
$ rpki-client -vvf repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft
File: 145856688D58EEB673E59CC02D21114CF78E87E5.mft (raw, json)
Hash identifier: +bIIkiRAdL2VcIY99FXyRHvC74TIukyvUoGaCf9/T44=
Subject key identifier: DB:BB:D3:64:A1:16:84:8C:DF:21:F1:15:5C:C6:C6:67:BA:A8:09:C8
Authority key identifier: 14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5
Certificate issuer: /CN=145856688D58EEB673E59CC02D21114CF78E87E5
Certificate serial: 1916AA68BBA144812937EA746C0DEA3E50570A2D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft
Manifest number: FD
Signing time: Wed 25 Mar 2026 21:41:01 +0000
Manifest this update: Wed 25 Mar 2026 21:36:01 +0000
Manifest next update: Sun 29 Mar 2026 07:45:01 +0000
Files and hashes: 1: 3135372e36362e35382e302f32332d3233203d3e203633383633.roa (hash: 9tXtFpTSK8/Gv6WVGpyrNnATNqrkJEwmK6WzmGqcUmQ=)
2: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (hash: NiBjkneS23NjWIZK7/S3rCptTDYB7bSoabsYG4VVavg=)
3: 145856688D58EEB673E59CC02D21114CF78E87E5.crl (hash: DTFLBVmAck5EbyZRY6DTXK/xa4dJTkZ3Ds+nf8KQy6c=)
4: 3135372e36362e35392e302f32342d3234203d3e203633383633.roa (hash: 9RQvrG19d/kbbr9j04wj/AolcfFkLEsHEjyLp9uYWCo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl
rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 07:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:16:aa:68:bb:a1:44:81:29:37:ea:74:6c:0d:ea:3e:50:57:0a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145856688D58EEB673E59CC02D21114CF78E87E5
Validity
Not Before: Mar 25 21:36:01 2026 GMT
Not After : Mar 29 07:45:01 2026 GMT
Subject: CN=DBBBD364A116848CDF21F1155CC6C667BAA809C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:de:fe:2f:42:6d:d1:7f:18:88:73:b6:8d:
b3:49:73:f8:7f:ec:9e:c8:de:93:43:60:73:75:1b:
72:7f:09:2d:fb:31:ce:98:dd:4a:0a:50:6c:75:d8:
bc:22:0e:a4:52:60:7d:44:e9:ee:28:c4:20:38:bf:
f1:3c:1a:35:24:2f:a0:44:d4:82:08:4e:c9:cf:c0:
73:85:5d:d3:d4:ac:76:c9:eb:12:ef:41:ba:9a:0e:
42:26:62:84:ea:76:96:a4:41:d1:35:50:cd:19:3a:
b1:28:55:68:d4:cd:e4:fe:5f:82:a0:0e:58:ed:62:
d4:99:4d:aa:9c:be:f0:ad:fe:e1:b1:1e:87:65:94:
cb:c4:a4:0b:de:61:6b:99:19:fe:ec:b3:3e:86:ba:
58:e9:1d:60:62:b6:1e:98:ca:7d:24:39:36:68:3b:
4f:e8:b4:f6:5b:46:c3:d0:0f:88:a7:3c:a3:e1:2d:
ff:76:0a:5f:93:cd:93:48:d6:c9:df:c6:a1:bc:c9:
8b:45:e9:42:09:af:60:73:5c:5e:eb:5a:d1:68:ca:
13:ff:2a:d5:f6:a0:1f:4d:08:77:20:f3:d6:c4:6a:
ba:02:bc:ce:2e:f1:1d:87:57:09:47:39:e0:3a:ed:
99:56:a3:44:a5:ce:0c:ad:91:b3:bb:b2:7a:5a:9f:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BB:D3:64:A1:16:84:8C:DF:21:F1:15:5C:C6:C6:67:BA:A8:09:C8
X509v3 Authority Key Identifier:
keyid:14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2d:e8:12:24:d9:09:8c:7c:60:db:8d:58:af:fd:23:49:d6:
14:3c:b2:1d:05:03:8d:b2:a1:48:3b:f5:5e:2b:67:d4:0a:22:
c9:7c:e5:63:32:41:12:f5:37:7d:87:fb:db:d5:c5:5d:60:83:
02:c1:12:d7:11:0a:60:80:7b:92:e6:42:27:f7:92:a5:6a:ce:
6a:25:23:d8:c3:b0:5f:3a:50:24:5d:39:43:85:5f:ba:3b:30:
ea:0a:97:91:24:e6:f8:23:3a:36:41:4c:fe:c9:ba:a8:6b:d1:
05:71:c9:b8:9a:ec:a3:a0:96:6b:b1:21:de:0f:1a:c6:90:76:
8a:5e:58:3e:a7:8b:ea:d0:85:77:60:27:03:4a:79:d2:7f:6b:
89:ad:ce:18:af:f0:65:a6:16:be:b8:16:26:07:58:de:e1:31:
c4:2b:b7:a6:9f:19:9e:e7:fe:0c:e2:cb:10:9c:af:6a:8f:7c:
20:3b:83:a5:f5:d0:6b:24:b2:00:b3:96:23:f9:e7:38:72:28:
ec:2d:88:0d:7d:8e:c8:f6:27:95:fb:16:be:d1:60:48:0d:3f:
a3:d1:ab:8d:cc:3f:f0:7b:07:bc:d8:93:ef:15:24:e5:7c:39:
75:3d:82:bb:27:61:88:89:4f:97:c0:8c:1e:c7:8b:14:28:9d:
51:74:82:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:01 2026 by rpki-client