
$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
File: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft (raw, json)
Hash identifier: TaS7IcUqh6flxfJXqPe9dWy1Fu795MvevZfo/zNUIXY=
Subject key identifier: E5:64:6A:97:BF:2B:0B:BE:49:8A:FE:BD:FE:A7:06:58:60:AA:E1:F4
Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Certificate serial: 616D0218FDED8EF49FC00C9ADE638C18FA1664DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
Manifest number: 0563
Signing time: Thu 19 Mar 2026 04:12:24 +0000
Manifest this update: Thu 19 Mar 2026 04:07:24 +0000
Manifest next update: Sun 22 Mar 2026 09:01:24 +0000
Files and hashes: 1: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl (hash: rbpiygFCPue3upbxrMea5Twze3R/eA4vAmu6KSRB9bo=)
2: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: bOC+RmVGdVwwtAAFBHuMaIGcTf4BirQnm1dEmryUd+o=)
3: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: a/l5Zx5rwp7NSRqoYQhRrllZMVnmts+C/3rebqc1wt0=)
4: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: ob6mRc06BCeBAj0X28E3a80wGp9aApab42pA+hcHgrk=)
5: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: u+uBgrPGm+40zgnoGLAagJdkp/O9sV2Z6UZd95b5fdg=)
6: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: 0ks7Jrq8I5HGi1Y9q/tMRilmkwLdHpbwinToV9LEMG4=)
7: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: LVzLvHlGvkclluFVEiY44EndzlPbN92fYYJEvFwmUZU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:6d:02:18:fd:ed:8e:f4:9f:c0:0c:9a:de:63:8c:18:fa:16:64:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Validity
Not Before: Mar 19 04:07:24 2026 GMT
Not After : Mar 22 09:01:24 2026 GMT
Subject: CN=E5646A97BF2B0BBE498AFEBDFEA7065860AAE1F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:e3:bf:b7:75:be:03:a2:76:c1:2c:e9:f7:
38:88:09:2b:49:a8:ed:9f:83:b7:b1:4d:89:be:2a:
9e:55:33:35:b4:43:cc:46:2f:a7:ad:91:45:65:e2:
1c:f5:1e:e2:17:1c:f2:84:3e:c8:2e:a4:ab:4b:d8:
fb:5d:59:5a:38:3c:65:b2:81:ed:55:1e:3e:e3:91:
5b:73:8a:4f:1c:00:d5:6c:a9:42:64:bd:a6:8a:88:
cb:e6:9f:7d:53:42:9e:f8:24:0c:e1:db:5c:fa:e8:
b5:e3:84:cb:85:91:0b:44:d2:ec:c6:98:fa:ed:ae:
0a:fc:d9:9b:6f:b7:89:39:d5:e2:6e:43:85:8a:9e:
3b:88:c7:dc:c2:93:60:66:62:34:8a:05:27:2a:33:
6c:2d:52:f1:5f:b6:4e:a3:f1:a3:a6:c8:58:13:a1:
77:31:b2:65:e3:01:b9:72:00:14:10:b4:3e:39:6d:
5d:6d:da:b7:52:7e:85:2e:17:15:68:e0:86:bf:1b:
71:4f:33:00:85:36:a2:b6:ee:c5:12:01:3f:81:28:
51:d3:ce:b5:d5:a1:81:b7:99:54:3a:1d:a3:99:13:
48:0c:17:b4:c4:c9:39:56:42:22:32:3b:f0:b9:55:
fb:c1:71:9d:e7:5f:0d:7e:3a:2c:2e:5f:8f:3e:63:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:64:6A:97:BF:2B:0B:BE:49:8A:FE:BD:FE:A7:06:58:60:AA:E1:F4
X509v3 Authority Key Identifier:
keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ed:95:8c:da:7b:f9:6b:b7:13:37:97:6a:f6:ed:cd:00:0d:
5f:e4:ff:3a:3d:12:df:42:9f:65:b8:32:4a:eb:c6:53:a5:98:
fd:46:f7:29:3a:c8:66:21:83:0e:52:eb:86:14:36:ad:fb:1c:
4e:8e:a3:5c:06:7c:5b:b6:75:d5:66:0d:de:88:f3:a5:01:e4:
a9:9a:4e:f4:d9:ab:ee:37:7d:d8:b0:e5:c1:51:ef:57:5b:68:
24:49:97:0d:94:89:a7:1c:02:d6:7a:6b:16:60:61:bf:8c:ef:
14:6b:b0:72:5a:35:f3:e1:5f:b3:11:aa:ef:dc:f1:73:14:77:
96:8b:54:3c:9b:a8:f0:e6:04:77:77:dd:a1:ce:54:97:65:c7:
fe:4c:85:28:92:2e:6f:c9:77:43:79:a7:3e:1d:ac:6a:f3:fb:
13:ec:c8:13:5b:cb:7e:27:4a:ab:bc:bb:5b:f0:71:9d:fc:d6:
36:1b:04:b0:e9:b0:c1:55:9b:91:98:37:37:bd:e5:24:ca:bf:
20:46:0d:6e:a1:c4:88:10:f1:67:6d:c7:2d:d6:5e:20:1a:a8:
04:8b:51:f8:23:ba:1a:35:f4:9a:96:48:7e:e9:99:dc:cf:c6:
e8:69:6c:d4:64:28:c7:80:9c:e8:8c:af:5a:fa:33:86:45:e1:
78:16:95:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:31:06 2026 by rpki-client