
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
File: A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json)
Hash identifier: fh6FQePLdAKnv33y8JmR99GpFRrvwWP4NcZnus2AhKo=
Subject key identifier: F0:00:29:97:1C:9C:F1:D2:29:D4:58:12:02:F3:D3:F5:EB:A5:50:78
Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26
Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
Certificate serial: 7DEC8528FE829F255FE2307A4B23FB3CFCA12B92
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
Manifest number: 0558
Signing time: Wed 18 Mar 2026 19:12:39 +0000
Manifest this update: Wed 18 Mar 2026 19:07:39 +0000
Manifest next update: Sun 22 Mar 2026 00:01:39 +0000
Files and hashes: 1: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: oiQrxAKU3WAq8WQAa4AsG/VSgBXo6JykRbhPhmfaGc4=)
2: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: lIpuwQni1CJCCy7a6RQeBOueUSsNd+BwETQKPZ3/nzw=)
3: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: N5WXqZ6Jw+zSS8rnedVuQEefp7BbCpCEzbN4PssNcrU=)
4: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: XKUhI09Wi4TMZcF6yvreyv7XOQuUAGhZsl0LiaRVGz8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl
rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 00:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ec:85:28:fe:82:9f:25:5f:e2:30:7a:4b:23:fb:3c:fc:a1:2b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
Validity
Not Before: Mar 18 19:07:39 2026 GMT
Not After : Mar 22 00:01:39 2026 GMT
Subject: CN=F00029971C9CF1D229D4581202F3D3F5EBA55078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:88:68:d9:17:54:e1:16:65:09:a0:31:64:78:
49:ef:fc:b2:cf:8c:bb:a6:fa:c1:a2:c5:56:67:58:
ef:b4:ac:1a:d7:b9:8c:35:82:93:70:b0:4e:84:83:
27:45:a0:a8:55:33:cb:18:35:dd:e5:16:49:05:0e:
40:b4:c2:83:6d:da:6f:24:c9:5b:db:e2:d3:b0:24:
24:b2:e5:e8:56:a4:a1:01:01:fa:10:6c:77:45:1d:
72:1b:fb:80:1f:28:34:47:12:34:6d:43:f5:09:bc:
01:5a:16:55:d0:b7:5c:7d:f9:b5:14:c1:04:67:b3:
a3:5a:3e:d9:21:06:3f:5d:e5:11:f8:71:d1:02:2d:
51:4b:f6:1c:33:83:a8:c1:2b:86:a5:f4:fc:24:07:
75:53:4b:85:93:dc:24:7d:16:be:5c:86:dd:42:47:
a3:fc:b4:19:3a:15:eb:24:e5:21:fc:40:78:0f:04:
a6:2d:b3:7f:d6:dc:b7:19:7a:70:d8:15:52:85:e4:
fb:08:4a:3a:e9:0e:3c:cf:13:d8:7a:9d:23:bc:30:
08:66:e3:5c:0a:f4:7b:3d:59:17:d0:de:27:60:7e:
cb:e3:74:0e:40:50:75:90:37:b2:cc:6d:a9:fc:87:
06:7b:ab:77:ae:13:43:7c:cc:53:b9:87:f5:db:5d:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:00:29:97:1C:9C:F1:D2:29:D4:58:12:02:F3:D3:F5:EB:A5:50:78
X509v3 Authority Key Identifier:
keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:85:a3:59:ed:c4:71:50:16:12:2a:0a:45:1b:07:fd:f1:14:
eb:99:90:c7:d4:15:dd:d4:3f:b2:5d:12:dc:66:74:dd:20:0a:
12:a3:59:27:98:81:b3:54:b9:cd:d2:3e:f7:e6:cd:8a:2f:67:
14:d0:63:1a:a4:69:3e:27:d7:06:f8:a4:a4:8b:b9:ed:f5:a7:
e7:d9:ca:f6:16:a7:e9:4d:9d:7e:be:e0:36:c9:4b:eb:26:3a:
65:4c:99:b5:65:55:76:36:9f:d6:29:ba:c0:e2:fa:f3:65:93:
75:0b:10:c8:61:1f:29:8d:17:e3:21:dc:6f:20:b5:52:7d:4a:
46:9b:0b:27:62:80:93:a4:15:64:dc:00:b2:b7:c3:3b:ce:a4:
78:45:b9:8d:83:68:f7:05:09:b0:10:c9:3a:0d:a6:38:49:79:
37:cc:c5:2e:51:62:44:85:5b:e3:70:b8:4f:df:2b:ad:cf:1f:
6c:f2:09:19:21:63:78:28:73:b8:be:27:89:c6:0e:fa:9e:59:
f2:72:b4:d9:fb:7a:1a:6b:32:2d:20:8c:13:ed:0f:23:31:e5:
30:32:bf:6e:3e:79:c3:6f:62:c9:c6:f1:35:a7:39:a3:b0:d7:
3a:20:18:23:03:90:4f:f6:e7:a8:83:d9:a5:fc:fe:88:d0:4f:
5d:53:a2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 01:01:56 2026 by rpki-client