
$ rpki-client -vvf repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft
File: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft (raw, json)
Hash identifier: QrFpDZQshAGxUqsEvdcasK6vBvOwJtvZYqK2vV497q0=
Subject key identifier: 1A:57:46:9E:4D:0C:D1:3C:73:7C:78:6A:7B:4D:FD:4F:F3:BF:FA:D4
Authority key identifier: 19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08
Certificate issuer: /CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808
Certificate serial: 04691DD23ECA74AF0E60407B9AF31A94CCB21D85
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft
Manifest number: 0141
Signing time: Fri 27 Feb 2026 23:50:01 +0000
Manifest this update: Fri 27 Feb 2026 23:45:01 +0000
Manifest next update: Tue 03 Mar 2026 10:02:01 +0000
Files and hashes: 1: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: NbVoKFvZA9x7Z9SpGO7eJhP/PrQvPjMB+U8rXLGAP4o=)
2: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl (hash: 742bGsI0/wXj3He7WoKhk2RLsMEzY9Lk+fbojRaULjs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl
rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 10:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:69:1d:d2:3e:ca:74:af:0e:60:40:7b:9a:f3:1a:94:cc:b2:1d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808
Validity
Not Before: Feb 27 23:45:01 2026 GMT
Not After : Mar 3 10:02:01 2026 GMT
Subject: CN=1A57469E4D0CD13C737C786A7B4DFD4FF3BFFAD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:ab:e7:ad:8f:6e:78:5a:60:93:17:72:11:
91:cd:91:f5:26:07:66:43:61:0a:ae:c4:d4:12:64:
fb:75:97:d1:81:b2:e9:74:bd:17:ab:34:9b:3d:23:
b3:fa:19:d7:65:33:02:5c:d6:25:6f:05:b8:df:8d:
91:e3:de:25:f5:68:79:6a:ee:98:24:d8:24:d2:e6:
40:12:19:ed:e6:a7:a9:86:76:a3:b0:91:04:03:ca:
97:5d:10:bd:50:21:30:83:e8:32:15:a5:bc:2c:3f:
6c:12:cd:08:11:e0:32:c5:2f:55:ba:90:1e:e6:d2:
5b:ba:7d:e9:08:e0:de:3e:7d:92:fe:7b:d6:73:a0:
ea:4d:66:8b:c7:76:a5:a6:c2:09:d1:88:94:56:8b:
df:f4:62:5b:39:a5:f3:e9:a9:a4:31:8a:30:7b:7c:
47:79:dd:47:2f:6d:53:42:7e:fc:3f:b0:fc:8e:13:
b8:d7:d3:0a:08:dc:35:55:a5:f4:d4:9e:9b:99:db:
a9:64:56:a7:59:e5:ce:6b:ed:a5:03:0c:3b:90:02:
22:71:d0:19:bf:fd:20:61:6b:71:8c:66:00:a4:3c:
e8:43:8e:f3:04:c3:cb:9d:e2:9b:e4:1e:2b:53:97:
94:51:ee:fa:0b:0f:ec:1c:03:51:1d:d7:9c:e0:b2:
0c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:57:46:9E:4D:0C:D1:3C:73:7C:78:6A:7B:4D:FD:4F:F3:BF:FA:D4
X509v3 Authority Key Identifier:
keyid:19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0d:00:26:c1:c8:d6:e0:75:5f:9d:18:a0:b7:79:3e:0f:ee:
26:e0:49:d1:8a:e7:6e:e1:d1:91:8c:5d:04:fb:0c:78:b1:41:
01:3d:bb:4b:2f:ff:7d:ad:0d:38:76:b4:a0:fb:b7:19:10:a4:
8d:81:b1:31:39:9b:26:85:70:2c:2e:2f:d6:91:06:27:58:a6:
25:48:60:67:d3:0d:65:06:cf:ae:9c:55:c9:ba:d4:75:f9:31:
69:3c:7f:6e:58:0f:1a:ee:62:54:0a:72:7d:7a:8a:55:b9:0c:
34:7c:cc:50:c9:d6:9e:4f:ab:24:ab:a2:5e:4d:ca:a9:dc:4b:
41:e7:c2:38:6d:c7:70:28:50:21:39:79:78:4a:bb:c3:dd:d4:
7b:3a:73:4e:c0:86:ec:a9:5b:4a:1f:2e:7e:eb:a6:f3:9f:12:
19:b2:09:76:44:b4:f3:e0:b1:83:4f:9d:d4:c7:e8:f5:1e:33:
76:4d:e8:0e:ed:cb:27:ef:86:0f:0e:ba:d9:2b:bf:bc:7a:b5:
b7:60:93:a9:80:57:d9:bd:8b:b7:32:76:0c:15:e3:95:c2:78:
fd:c5:5c:ea:9c:fd:0d:07:56:ff:32:ff:7a:5b:35:5c:e4:bd:
17:70:8c:7e:4c:0c:4c:a4:76:b4:21:33:fc:6e:e4:83:a2:82:
84:b2:a1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:13 2026 by rpki-client