:4e:55:7c:d9:33:ba:10:e3:18:9c:f9:b0:07:5e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE
Validity
Not Before: Apr 16 22:35:49 2026 GMT
Not After : Apr 20 02:51:49 2026 GMT
Subject: CN=17F8F807215A94133075A487E0A722BD37D72BBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:1b:08:f4:bd:e0:23:b2:e6:e2:a4:7b:a4:
71:86:4c:aa:91:02:00:5a:3a:ce:c1:e7:6a:8c:60:
9c:40:3e:6e:3a:a3:4a:48:f3:ff:f1:7f:22:e2:ad:
90:85:26:70:88:4a:fc:b2:e3:af:0e:91:98:ef:9d:
d8:90:5b:7e:1d:99:13:4e:03:11:76:b3:d1:a2:4c:
0e:da:60:2a:ca:2c:97:e3:ec:6c:9f:2f:d9:5a:03:
7c:ae:28:36:f4:95:4e:1a:10:68:66:a7:39:81:24:
5c:5c:66:07:6e:29:7c:d7:06:fe:1d:56:10:b0:b3:
c0:a0:a6:e6:ea:6f:38:d6:22:f2:3c:46:b2:de:a9:
24:a1:84:d2:ae:6e:5e:35:fb:1b:32:4e:e6:5e:f3:
32:02:5c:60:45:60:f7:d5:5b:f0:02:ef:79:de:f4:
e1:f2:57:de:e0:89:42:4b:17:39:a4:6f:26:ff:7a:
91:4b:e3:f5:bf:1f:b4:6b:5e:c8:c3:8c:7f:a5:c9:
de:bb:66:9a:82:62:81:7d:af:a0:c1:8d:64:f2:1f:
79:28:74:c7:5d:0e:ec:c5:c2:5e:0c:0a:56:61:72:
c2:23:49:0a:46:41:ef:36:74:9b:f5:c7:f2:f7:7b:
b9:dd:df:f2:24:ba:af:0c:26:83:1b:96:55:94:0f:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F8:F8:07:21:5A:94:13:30:75:A4:87:E0:A7:22:BD:37:D7:2B:BD
X509v3 Authority Key Identifier:
keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:32:e0:da:1c:ae:25:a6:4e:51:3e:ba:af:9f:4c:af:67:57:
f1:3c:e4:b0:66:0a:21:5f:14:46:10:3b:04:34:da:63:e7:8d:
05:27:eb:5f:2c:80:b3:43:cc:c7:e5:ba:4c:b1:7e:2e:77:8d:
86:75:90:cc:22:b6:84:50:53:7c:9a:b3:bf:4a:1d:11:b2:b0:
95:58:a4:bb:76:b4:e1:b8:50:66:54:df:bb:4e:01:c5:37:0d:
b7:72:97:fa:9b:37:89:a0:27:92:0d:b4:2a:12:27:fe:3a:01:
35:d5:71:9c:36:d7:39:71:38:5b:88:9f:47:db:a8:83:ba:91:
aa:6a:99:88:51:20:b9:78:0a:6e:72:5e:3b:e3:62:ff:56:7e:
94:e1:c8:81:a5:ff:88:a9:00:49:e4:fa:8e:59:4a:86:d5:23:
f9:5c:ce:2c:d7:68:82:97:d9:7f:e6:54:0b:be:e1:b8:e3:b7:
b8:f5:79:ac:f9:30:93:bb:d9:0b:44:d9:12:f7:77:7c:e6:e6:
57:0e:ae:1f:ae:cf:e2:56:8e:e2:d3:25:7d:b7:f1:0d:30:43:
8e:25:c8:c7:1e:1a:23:12:ff:94:55:29:25:9f:0c:31:a8:a3:
29:5d:fc:48:e0:ed:66:57:69:8d:9d:a8:10:3c:1c:9e:67:a6:
5d:1d:86:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:04:08 2026 by rpki-client