
$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft
File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json)
Hash identifier: pavU0bmpTd8utt5tWtzcCO5VgtFO0dRlZdkhCospSsU=
Subject key identifier: 83:40:11:69:A2:CF:F4:46:81:64:03:51:95:C2:A2:14:E0:FF:34:39
Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70
Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70
Certificate serial: 4E17EEAC6A29921FD6710C3E5E0B912E71307CFB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft
Manifest number: 0187
Signing time: Sun 19 Apr 2026 16:22:36 +0000
Manifest this update: Sun 19 Apr 2026 16:17:36 +0000
Manifest next update: Thu 23 Apr 2026 03:27:36 +0000
Files and hashes: 1: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: cLToJ49OKqVQRgjYGYNvWnWnJYTEY5LWx4h5YZdNEfg=)
2: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: o9Iy2b4hwAGkt3Y4TryGyhD5v3aIWF2Cs1igkXEHTtU=)
3: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: TTBU1STvQaNI1wpqoaj9bG2m/T27T+WPjYQLtuioWoo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl
rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 20:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:17:ee:ac:6a:29:92:1f:d6:71:0c:3e:5e:0b:91:2e:71:30:7c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70
Validity
Not Before: Apr 19 16:17:36 2026 GMT
Not After : Apr 23 03:27:36 2026 GMT
Subject: CN=83401169A2CFF4468164035195C2A214E0FF3439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:cd:fb:b5:b4:ad:e9:a0:1d:25:34:43:ef:
78:6f:2b:a0:67:a7:69:5f:a8:5f:6d:d9:ec:3a:4b:
4c:fd:40:86:dc:35:b5:32:4f:d8:dc:05:e7:ab:47:
c2:85:8f:3a:c2:00:e8:39:d9:e9:ce:32:f3:4a:38:
c3:d3:60:9a:11:82:81:1c:7e:03:a5:8b:7c:7e:6a:
1e:b5:10:3c:1a:f0:de:f1:59:eb:3a:f1:56:8a:72:
12:44:0e:ff:90:15:99:f5:3f:2f:61:34:65:c4:2a:
d6:30:96:1c:13:89:99:13:b7:42:bd:f3:64:f9:ee:
0c:f8:df:fc:32:6f:ab:5d:99:f6:9b:e6:28:6e:8e:
d1:2e:48:92:ec:85:bd:66:e4:76:ca:3a:6d:23:43:
eb:c0:15:a5:93:ee:fd:48:a3:8a:48:ff:77:95:7c:
b0:0d:33:3a:e3:51:9b:c3:0d:1b:f6:f7:c5:05:69:
30:6d:ef:b6:61:16:cc:c7:b3:41:bb:49:04:08:27:
d9:ca:74:ad:b9:a6:c3:e1:47:e8:29:a0:02:fb:bd:
c3:ad:2f:fd:96:94:ee:dd:5a:8a:3a:89:e6:08:69:
c1:19:1c:74:ff:19:3c:80:71:d5:ad:f8:f1:63:de:
53:51:e2:8b:fd:f5:ae:f9:f6:54:16:23:cd:f6:83:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:40:11:69:A2:CF:F4:46:81:64:03:51:95:C2:A2:14:E0:FF:34:39
X509v3 Authority Key Identifier:
keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5a:f5:36:c7:c7:fc:72:0e:cc:73:e6:23:cc:6a:7c:d9:3f:
05:f9:9a:18:29:d1:a8:f7:74:56:21:74:ba:0a:a4:41:e4:e5:
6e:07:14:13:46:2b:77:62:0b:d9:f4:2c:09:2f:26:1c:84:5f:
8c:f6:6b:64:4b:c8:e9:76:b0:9d:f8:c3:19:e8:cc:f7:8e:01:
52:7b:c8:c0:4c:84:59:3a:7b:1f:1c:df:ba:05:86:47:65:5c:
30:18:f7:90:6c:72:d2:b1:1e:d2:20:d9:2f:4c:a1:71:39:3e:
2b:6f:97:bf:fe:7e:05:5c:2c:33:65:7c:27:42:d1:1f:43:86:
d9:e0:e4:f1:a7:e1:8e:63:78:80:98:3b:5a:d7:9d:73:f9:7c:
6a:ee:bd:3e:da:83:3e:ce:bd:c0:03:61:4d:01:7e:f3:b2:70:
ae:74:ab:a5:a4:f5:8e:15:72:98:bf:0b:9d:87:42:8c:de:1d:
ce:3c:39:92:88:a0:33:a2:70:4d:7b:da:09:9b:8f:d3:a3:07:
a3:8f:cb:79:2c:c4:89:11:7f:3a:29:f6:95:03:c9:df:dc:ee:
2d:a9:a4:5a:b1:50:b5:99:1a:dd:b5:f6:91:7f:9f:66:0f:d7:
e1:23:7f:87:cd:8b:4d:71:e2:03:15:55:c9:9b:b4:46:ca:04:
3d:79:44:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 18:59:26 2026 by rpki-client