
$ rpki-client -vvf repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft
File: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft (raw, json)
Hash identifier: jP7GuvYWQymeA8qhsCXFCGg9FbMpI+zMYozFsh0wsBg=
Subject key identifier: 01:39:8E:79:32:9B:6A:69:FB:14:5E:0D:80:58:F9:E5:85:FE:63:81
Authority key identifier: B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC
Certificate issuer: /CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC
Certificate serial: 15DDEA3EA70DDBCE3DE32A5A5D189EC17B539B8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft
Manifest number: 055E
Signing time: Wed 25 Mar 2026 13:01:22 +0000
Manifest this update: Wed 25 Mar 2026 12:56:22 +0000
Manifest next update: Sat 28 Mar 2026 22:11:22 +0000
Files and hashes: 1: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl (hash: mH/qLbwv92Z4gTuE65kM70knlb4uZM5ngz8h0aQxypg=)
2: 3130332e3132332e3233362e302f32342d3234203d3e20313338303738.roa (hash: RmlnKYQXWGOfP+UEgb2aQ4Zckhx5L2Ib8Jbz3UBAKro=)
3: 323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa (hash: O7ms2O+UhtZVKkE81cuQDtuTyN3BEIVlVc+cc3/gZMg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl
rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 22:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:dd:ea:3e:a7:0d:db:ce:3d:e3:2a:5a:5d:18:9e:c1:7b:53:9b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC
Validity
Not Before: Mar 25 12:56:22 2026 GMT
Not After : Mar 28 22:11:22 2026 GMT
Subject: CN=01398E79329B6A69FB145E0D8058F9E585FE6381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:9a:ec:34:f4:45:a8:d6:d1:96:63:86:bb:
34:97:e9:98:1d:4e:be:41:3b:d4:f4:c3:f4:b8:f1:
c4:b0:56:1e:93:8d:a4:e3:e8:52:48:8c:77:37:c6:
89:ce:0f:8f:13:02:72:92:3e:b1:b5:d0:67:9d:23:
70:f7:a0:e6:83:a5:c0:fe:42:f0:ee:13:5d:10:56:
25:c9:43:85:e7:65:b4:48:09:86:2d:61:7c:50:22:
24:2c:42:97:6a:68:e6:75:6d:3c:86:ba:db:04:34:
29:94:57:8a:e8:d9:4b:29:54:22:c9:4c:8f:ea:a7:
ab:43:07:e1:6b:82:3c:a0:54:13:0a:41:a4:a4:f3:
5b:ef:42:c1:d1:ab:a4:89:8b:ee:a0:45:70:16:15:
7b:0b:00:38:09:2a:44:4e:c4:d1:6c:4a:bb:2b:61:
8f:04:a5:5d:b7:e6:64:53:26:ca:40:e6:dc:8a:22:
b1:ed:03:b2:f2:19:61:1e:f4:17:29:5b:5f:77:0a:
c8:95:00:f6:f3:7a:f3:31:d2:07:10:b6:37:3d:2b:
c5:01:c8:5b:ac:86:ac:99:bb:80:4e:8e:90:4f:e6:
ac:f0:41:22:cc:d9:46:70:f3:83:35:7f:fb:53:09:
13:8a:72:60:19:5d:5e:b2:62:26:50:47:03:97:84:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:39:8E:79:32:9B:6A:69:FB:14:5E:0D:80:58:F9:E5:85:FE:63:81
X509v3 Authority Key Identifier:
keyid:B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:93:25:47:07:14:83:07:64:66:7e:03:17:db:d5:08:1f:ab:
0c:92:fa:75:a1:a1:9f:5b:d1:72:4d:19:4a:05:fb:c4:40:b9:
ae:66:87:4b:17:c8:cf:9c:8c:e7:1c:f9:3f:2f:84:ed:86:44:
84:7d:4c:13:c7:9c:d5:ef:4d:91:6d:95:0d:3b:22:45:db:77:
d0:45:a7:70:58:cb:5e:c2:1e:c8:24:26:74:10:e8:d1:f0:f0:
94:04:2a:7a:eb:8d:24:3c:16:a4:9b:99:64:e9:67:ba:df:18:
a9:1f:c4:80:5f:0c:0a:e5:d7:2b:0c:21:a3:6c:e2:dc:ab:6c:
d8:f3:f8:62:35:7e:71:a8:2f:fb:a0:0c:d3:99:69:70:6f:d4:
e5:0e:8b:ac:f1:27:ca:cd:72:f6:b8:60:46:ff:2a:a1:ba:62:
7c:7e:fa:8a:31:c9:f8:cf:4c:0d:d9:71:1c:37:24:91:ec:00:
67:5a:04:88:5c:c7:c2:81:9f:2b:a7:38:a0:4b:52:39:40:cc:
63:89:11:4e:64:0c:2f:0a:66:6a:dd:f3:14:b0:36:25:9e:50:
6d:87:5b:df:ed:0c:0a:19:ec:f5:67:a9:dd:2a:68:af:a8:37:
4d:b1:7a:7a:04:f0:19:af:6a:be:be:5e:b9:03:a6:55:0b:13:
14:95:4d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:04:47 2026 by rpki-client