
$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
File: C89AFDB015B4516342E4702244E8B8AC331B8669.mft (raw, json)
Hash identifier: NXrQKr2FUi94oz0+OiRNbbl1tbpfM7ir55tpBpMZY0k=
Subject key identifier: CD:35:EE:99:7D:1D:98:10:2F:FD:19:94:4B:72:85:86:1A:BF:84:90
Authority key identifier: C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69
Certificate issuer: /CN=C89AFDB015B4516342E4702244E8B8AC331B8669
Certificate serial: 057862D13B17A1A5E22214E574DC14D6929D9318
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
Manifest number: 0162
Signing time: Tue 21 Apr 2026 12:20:56 +0000
Manifest this update: Tue 21 Apr 2026 12:15:56 +0000
Manifest next update: Fri 24 Apr 2026 12:47:56 +0000
Files and hashes: 1: C89AFDB015B4516342E4702244E8B8AC331B8669.crl (hash: V3EixvQNlgd4UZ1o0NCeFo4VyXinaF4LYoJEtxvhJpE=)
2: 3130332e34302e39342e302f32342d3234203d3e203633353036.roa (hash: WRQr/4s6i86uzriKB9RHRYKn5SQtBKQDw9UpfGvIHbw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl
rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 12:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:78:62:d1:3b:17:a1:a5:e2:22:14:e5:74:dc:14:d6:92:9d:93:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89AFDB015B4516342E4702244E8B8AC331B8669
Validity
Not Before: Apr 21 12:15:56 2026 GMT
Not After : Apr 24 12:47:56 2026 GMT
Subject: CN=CD35EE997D1D98102FFD19944B7285861ABF8490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:68:32:27:5e:d6:e5:82:8c:2e:83:79:32:
27:c0:ef:9f:fb:52:e9:13:ff:39:ab:a0:f1:98:4d:
18:e2:a9:30:f2:32:87:fa:7a:2b:e7:3b:8b:56:3d:
99:11:36:0f:49:99:30:8f:51:a5:22:21:9e:4b:d5:
00:c5:6a:b9:24:a5:99:e8:e9:5f:d5:19:35:4c:0c:
08:88:55:f9:e6:61:57:75:46:4d:6b:20:df:b1:f2:
53:f7:1e:ae:f1:14:d1:0e:23:1d:dd:53:5d:ab:b0:
e9:7e:7f:5f:59:39:ca:85:8a:18:0d:59:56:de:45:
50:09:3a:ad:5b:aa:b1:9e:43:35:51:37:25:8f:91:
51:ff:1f:7c:7a:5c:7a:37:a6:1c:f2:27:f4:86:6c:
88:2d:85:9d:9e:53:4a:ec:4f:c6:0e:58:88:cb:3c:
e4:b0:0c:c2:f4:79:b7:08:2e:ef:1c:d0:46:2d:3a:
02:76:d8:ee:25:26:dd:9c:b2:b9:81:f3:cf:5a:86:
77:d3:dd:45:11:9b:61:89:bd:1b:8c:fd:15:21:58:
00:66:f6:49:fd:f5:40:c8:25:25:95:b3:86:07:cc:
fa:10:b0:82:07:b4:cc:84:f4:df:7f:b4:2c:14:6c:
ac:70:b9:bd:d3:5f:74:4d:2f:81:96:f7:86:90:f8:
ea:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:35:EE:99:7D:1D:98:10:2F:FD:19:94:4B:72:85:86:1A:BF:84:90
X509v3 Authority Key Identifier:
keyid:C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:21:07:5a:31:55:f6:22:78:de:39:27:38:37:1d:de:74:d3:
07:2a:f4:78:32:82:8a:27:87:2b:c0:ab:aa:e8:d2:19:b6:a2:
52:e4:c7:55:89:c1:b0:45:07:d0:9d:df:bc:63:98:06:9d:2b:
3e:f7:05:ea:4f:d1:ec:d0:cd:3d:af:1e:d3:5b:ed:ee:f7:c4:
c3:e3:b6:be:b1:96:6d:3c:dd:7a:fb:ae:8d:13:3c:52:d5:b9:
8e:40:5d:b0:22:fd:65:bc:6f:b9:5c:7f:5c:a1:71:5f:2b:02:
92:d8:20:c7:d0:a2:8d:f1:cc:a8:8b:95:5a:90:86:05:6a:0f:
a6:3c:2d:ba:7c:e0:cb:e9:9e:6e:2c:c6:6a:22:48:71:1b:83:
07:1b:52:5c:73:05:7b:d4:e3:7d:8b:07:03:29:cc:9d:25:de:
f4:96:cb:bf:f7:43:cf:ee:49:7e:99:df:f6:42:58:54:84:bd:
74:7e:8d:e2:9a:6d:94:4b:f7:62:77:db:04:e0:25:c3:d9:5e:
a8:89:d5:4b:81:66:f8:2b:1d:ad:3e:5f:fc:75:8a:15:22:fb:
92:36:06:78:51:af:fc:02:82:58:89:b3:7a:67:a2:b3:34:bd:
4e:e2:97:c2:b3:99:48:23:39:1c:10:b9:0f:6d:e8:26:bf:a1:
42:46:62:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:01:10 2026 by rpki-client