
$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
File: 882209E37356E0512FBE4E81B00E4F2481865087.mft (raw, json)
Hash identifier: JtXwhi1htGL6gCGVrSpDoGl4gvEjJbEjDbRCbSzb1D0=
Subject key identifier: ED:79:5D:28:78:DB:93:55:40:AF:29:60:55:D3:7D:57:60:F8:5F:B2
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Certificate issuer: /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial: 287767A24B9533D1ADBC918D6F58ED4E957BFC4E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
Manifest number: 0519
Signing time: Fri 24 Oct 2025 14:42:02 +0000
Manifest this update: Fri 24 Oct 2025 14:37:02 +0000
Manifest next update: Mon 27 Oct 2025 21:40:02 +0000
Files and hashes: 1: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: MdJ8RxR8ZYDVXBT9P8fF751Cc4xL7JgxekzcB9xdKx0=)
2: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: 5In45d5yPgAgu4EKrWednA3s/tNDYrqkLBEAtmGlKjI=)
3: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: TUhhdvGp1LOiLtnysRzIGChLZFMNnT5PF4OEU6rQz1g=)
4: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: GNr97+CgZOUFbCIDGfnRBjjUL8CMyp0MB4VIgO96YwM=)
5: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: s/GWk0rnx1fQe+9N5/NiE2vZ64ixoUOqYZCvVVS5fa4=)
6: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: upfq/Ll023pCAPQGTeGs2hbSXasfCV07dRWvMTFoCJY=)
7: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: UtJFn8cjB9oRRuew5QEOrcUcIRIAJ+KfKoJMwxwZf1I=)
8: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: njg/qVMnSFnXNm23LFJOAC9Brxk9FM9096rC9yQ0CXk=)
9: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: fWpUZJchVDwudRJxgK1oYcEU6iSSZ9RgPdltpwuInA8=)
10: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: ILfqmoxfXPHlh8GmZbUT7jZa6GPfE6TlAFjcXTufWHY=)
11: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: ae/dG+5qLBYT7KzQliS37oy8tODqNSMPLH4vHatbgLA=)
12: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: 4YSDNpw3vRi1ZpYELRMW9RHjucU5y6DLjYnJw7lk5Lw=)
13: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: sxL8WI3UrWSTsLdgL4krtb4YzuPS2/H7rwpNl9kG2s8=)
14: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: RohtMVPp7ZjWT76AR25hywvAjC+yVkxy154FLnUsdBk=)
15: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: GuM7P7x/u39aCvmJkxVuMlpYCmbP89xnoCs5WogcWI4=)
16: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: yQorJw+u2n8BFPvZbej71Ji8nM/16g2mSwkEj1PF54g=)
17: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: sH9AL8idt6oa1DBw1y1K2NRJOkrnep4hXxdB09oly/A=)
18: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: 4exgwdcQ1exTycgJCK/gqBNOkO+g3t+MeUPzY4BXBs4=)
19: 882209E37356E0512FBE4E81B00E4F2481865087.crl (hash: RpwxZx7WNP1rnSVOF3pbPeZ9uilD40LcdkdaGlBJVU8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 21:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:77:67:a2:4b:95:33:d1:ad:bc:91:8d:6f:58:ed:4e:95:7b:fc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
Validity
Not Before: Oct 24 14:37:02 2025 GMT
Not After : Oct 27 21:40:02 2025 GMT
Subject: CN=ED795D2878DB935540AF296055D37D5760F85FB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:b1:1d:b5:e7:5a:5e:5d:b0:a9:c7:b6:cd:
29:a5:63:95:53:1b:5a:a4:7f:8a:33:e2:b1:15:fa:
f5:b6:cd:46:f6:45:81:0e:1d:d7:f6:39:4c:bc:24:
38:70:77:c2:96:2b:cc:71:7f:5a:58:48:f2:d1:ce:
80:a7:12:4d:2d:88:f4:24:7b:e0:25:c6:55:d2:b1:
f0:a1:27:63:5e:c7:94:05:a8:09:b2:ee:d3:72:24:
01:4d:62:05:a2:34:30:63:21:3c:9f:54:f6:d6:48:
81:a7:bb:17:9c:b9:a8:3e:40:03:fb:7b:25:9e:f0:
63:96:03:48:78:f1:72:22:c8:db:d0:c9:1d:c2:c4:
a2:b5:72:51:ea:0d:71:f7:b7:92:fb:0d:5c:22:39:
fb:2f:59:41:d0:37:ca:06:e6:9f:a7:dd:32:cc:56:
57:4f:2c:c0:93:a8:a3:d8:ce:8a:dc:35:bc:be:6e:
24:8b:a9:ff:dd:6d:86:e4:4d:a6:1a:e1:2f:fd:98:
52:1c:3f:b1:87:33:a5:f3:22:3e:92:06:24:da:86:
48:50:4f:fe:e2:ba:b5:66:88:72:84:f8:5b:21:a1:
6c:00:e9:4d:fb:e4:14:4a:79:da:10:af:18:3f:88:
86:86:5e:06:31:1a:61:8a:52:72:3f:cf:f1:21:7a:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:79:5D:28:78:DB:93:55:40:AF:29:60:55:D3:7D:57:60:F8:5F:B2
X509v3 Authority Key Identifier:
keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f1:3f:a9:80:5d:8c:60:49:5c:c8:bd:d6:d7:40:5d:7e:74:
9e:24:99:ce:47:86:f2:5b:c5:1b:85:a2:ab:99:cb:cb:03:e5:
99:17:bb:a4:67:fb:70:03:a9:74:9d:0c:ab:e0:6c:44:e8:89:
80:dd:f0:a1:26:19:e6:22:59:fa:0d:9f:67:0e:77:74:f4:c9:
da:4f:5d:d2:82:c1:c6:85:46:b4:c0:94:ec:22:cb:bd:60:80:
6e:32:0a:01:42:16:3a:d9:20:9f:e5:9b:24:35:09:41:44:20:
c0:7c:b2:74:d4:c6:2f:c3:0e:5a:f1:79:3c:a6:ff:b3:f1:4d:
f9:6a:21:73:d1:c9:b1:77:62:26:d3:61:9d:c6:b3:5c:4f:78:
80:e6:eb:bd:a6:85:3c:6e:2b:d9:25:bc:3a:ca:60:c8:b7:30:
f2:84:43:cc:60:91:47:23:67:90:71:4e:ab:2d:66:13:f0:4c:
a9:7d:1f:d1:13:10:21:f6:7d:4d:24:f5:2d:3b:ab:c8:22:3c:
70:68:42:6a:42:03:fa:96:32:83:96:a0:cf:f7:93:c1:ee:f7:
54:74:cd:01:ab:ed:4e:8b:95:7d:8d:b4:3b:e2:ac:4c:3e:7b:
c4:23:e8:bf:3f:55:3e:0c:19:3c:81:b8:45:fb:58:ae:13:a5:
93:81:f6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 12:51:07 2025 by rpki-client