
$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
File: 945AD192B10F71CE48362295A9C6281FE3395786.mft (raw, json)
Hash identifier: CaLBJ/FrrFHpYgF6dcGkJ9DV3cHt/YuRuIkX+DEB7IA=
Subject key identifier: 03:94:B3:0B:42:3A:8F:25:BB:80:79:72:DF:75:33:A7:41:EE:10:FB
Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86
Certificate issuer: /CN=945AD192B10F71CE48362295A9C6281FE3395786
Certificate serial: 189669DFC4D608492FE22FEF3F93B335E11CA015
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
Manifest number: 0271
Signing time: Tue 21 Apr 2026 06:22:29 +0000
Manifest this update: Tue 21 Apr 2026 06:17:29 +0000
Manifest next update: Fri 24 Apr 2026 06:23:29 +0000
Files and hashes: 1: 945AD192B10F71CE48362295A9C6281FE3395786.crl (hash: CCTcwAs1j+HWOqZFy8AlqPrE9tj0+pKjuTqfdxITYHs=)
2: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: wuBJwpKwOiGhlkXr5a00YrNTyDMK7HD3QVMHitGSpjk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl
rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:23:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:96:69:df:c4:d6:08:49:2f:e2:2f:ef:3f:93:b3:35:e1:1c:a0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786
Validity
Not Before: Apr 21 06:17:29 2026 GMT
Not After : Apr 24 06:23:29 2026 GMT
Subject: CN=0394B30B423A8F25BB807972DF7533A741EE10FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:7b:99:dd:10:03:db:ec:f4:46:49:75:8e:
9e:49:e6:0b:3c:03:43:b6:88:19:c0:20:98:1b:6c:
91:b3:37:11:d2:27:66:ba:bf:56:70:39:4e:16:e0:
3b:1a:d2:f3:bb:fc:71:3e:14:7b:46:c7:15:48:03:
09:68:fb:14:f4:e3:98:3d:f7:32:42:1c:3d:c1:be:
34:a5:2e:60:3a:1c:8e:51:dc:bb:fb:a5:8a:0d:39:
00:0c:bd:5e:a6:69:e1:45:57:87:a9:ac:d5:44:ac:
02:e2:8f:56:db:86:62:8f:2a:df:35:a2:2c:a6:d6:
b2:41:6f:f8:d8:74:16:92:b1:61:7e:7a:29:a1:48:
b6:38:81:8a:2e:36:d4:e5:2c:78:5c:e4:7f:2c:a0:
ae:52:76:2e:cd:8c:f0:cb:8b:27:52:e9:ac:2c:a7:
68:74:8f:e9:61:0e:22:52:f3:74:bb:8e:06:15:5c:
b8:bd:65:5b:f9:d2:cf:73:a4:bc:d5:0f:a4:17:6d:
ad:e3:a8:1f:ca:a6:8f:b7:f2:3c:c4:9e:9a:bc:3d:
98:6c:79:fe:21:2e:4e:7b:88:ea:32:28:d7:e8:44:
9d:fc:79:f3:46:ba:a6:a0:60:7c:71:1b:ca:d6:71:
24:f4:14:d3:04:e2:b1:84:6f:b7:fc:7d:2a:35:ef:
72:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:94:B3:0B:42:3A:8F:25:BB:80:79:72:DF:75:33:A7:41:EE:10:FB
X509v3 Authority Key Identifier:
keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:40:48:8b:bf:e7:6b:08:e8:15:1e:b2:46:84:ff:38:b3:dd:
a3:0b:97:32:bf:19:0b:7e:67:5f:c5:f9:db:75:94:06:9b:9a:
5d:5a:42:f1:8a:69:34:fe:44:34:62:e4:24:ac:ed:68:74:bc:
ea:3a:22:90:2b:05:a3:fd:49:7b:98:1f:b5:1b:69:e2:1a:f8:
c1:11:d1:98:5a:33:90:43:cd:b3:dc:21:7c:76:2f:2f:6a:85:
42:59:3f:dc:00:80:ce:95:e6:a7:e2:62:4a:4b:0e:6b:7c:3f:
87:6e:a6:9e:2b:3d:07:98:50:9b:da:bb:12:b7:73:e9:ac:db:
dc:69:8d:d3:dd:6f:fa:33:a7:d5:33:dd:cc:84:33:4e:cc:cd:
22:1b:71:10:90:14:fd:55:b0:32:b9:22:d4:60:1d:c3:5c:55:
13:14:dc:3a:1c:f1:5e:3c:73:a8:25:70:cb:1c:91:66:b3:98:
d5:de:5e:13:44:e6:d8:c4:57:82:63:fd:54:2e:78:81:cc:2c:
36:d8:22:4a:0d:0f:96:51:3b:4a:40:f4:97:6e:3a:24:a9:0e:
9b:4e:61:86:75:d8:55:12:42:d4:84:74:45:e9:76:64:ff:4d:
2b:43:e0:f5:7c:ef:2f:a3:1f:b2:35:00:78:dd:98:bd:84:10:
0c:24:cc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 08:53:44 2026 by rpki-client