
$ rpki-client -vvf repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft
File: AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft (raw, json)
Hash identifier: R9p9fDUmhg9+/+ES5krAs77azhwCkC9fiMY2xfUweFA=
Subject key identifier: 78:3F:3B:A0:A9:26:DF:C9:DF:02:8D:05:3B:17:8B:E7:54:1F:42:2A
Authority key identifier: AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94
Certificate issuer: /CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494
Certificate serial: 5514A341AC2028C176795FAFD836E5DC140AD296
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft
Manifest number: 0214
Signing time: Tue 17 Mar 2026 21:12:05 +0000
Manifest this update: Tue 17 Mar 2026 21:07:05 +0000
Manifest next update: Sat 21 Mar 2026 00:57:05 +0000
Files and hashes: 1: AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl (hash: 2bhZn6hmbxsW3GbLOYKNVvs3mDClQwsOjylqbv/snnI=)
2: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: gwBlMBrSpLgsa+ACTv/ospejLYlB+0aLA704l83TjHw=)
3: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: QWfnQB0qvC1JfFFIpfKBeaSWuT6akGE7VeRHdRdprIk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl
rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 00:57:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:14:a3:41:ac:20:28:c1:76:79:5f:af:d8:36:e5:dc:14:0a:d2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494
Validity
Not Before: Mar 17 21:07:05 2026 GMT
Not After : Mar 21 00:57:05 2026 GMT
Subject: CN=783F3BA0A926DFC9DF028D053B178BE7541F422A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:5c:13:ac:ca:66:d4:58:f4:44:36:78:b2:
6b:e0:a0:97:12:00:0c:a4:46:0d:af:b7:be:8e:5f:
46:41:7f:30:45:cc:47:ce:4c:cc:e6:3e:1e:8f:67:
d2:21:15:b9:a7:7c:19:d9:a4:09:30:a8:d3:01:d4:
37:fa:39:65:7b:c4:37:c2:da:6c:71:9c:c9:41:11:
ca:ee:68:7f:72:01:41:ff:e2:75:ec:63:46:14:62:
a6:29:9f:ed:76:ae:f0:15:a8:5e:01:f1:30:8d:26:
dd:ee:c8:31:59:c7:f9:20:22:af:d2:d3:ee:aa:76:
64:73:95:34:d1:25:ae:12:85:91:69:6e:b7:cb:3c:
b9:64:2b:04:f0:cf:a3:9f:eb:b5:43:67:d4:68:0f:
d9:16:00:15:06:2d:fc:9e:a8:32:89:21:36:54:7d:
ad:f6:11:a8:a7:63:59:c8:b1:11:86:7d:69:e3:21:
0f:a7:97:03:5d:4c:d3:22:e7:24:ad:7e:3a:ea:82:
48:6c:b4:44:36:b5:dd:9b:a2:cf:7a:fa:3e:37:07:
05:a8:0c:2d:e4:ff:cc:50:07:b2:0e:43:af:59:50:
78:31:ab:29:d7:d2:37:bb:10:5a:a1:f7:93:b8:78:
67:6d:d1:65:3b:f5:52:c5:a4:1d:86:6e:06:4d:93:
48:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3F:3B:A0:A9:26:DF:C9:DF:02:8D:05:3B:17:8B:E7:54:1F:42:2A
X509v3 Authority Key Identifier:
