
$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft
File: 1E40BE2B668DAE3E7271E835148386D785E3724C.mft (raw, json)
Hash identifier: LE4SsP71zFVr5lMA1xH4BdoA2ts3UtvWBjquuadIHTE=
Subject key identifier: 0D:D2:2F:0D:2E:8D:2B:97:31:4D:21:72:2E:CD:73:C9:A4:7F:30:EA
Authority key identifier: 1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C
Certificate issuer: /CN=1E40BE2B668DAE3E7271E835148386D785E3724C
Certificate serial: 35AF48D6F9C0707F2A68812E1A7CEA669548C87B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft
Manifest number: 012A
Signing time: Mon 20 Apr 2026 09:52:23 +0000
Manifest this update: Mon 20 Apr 2026 09:47:23 +0000
Manifest next update: Thu 23 Apr 2026 19:35:23 +0000
Files and hashes: 1: 3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (hash: 6NYs/G1xdGsUC1/WqjKklC2SAb8XsfqjqDKSyuRji20=)
2: 1E40BE2B668DAE3E7271E835148386D785E3724C.crl (hash: 7p9iJ8SPqh/a+70aZiENxOUFL+3HIy9g+aNBumxAcqI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl
rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:af:48:d6:f9:c0:70:7f:2a:68:81:2e:1a:7c:ea:66:95:48:c8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E40BE2B668DAE3E7271E835148386D785E3724C
Validity
Not Before: Apr 20 09:47:23 2026 GMT
Not After : Apr 23 19:35:23 2026 GMT
Subject: CN=0DD22F0D2E8D2B97314D21722ECD73C9A47F30EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:0f:67:ed:64:9c:0c:9d:b3:45:5f:02:e3:
2e:d8:3b:8b:71:6b:f1:3b:bc:00:30:f5:61:d9:3c:
01:b3:96:6a:0e:57:1e:ac:51:31:4c:f1:7e:04:e9:
44:12:68:08:01:5e:66:35:0d:e5:61:99:5f:b8:55:
75:40:cd:0d:0f:15:70:48:16:65:6a:50:69:da:cf:
f1:75:61:a3:77:34:7a:0d:0e:85:bd:08:6e:b3:58:
a2:e5:33:2e:14:e0:c3:b5:66:35:ff:72:37:ac:ed:
43:eb:40:b1:20:c0:44:6c:2a:95:2b:95:a8:67:77:
a0:25:a7:60:8d:8e:cf:47:05:23:1a:3b:db:aa:ae:
55:a9:f5:94:a7:bf:4b:fd:05:fa:e5:9f:8b:8c:66:
fc:fb:77:fa:a5:12:66:b0:45:0c:6e:55:8c:ca:16:
4c:e6:3f:6b:9a:ba:54:47:75:46:95:2a:55:99:bb:
a6:e7:2d:91:7a:3a:74:49:2a:62:8d:a8:ef:02:07:
fc:d1:f2:df:86:b6:58:88:c2:2d:57:17:0d:d6:2e:
1d:25:96:cb:df:91:a8:ef:68:e0:f1:a1:22:dc:79:
87:ed:09:a6:81:5f:a9:b7:72:46:86:28:26:27:87:
ec:32:a4:2c:4e:e3:bd:96:3f:29:70:74:09:e3:7b:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D2:2F:0D:2E:8D:2B:97:31:4D:21:72:2E:CD:73:C9:A4:7F:30:EA
X509v3 Authority Key Identifier:
keyid:1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:f9:9b:f3:93:9c:bd:b4:11:c5:f3:a0:f8:2e:ec:eb:a0:60:
