
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft
File: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft (raw, json)
Hash identifier: akK/Q07T4wcGwIrEUYziW1GLgQ/c9pl4gRcyghZCFdU=
Subject key identifier: E3:C4:13:88:BC:96:4E:32:9E:A9:14:D6:86:4F:4C:7B:A0:37:53:11
Authority key identifier: 11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E
Certificate issuer: /CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E
Certificate serial: 6B6C80CC4DC480F29659EC9818AF9C9907FBCED7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft
Manifest number: 0134
Signing time: Wed 22 Apr 2026 08:01:09 +0000
Manifest this update: Wed 22 Apr 2026 07:56:09 +0000
Manifest next update: Sat 25 Apr 2026 10:56:09 +0000
Files and hashes: 1: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl (hash: eWikfBn6/NJf4aCqKJI2+HtAY2341NvfHD+V8P+GHA8=)
2: 323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa (hash: KvZLwtwl7aT1+4VaO36QTe7ow8oCYWWhsH86C8UoGl8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl
rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 10:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:6c:80:cc:4d:c4:80:f2:96:59:ec:98:18:af:9c:99:07:fb:ce:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E
Validity
Not Before: Apr 22 07:56:09 2026 GMT
Not After : Apr 25 10:56:09 2026 GMT
Subject: CN=E3C41388BC964E329EA914D6864F4C7BA0375311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:c3:d3:e8:c3:dc:1c:e5:86:9c:b2:15:15:
be:f1:0e:32:4f:cf:27:19:3f:25:70:12:eb:0e:b1:
8e:01:38:0b:91:93:3b:a8:d7:4c:d3:9e:fd:d1:d0:
48:5d:b4:ae:62:dd:60:6c:3d:94:1a:e2:da:74:bb:
ae:d1:1a:cf:e3:af:3a:2d:f8:8d:49:f3:08:d3:5a:
e2:4b:06:95:27:28:ae:d5:25:dd:2e:58:d7:3c:46:
9f:42:f7:6e:b2:23:b0:3e:80:ad:32:aa:75:76:fc:
d9:9e:25:95:f0:ac:40:3e:76:1b:5b:99:99:f9:65:
0e:5b:15:1c:d1:6e:21:3e:16:6b:35:cc:71:dc:26:
60:0c:26:ec:20:f0:c0:aa:6d:14:ae:01:8a:5f:22:
39:96:0a:74:8b:a8:70:d8:f5:cb:2c:43:2f:30:17:
76:33:9a:75:9a:08:51:28:e2:7a:02:57:9a:d4:2c:
15:e1:30:cb:c7:ec:92:27:e9:ff:19:ae:b5:e4:2a:
07:e5:b6:c8:8d:f2:1e:6e:f1:22:70:f3:f0:89:05:
a6:90:a0:e0:0b:31:cc:0b:09:41:12:bb:3b:e6:dd:
7f:a4:6e:a9:16:b1:82:ec:fe:81:48:3f:34:cd:0a:
7c:6c:fd:6b:48:d8:b3:88:3a:9d:ae:23:f1:ea:cd:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C4:13:88:BC:96:4E:32:9E:A9:14:D6:86:4F:4C:7B:A0:37:53:11
X509v3 Authority Key Identifier:
keyid:11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:4a:0a:24:d7:a7:a8:29:d8:5e:09:d3:dc:45:06:c4:60:49:
3b:24:bd:72:27:99:4a:46:a4:e0:22:52:c8:62:df:c6:3c:fc:
6e:ba:15:86:c0:cb:45:ba:78:e8:f8:c2:5a:78:46:8f:56:7e:
76:2d:be:d9:f9:cb:da:0f:5b:ff:f7:13:51:73:ba:32:a0:34:
2c:57:84:e5:4c:45:60:f5:1d:c3:b8:25:d8:dc:0f:47:2a:05:
a1:65:04:2a:7f:d5:16:41:ef:37:09:47:c3:19:c9:e6:74:7f:
90:9f:4e:35:3c:aa:94:e6:ff:1d:ce:aa:d2:0e:6a:96:bc:49:
79:0a:01:0c:21:f6:28:08:aa:73:35:17:17:11:3a:85:8f:4d:
3b:9d:1d:92:2f:68:bd:47:60:b9:64:29:27:52:6a:55:4b:31:
ae:8f:aa:6e:33:d9:4f:d8:a7:64:08:b9:4a:c0:85:54:19:f1:
91:95:df:cb:5b:7c:11:92:7a:62:a9:15:6d:21:4d:cf:b9:1e:
d0:47:0e:a5:84:47:c9:db:a1:c8:b7:c6:fd:83:2c:d6:ce:a5:
cc:8b:72:39:3c:de:0f:7a:24:76:b1:56:69:fb:05:7c:77:33:
2c:ff:7a:df:61:9b:2f:3a:70:ac:47:7f:60:77:64:2c:0f:6a:
4e:95:aa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:27:23 2026 by rpki-client