
$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft
File: 1073C0AF2447C17B85643987B72701D1AE52823D.mft (raw, json)
Hash identifier: GcpWv2KpINRikvkRRF2JLMnSUYqBYof2XOMUJnpYH3U=
Subject key identifier: 72:18:9A:B5:B7:1A:E4:CF:36:EA:29:2F:F3:88:5F:24:26:25:AB:68
Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D
Certificate issuer: /CN=1073C0AF2447C17B85643987B72701D1AE52823D
Certificate serial: 0E69C347E418A79758E59E3F3F6CC7F414893AB6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft
Manifest number: 0119
Signing time: Sat 07 Mar 2026 10:20:45 +0000
Manifest this update: Sat 07 Mar 2026 10:15:45 +0000
Manifest next update: Tue 10 Mar 2026 14:15:45 +0000
Files and hashes: 1: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: 31fCRfNUFIYAvmAMKXAqFxsON/60EF/0rmnL9f/SdJI=)
2: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: eGRPg+0FqPezAL7Sp3nM4zvLQO8rtFSR4EykoCf7Z54=)
3: 1073C0AF2447C17B85643987B72701D1AE52823D.crl (hash: tIsqZubSxx9Wj4HtmuCjVxCi7L4fzcEqNtinm0xz4+M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl
rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:69:c3:47:e4:18:a7:97:58:e5:9e:3f:3f:6c:c7:f4:14:89:3a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D
Validity
Not Before: Mar 7 10:15:45 2026 GMT
Not After : Mar 10 14:15:45 2026 GMT
Subject: CN=72189AB5B71AE4CF36EA292FF3885F242625AB68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:22:98:80:88:26:c5:87:d0:fd:0c:4c:f1:
92:79:1d:9a:24:c0:1c:63:17:26:11:ff:d2:f3:06:
a0:1b:55:2b:9a:aa:bd:48:1d:79:c8:1e:6f:0d:ed:
e8:2b:6d:ac:ce:12:44:03:72:36:75:99:e9:d7:44:
09:0b:0c:e7:8f:26:bd:df:29:a7:94:cd:65:69:fc:
8d:b8:25:3a:fd:ad:61:60:9c:5a:0f:98:6f:d0:41:
f1:6b:e6:aa:59:c8:1b:b1:9e:1b:f7:b8:c3:82:af:
e1:41:d8:18:93:7b:d9:77:70:81:f1:1e:56:ee:31:
01:e2:07:f5:1d:66:8b:57:48:04:97:15:a8:54:04:
ab:c8:2c:a3:72:9c:91:fc:fa:b2:a4:39:dd:e9:47:
11:51:7e:dd:17:e9:7b:6c:06:d3:34:0a:d7:6a:68:
e8:b7:84:2b:0f:1c:5b:02:9a:da:fb:82:0d:63:0d:
f3:15:05:97:3d:c0:f9:19:fe:16:e3:4f:17:90:a7:
ec:31:33:1d:8c:ce:8e:39:af:df:35:63:f0:cb:84:
f9:96:64:4b:1d:3b:be:2a:bf:92:89:bf:a6:bc:41:
16:6c:fc:84:77:f7:e2:2e:06:f9:7f:ed:6c:d7:2f:
dd:cc:f3:80:7e:ec:4e:c7:eb:8e:d6:14:f2:bd:b0:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:18:9A:B5:B7:1A:E4:CF:36:EA:29:2F:F3:88:5F:24:26:25:AB:68
X509v3 Authority Key Identifier:
keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c9:33:1c:28:53:ef:ec:16:7d:53:21:64:11:56:46:cb:26:
