
$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
File: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft (raw, json)
Hash identifier: wU6mFiJFiMKOobR3ZhdptWWsE+yzKfMKMuRx4qR47O4=
Subject key identifier: 06:45:27:65:03:22:85:2C:89:B9:69:CB:AC:24:48:27:DE:FF:14:81
Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28
Certificate issuer: /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728
Certificate serial: 53B30F6B279575199801DA588E9D8CAA5FB568B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
Manifest number: 020C
Signing time: Sat 18 Apr 2026 05:41:49 +0000
Manifest this update: Sat 18 Apr 2026 05:36:49 +0000
Manifest next update: Tue 21 Apr 2026 10:27:49 +0000
Files and hashes: 1: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl (hash: goc2BOm3kirL+kS1A9PQ6SnXOt8pAf0zVTCd+q34geA=)
2: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: iiGr+PopU6Hz3cnQVhQvXlHgSkixhRPRwZ/ZW4Nmfrw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl
rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 10:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:b3:0f:6b:27:95:75:19:98:01:da:58:8e:9d:8c:aa:5f:b5:68:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728
Validity
Not Before: Apr 18 05:36:49 2026 GMT
Not After : Apr 21 10:27:49 2026 GMT
Subject: CN=064527650322852C89B969CBAC244827DEFF1481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:1c:e6:9f:8f:62:e6:84:6b:5a:8e:32:97:
1b:79:2e:a4:af:45:dd:03:5f:6a:ac:a6:db:fb:3a:
51:cd:2d:de:f4:dc:6e:39:15:7a:6a:87:4d:9e:73:
d8:b2:88:da:22:c8:9a:03:69:79:2d:23:eb:59:90:
bb:5e:16:24:50:3a:5d:ba:82:d7:9c:66:d9:3c:6d:
0f:22:61:ad:14:e7:7b:99:e2:f1:bc:26:56:0a:e0:
44:ad:20:15:72:05:65:b2:25:7c:ab:4a:2d:98:d5:
b8:c2:ce:a6:62:a0:9c:39:c8:76:64:d8:19:d3:c1:
80:ba:fc:c4:f1:37:0e:15:99:30:63:5c:d1:bc:04:
4f:c2:66:d7:dc:25:38:18:37:44:e0:2d:66:63:52:
b8:c6:ac:8f:1d:1e:c5:aa:0f:a8:b5:a3:d5:cd:80:
03:a1:78:73:6f:2f:85:5f:69:9c:4f:ab:94:54:72:
23:7b:6a:43:af:2f:77:5b:7c:52:04:bb:62:ae:e4:
18:11:f8:f6:5a:10:36:d5:1f:89:3d:02:72:f3:e2:
74:15:53:c1:81:4c:96:25:cd:b2:e2:e5:93:5e:2e:
05:23:be:91:14:be:32:15:d0:40:80:59:97:a8:65:
1d:9b:b4:43:51:14:8e:e9:48:94:22:50:7a:a4:55:
67:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:45:27:65:03:22:85:2C:89:B9:69:CB:AC:24:48:27:DE:FF:14:81
X509v3 Authority Key Identifier:
keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9c:a5:ed:11:d6:87:b3:de:62:9d:0e:8f:0e:50:1f:13:b3:
91:16:33:32:52:22:b5:c3:b2:c4:9e:96:2f:0d:e0:61:47:4f:
83:cc:2f:bb:a3:cf:50:93:68:3a:78:6e:e3:77:bc:59:a2:6b:
7a:3a:e7:17:bd:15:61:37:3e:c9:0c:91:97:23:6d:dc:d5:3c:
29:bc:d1:23:54:84:3b:84:c7:31:fe:c9:4d:d1:b6:18:d0:43:
9d:4f:63:a7:6e:87:2d:58:50:dd:68:e2:ce:1c:eb:47:f4:01:
87:15:d1:5f:3a:5e:a1:24:3e:7c:d0:b0:0e:83:7e:38:0b:79:
cf:1d:6a:e5:ec:fa:b3:91:45:be:43:3b:04:50:ce:34:88:b7:
1d:8c:3c:11:11:66:9e:10:e3:39:4e:a4:3f:a0:a0:dd:cc:e0:
31:50:e0:55:39:19:ef:c1:be:99:d4:38:e5:a0:b7:5f:4b:52:
6e:17:bb:bd:12:d8:92:33:1c:c1:16:e6:6f:12:4c:40:f8:0b:
46:0d:0f:b6:e0:72:95:8a:c7:89:54:70:25:d9:5a:6e:b4:d1:
be:a4:71:72:64:a2:26:c7:fd:ff:5c:4a:cf:ee:1d:9a:af:21:
f4:dd:19:91:7e:8e:b4:0b:b4:8a:ae:ef:85:81:00:d6:38:98:
87:3d:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:27:22 2026 by rpki-client