
$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft
File: 1073C0AF2447C17B85643987B72701D1AE52823D.mft (raw, json)
Hash identifier: oqtXWHI2fzDNJ+nkaQhrVy6iRzs52n/WJLA3/ujgMJ8=
Subject key identifier: 3A:35:50:50:3F:A7:82:4C:84:AA:81:F5:1B:31:C8:9F:77:F0:BA:D9
Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D
Certificate issuer: /CN=1073C0AF2447C17B85643987B72701D1AE52823D
Certificate serial: 18926DCE02A18223A8DFF7FD773299EB9240A838
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft
Manifest number: 012D
Signing time: Tue 21 Apr 2026 02:02:27 +0000
Manifest this update: Tue 21 Apr 2026 01:57:27 +0000
Manifest next update: Fri 24 Apr 2026 11:22:27 +0000
Files and hashes: 1: 1073C0AF2447C17B85643987B72701D1AE52823D.crl (hash: lnYIVQtsvLcd6ouv3yqWh7zboaogcKSBvo8wh7ELHyY=)
2: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: c81trxyY0udGDfe8fU9qE2D4eeTkINIkeMooDG/PsoU=)
3: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: EPb75NjgC2nDZ3lIosWcg+cHCoOthdvxPMcDT36WMus=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl
rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 11:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:92:6d:ce:02:a1:82:23:a8:df:f7:fd:77:32:99:eb:92:40:a8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D
Validity
Not Before: Apr 21 01:57:27 2026 GMT
Not After : Apr 24 11:22:27 2026 GMT
Subject: CN=3A3550503FA7824C84AA81F51B31C89F77F0BAD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:27:05:70:64:79:20:eb:56:39:ca:d6:71:28:
04:12:90:a2:cc:66:c5:96:0d:eb:00:51:18:b4:6c:
df:e7:ed:0c:6e:ca:8c:92:ce:bf:bb:1c:64:66:fe:
7b:9b:53:f6:9b:4c:95:37:28:4e:05:61:44:05:06:
a8:0f:37:f0:0b:2a:3e:b0:5e:50:f0:35:d2:d2:80:
54:4f:ba:3f:76:ec:4b:a6:54:02:a3:24:5c:8e:58:
0b:b8:4f:0f:dc:19:d2:72:36:84:db:e5:a6:a0:2e:
37:5a:d0:08:67:73:e5:ca:ff:e4:40:97:14:5e:4f:
94:f3:c7:90:db:b6:7a:fd:4f:92:cc:6f:c8:15:9e:
c7:4c:06:2d:af:a3:0f:66:67:34:70:b2:f1:57:e1:
7f:2a:62:94:d1:44:9a:f5:8f:21:a2:05:e0:0e:69:
a3:2f:f8:35:4d:b5:b2:e7:c1:f9:41:fb:38:92:45:
d6:cb:52:3f:d1:b9:2b:3c:00:03:56:93:03:69:4a:
27:15:68:dd:51:09:c7:0b:fb:fd:e6:82:32:c0:2c:
03:93:e2:65:2d:60:aa:07:f1:8e:5f:3b:11:69:d9:
e2:74:e0:3a:f9:4a:d0:c8:1b:3a:0a:50:78:ba:b6:
fb:75:0e:dc:19:f2:94:2e:07:8d:ff:bd:7d:8d:0a:
dd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:35:50:50:3F:A7:82:4C:84:AA:81:F5:1B:31:C8:9F:77:F0:BA:D9
X509v3 Authority Key Identifier:
keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:82:e3:99:54:8e:a1:53:12:65:5c:cf:a8:c3:7d:30:bf:da:
05:aa:92:a6:78:6b:38:1e:7b:fa:17:8a:9b:c5:02:e0:44:d4:
c0:ce:e3:f7:62:ff:74:53:74:45:1d:2c:ef:c9:11:59:1a:ce:
3e:88:e8:ac:26:9c:d0:2a:b6:a2:24:b0:c9:54:a3:f5:af:97:
85:b9:f0:26:e6:43:8b:c8:79:a0:b7:ce:a0:14:b4:b6:2b:fc:
5a:0b:15:fb:03:f2:76:35:f4:dd:d5:cf:c5:22:0f:ad:38:d7:
14:1a:e4:6e:20:a1:ac:0e:6c:58:b8:a4:97:33:79:24:78:4f:
1f:6c:ac:f3:f9:b3:75:6d:1c:99:89:69:21:2d:c5:01:ef:46:
2a:30:de:7a:08:73:e1:a4:06:55:81:aa:e6:29:83:cd:16:f3:
ac:d5:f7:54:f7:e2:d2:64:b8:9e:4a:40:5c:1b:cd:11:5b:f3:
9f:cc:ba:ba:9f:27:92:3c:75:5b:48:5a:d4:85:94:39:c3:72:
12:c7:d5:c7:e8:f4:bf:dd:4d:7f:7a:ba:0c:81:1f:e2:10:9c:
27:d1:c5:59:57:1b:d7:9b:fb:77:a0:5a:87:3d:02:2a:1b:f4:
40:a9:de:b3:b4:e4:c0:f1:d4:4f:35:83:bb:35:05:0c:28:c9:
53:bf:5f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:52:16 2026 by rpki-client