83:68:7d:8e:a0:85:21:44:8a:57:38:55:24:99:9e:1c:3b:da:
a7:f0:81:0e:05:b4:dd:f9:77:09:9d:40:9d:d3:e5:01:00:31:
de:c6:a7:2c:60:49:9e:f1:1d:79:e0:bf:39:f3:3c:4a:af:a7:
82:0d:25:7d:e1:2c:f3:25:41:5b:ae:a0:a1:2c:72:34:af:cb:
88:f5:5d:43:04:88:d2:d1:38:50:0d:c0:54:e0:19:b8:ad:d5:
40:72:1a:36:68:77:ff:31:c8:ef:50:00:33:85:33:b5:d2:99:
e0:45:37:8c:8d:e9:ea:6f:2f:8b:91:d0:ad:0a:e1:06:15:6d:
20:e4:4e:55:b3:d2:77:3a:a1:a1:e6:25:03:36:c2:9b:e2:04:
f7:b2:71:2c:86:04:48:46:a0:9c:41:f4:b5:a0:90:92:2e:c1:
2d:59:0f:10:58:b4:ba:61:ad:56:cf:68:31:2d:a4:0b:3f:da:
d7:d2:50:d9:9f:d0:8b:e5:67:8c:4d:73:94:b5:2d:4b:d9:bc:
e4:32:c0:16:a3:ec:9c:1c:92:39:70:2a:36:28:71:c7:40:81:
91:7f:f7:21:f8:b6:34:b6:b7:8f:90:e3:3e:63:d9:92:eb:b7:
ec:4e:59:59
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDmnDR+QYp5dY5Z4/P2zH9BSJOrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFB
RTUyODIzRDAeFw0yNjAzMDcxMDE1NDVaFw0yNjAzMTAxNDE1NDVaMDMxMTAvBgNV
BAMTKDcyMTg5QUI1QjcxQUU0Q0YzNkVBMjkyRkYzODg1RjI0MjYyNUFCNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4wCKYgIgmxYfQ/QxM8ZJ5HZok
wBxjFyYR/9LzBqAbVSuaqr1IHXnIHm8N7egrbazOEkQDcjZ1menXRAkLDOePJr3f
KaeUzWVp/I24JTr9rWFgnFoPmG/QQfFr5qpZyBuxnhv3uMOCr+FB2BiTe9l3cIHx
HlbuMQHiB/UdZotXSASXFahUBKvILKNynJH8+rKkOd3pRxFRft0X6XtsBtM0Ctdq
aOi3hCsPHFsCmtr7gg1jDfMVBZc9wPkZ/hbjTxeQp+wxMx2Mzo45r981Y/DLhPmW
ZEsdO74qv5KJv6a8QRZs/IR39+IuBvl/7WzXL93M84B+7E7H647WFPK9sDMrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUchiatbca5M826ikv84hfJCYlq2gwHwYDVR0j
BBgwFoAUEHPAryRHwXuFZDmHtycB0a5Sgj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NmRkMTVlMy05ZWU1LTRkNTItOWVlZS03MTJiYjNiN2JmZmIvMC8xMDczQzBBRjI0
NDdDMTdCODU2NDM5ODdCNzI3MDFEMUFFNTI4MjNELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFBRTUy
ODIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll
ZWUtNzEyYmIzYjdiZmZiLzAvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAx
RDFBRTUyODIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACvJMxwoU+/sFn1TIWQRVkbLJoNofY6ghSFE
ilc4VSSZnhw72qfwgQ4FtN35dwmdQJ3T5QEAMd7GpyxgSZ7xHXngvznzPEqvp4IN
JX3hLPMlQVuuoKEscjSvy4j1XUMEiNLROFANwFTgGbit1UByGjZod/8xyO9QADOF
M7XSmeBFN4yN6epvL4uR0K0K4QYVbSDkTlWz0nc6oaHmJQM2wpviBPeycSyGBEhG
oJxB9LWgkJIuwS1ZDxBYtLphrVbPaDEtpAs/2tfSUNmf0IvlZ4xNc5S1LUvZvOQy
wBaj7JwckjlwKjYoccdAgZF/9yH4tjS2t4+Q4z5j2ZLrt+xOWVk=
-----END CERTIFICATE-----
Generated at Sat Mar 7 17:48:43 2026 by rpki-client