keyid:AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f7:98:ad:6d:49:3c:e4:9a:f4:8a:34:2b:b5:3a:90:80:8a:
6b:ca:73:3b:4f:d0:5c:18:d5:ff:d4:77:a6:6e:bf:19:62:e2:
36:aa:98:14:30:cb:72:48:63:79:83:61:04:67:19:ac:23:9a:
f9:8a:44:e8:84:b3:0a:a6:fe:da:39:a1:c2:78:15:e8:9e:ba:
4b:81:8a:09:1f:75:d6:af:1a:5b:67:8d:0e:ce:76:eb:a1:b7:
83:db:7e:4c:6e:fd:d8:86:14:bc:5b:51:20:6d:a8:59:81:3c:
29:e8:2f:30:a9:89:e6:3e:f9:dc:9d:25:ad:d2:bf:16:d4:80:
6f:55:03:03:12:43:20:4e:a6:8d:db:c7:16:68:03:1a:c4:7f:
37:50:26:9d:d4:28:a2:c8:f5:65:aa:b7:84:d4:4a:be:4e:ba:
c7:c2:85:49:b5:1d:c2:6c:36:2d:06:32:94:32:e0:0e:0a:7a:
b9:92:9a:0d:b7:f5:7e:57:e2:32:6d:f3:1f:65:8d:32:05:09:
4b:a6:10:a3:f3:70:04:0f:c1:83:e8:20:bd:b8:ca:be:20:99:
57:61:bf:3e:ac:6b:64:e6:ed:ca:3b:16:2f:3a:a8:26:73:53:
83:3c:4b:55:83:0e:47:ec:53:1a:e9:c5:f4:72:00:33:e7:0c:
6c:d9:d4:ad
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVRSjQawgKMF2eV+v2Dbl3BQK0pYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkw
NTY4RjQ5NDAeFw0yNjAzMTcyMTA3MDVaFw0yNjAzMjEwMDU3MDVaMDMxMTAvBgNV
BAMTKDc4M0YzQkEwQTkyNkRGQzlERjAyOEQwNTNCMTc4QkU3NTQxRjQyMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nlwTrMpm1Fj0RDZ4smvgoJcS
AAykRg2vt76OX0ZBfzBFzEfOTMzmPh6PZ9IhFbmnfBnZpAkwqNMB1Df6OWV7xDfC
2mxxnMlBEcruaH9yAUH/4nXsY0YUYqYpn+12rvAVqF4B8TCNJt3uyDFZx/kgIq/S
0+6qdmRzlTTRJa4ShZFpbrfLPLlkKwTwz6Of67VDZ9RoD9kWABUGLfyeqDKJITZU
fa32EainY1nIsRGGfWnjIQ+nlwNdTNMi5yStfjrqgkhstEQ2td2bos96+j43BwWo
DC3k/8xQB7IOQ69ZUHgxqynX0je7EFqh95O4eGdt0WU79VLFpB2GbgZNk0jjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUeD87oKkm38nfAo0FOxeL51QfQiowHwYDVR0j
BBgwFoAUrV6nbXq72GF8Mj8G4k71GQVo9JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MjllNzA2NC1iMzUyLTQzYjYtOWYwOS01MTRkNjhhMjczOWUvMC9BRDVFQTc2RDdB
QkJEODYxN0MzMjNGMDZFMjRFRjUxOTA1NjhGNDk0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkwNTY4
RjQ5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm
MDktNTE0ZDY4YTI3MzllLzAvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1
MTkwNTY4RjQ5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHf3mK1tSTzkmvSKNCu1OpCAimvKcztP0FwY
1f/Ud6Zuvxli4jaqmBQwy3JIY3mDYQRnGawjmvmKROiEswqm/to5ocJ4FeieukuB
igkfddavGltnjQ7Oduuht4Pbfkxu/diGFLxbUSBtqFmBPCnoLzCpieY++dydJa3S
vxbUgG9VAwMSQyBOpo3bxxZoAxrEfzdQJp3UKKLI9WWqt4TUSr5OusfChUm1HcJs
Ni0GMpQy4A4KermSmg239X5X4jJt8x9ljTIFCUumEKPzcAQPwYPoIL24yr4gmVdh
vz6sa2Tm7co7Fi86qCZzU4M8S1WDDkfsUxrpxfRyADPnDGzZ1K0=
-----END CERTIFICATE-----
Generated at Thu Mar 19 09:41:27 2026 by rpki-client