5f:3a:ba:74:79:6b:9c:e2:5f:a9:8c:ef:72:3d:55:73:a6:17:
b2:c3:35:cf:11:1c:17:aa:a0:26:d9:d3:f4:24:bb:4f:e1:45:
f2:84:38:74:3f:62:db:d0:67:5f:45:69:49:dd:11:cf:b7:05:
f6:f1:82:84:98:28:62:ce:1b:69:00:ae:27:e6:e9:33:a2:4f:
22:d4:b1:f6:13:c8:51:2e:ba:14:7a:a0:3d:5c:cf:07:50:57:
2f:77:40:4a:f9:10:87:c1:c9:59:5d:28:1b:6c:ac:bc:3b:c4:
68:4c:2f:6d:35:c3:4d:35:5c:a5:17:1f:ed:f4:dd:02:1a:0b:
f3:04:21:1e:9b:45:82:be:05:e9:de:19:8c:50:35:5f:a8:82:
af:91:7b:87:be:8c:47:49:3f:ff:2f:4e:0b:b6:42:2f:ef:a4:
8e:eb:9c:e4:2c:26:71:9c:f2:31:3f:74:42:5d:94:34:2e:fd:
bd:98:82:f4:aa:b1:c0:54:c7:7e:84:8f:50:f9:dc:af:a4:74:
34:96:b2:a9:9c:e8:37:85:a0:47:67:53:c5:26:5e:32:fb:85:
cb:b9:42:02:c2:26:6a:43:4b:71:1d:4c:cd:81:8b:3d:39:97:
e4:5d:9f:1b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNa9I1vnAcH8qaIEuGnzqZpVIyHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4
NUUzNzI0QzAeFw0yNjA0MjAwOTQ3MjNaFw0yNjA0MjMxOTM1MjNaMDMxMTAvBgNV
BAMTKDBERDIyRjBEMkU4RDJCOTczMTREMjE3MjJFQ0Q3M0M5QTQ3RjMwRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgng9n7WScDJ2zRV8C4y7YO4tx
a/E7vAAw9WHZPAGzlmoOVx6sUTFM8X4E6UQSaAgBXmY1DeVhmV+4VXVAzQ0PFXBI
FmVqUGnaz/F1YaN3NHoNDoW9CG6zWKLlMy4U4MO1ZjX/cjes7UPrQLEgwERsKpUr
lahnd6Alp2CNjs9HBSMaO9uqrlWp9ZSnv0v9Bfrln4uMZvz7d/qlEmawRQxuVYzK
FkzmP2uaulRHdUaVKlWZu6bnLZF6OnRJKmKNqO8CB/zR8t+GtliIwi1XFw3WLh0l
lsvfkajvaODxoSLceYftCaaBX6m3ckaGKCYnh+wypCxO472WPylwdAnje9oFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDdIvDS6NK5cxTSFyLs1zyaR/MOowHwYDVR0j
BBgwFoAUHkC+K2aNrj5yceg1FIOG14XjckwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMC8xRTQwQkUyQjY2
OERBRTNFNzI3MUU4MzUxNDgzODZENzg1RTM3MjRDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4NUUz
NzI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODQ3NTMzOGQtN2FjYi00YWE3LWJl
ZGMtZDY0NTlmZDEzNTA0LzAvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2
RDc4NUUzNzI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAOX5m/OTnL20EcXzoPgu7OugYF86unR5a5zi
X6mM73I9VXOmF7LDNc8RHBeqoCbZ0/Qku0/hRfKEOHQ/YtvQZ19FaUndEc+3Bfbx
goSYKGLOG2kArifm6TOiTyLUsfYTyFEuuhR6oD1czwdQVy93QEr5EIfByVldKBts
rLw7xGhML201w001XKUXH+303QIaC/MEIR6bRYK+BeneGYxQNV+ogq+Re4e+jEdJ
P/8vTgu2Qi/vpI7rnOQsJnGc8jE/dEJdlDQu/b2YgvSqscBUx36Ej1D53K+kdDSW
sqmc6DeFoEdnU8UmXjL7hcu5QgLCJmpDS3EdTM2Biz05l+Rdnxs=
-----END CERTIFICATE-----
Generated at Wed Apr 22 04:54:20 2026 by rpki-client