
$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft
File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json)
Hash identifier: j4F6fZ2f67xj0Q5bIYFodjkBScmSNwJpyB0trmF2aHs=
Subject key identifier: 4D:D0:49:00:8F:E8:B6:36:BF:99:43:8C:F9:CE:DA:1D:01:9A:AE:50
Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3
Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3
Certificate serial: 63C77F270542A4A4DCF43A104C1374A74F8DE2EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft
Manifest number: 01A0
Signing time: Sun 26 Apr 2026 07:31:49 +0000
Manifest this update: Sun 26 Apr 2026 07:26:49 +0000
Manifest next update: Wed 29 Apr 2026 13:41:49 +0000
Files and hashes: 1: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: bL4A3iMML3JwhDE2yFeN6uDiSzuObZzoT/f0gxHop3A=)
2: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: BETPcfS1VcTumvWSwQRlY9PEvVDNhn9IgT3oOeof4jw=)
3: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: p/1JST0oW1HG5CCUjR5xSm+8oUbiBKzvgFiupxM/2CU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl
rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Apr 2026 13:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:c7:7f:27:05:42:a4:a4:dc:f4:3a:10:4c:13:74:a7:4f:8d:e2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3
Validity
Not Before: Apr 26 07:26:49 2026 GMT
Not After : Apr 29 13:41:49 2026 GMT
Subject: CN=4DD049008FE8B636BF99438CF9CEDA1D019AAE50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:03:b3:91:56:e0:5b:d7:bf:21:09:20:f0:20:
c7:52:ae:9a:dc:d9:f5:c9:d0:bb:4e:9b:c0:8e:3e:
48:71:e9:5e:58:f0:d2:f0:56:52:7c:1c:8e:ca:30:
b1:6f:f7:a0:38:16:0b:f5:7e:59:29:06:ce:03:53:
a9:5f:8a:92:a3:ae:03:20:e3:89:1f:27:75:fe:7f:
50:fb:31:3f:54:79:dc:92:9e:e7:52:11:70:51:fe:
77:b1:57:cd:d5:0b:28:97:37:6c:d7:76:29:56:74:
a9:2a:3f:9a:3d:e2:35:8d:0e:45:d4:05:cc:8f:2d:
3b:9a:7e:76:cf:59:b9:3e:6e:2c:9d:00:cd:9b:d2:
42:c3:0b:b4:4a:13:98:6f:ea:98:23:e9:63:62:10:
bf:63:df:e8:b4:fa:bf:36:80:a8:df:21:28:65:18:
e1:c1:47:97:d7:f2:8b:a7:cf:40:10:14:6a:a6:d2:
56:54:de:65:6f:a2:e5:d0:15:29:82:95:dd:11:95:
27:5e:c5:35:b3:a4:b4:61:d2:7b:1e:f3:6e:3d:27:
cf:bd:0a:05:75:e7:94:39:5b:1c:9c:85:9a:df:b8:
b2:05:58:3d:32:da:5f:e5:b3:20:f7:02:d1:9e:6f:
01:a2:1a:52:cc:cb:34:42:af:4a:6a:59:82:14:9c:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D0:49:00:8F:E8:B6:36:BF:99:43:8C:F9:CE:DA:1D:01:9A:AE:50
X509v3 Authority Key Identifier:
keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:97:1c:34:3d:57:81:e6:39:d5:f6:78:cd:ed:ab:b7:37:17:
6e:19:ce:63:c0:cf:96:b0:af:ae:d9:29:f6:49:0d:ff:02:34:
b9:dd:a9:e2:5e:06:23:34:88:98:74:32:f7:e9:41:3b:00:59:
63:66:a3:6c:12:74:35:e6:ed:b1:b8:eb:5e:7a:9d:c2:ef:80:
a7:aa:cb:11:3e:f7:70:0a:b0:78:ef:cc:e5:1f:dd:08:b4:d6:
16:93:22:22:11:07:32:8d:fa:e9:6f:f4:4f:9f:e3:43:5c:8a:
e9:73:12:6c:a9:77:ec:fd:75:35:a7:fa:00:bd:98:31:5c:aa:
0c:b9:7a:7c:10:dc:1b:54:d1:a3:2f:ba:a9:74:6e:71:09:e8:
58:7b:79:c9:2d:aa:94:3d:5d:1c:48:18:59:4d:ef:ca:11:2f:
17:0e:55:6f:f6:56:84:ca:50:ea:dc:65:8f:35:66:75:d0:0e:
57:0e:87:d7:79:ac:99:54:cb:bd:f8:9b:6e:a5:65:40:56:ab:
7e:5f:c9:aa:0e:82:14:1c:da:b8:54:95:d7:6b:bc:04:5e:df:
94:af:6b:d4:d7:76:a4:2d:11:72:31:92:e7:8e:a0:89:ed:74:
26:fa:01:e6:20:c5:3d:42:fa:ab:0c:e7:44:d8:db:a6:fd:bb:
d6:90:73:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 06:06:45 2026 by rpki-client