
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
File: 735D87BA86773AC70137CF53116358A1F3B19766.mft (raw, json)
Hash identifier: 7tpI8A7gdjedYfQ76nrBBGWs9/QQSs72PVaFNK9e7IA=
Subject key identifier: F5:72:B3:47:A2:2A:BA:94:FB:B7:E5:88:C8:05:BC:B6:47:4D:B3:F5
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Certificate issuer: /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial: 02ECE3EA43685B596FC5FB8A9DD25B06C66D77E9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
Manifest number: 028A
Signing time: Thu 12 Mar 2026 18:01:15 +0000
Manifest this update: Thu 12 Mar 2026 17:56:15 +0000
Manifest next update: Sun 15 Mar 2026 21:04:15 +0000
Files and hashes: 1: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: MNca57frzbraXQ+A5sffHCuXC7kbkp16cgNgxDCrZrE=)
2: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: cuW15q9SnbE27U2Jg8nnNYvxOwHbFyEv1g42R3Sx4E0=)
3: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: SoFui+6+9U4okutKDEEDEO8cNoDM72pJozwIgVHrak0=)
4: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: bNf7w52cmLw3GYp+mMaw3papmg1ZcgmFTgd1v4VSUIU=)
5: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: ixUeVPdiiujjqdz2cxBs4b9W1yytwj3hYRmTEjubFdc=)
6: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: Vj9b7eOBgij03V9LOKkEMCElDrFIB3RU0Drnp1lzskU=)
7: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: hML4QQ0UsZ/MNuzlhXm7ZxAfBsEoo8p/TG6zTdeHPYA=)
8: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: cA/F4dRQqVseyocCpcE2agAw/XVimr3HwwnooMdskYo=)
9: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: MYkgPF54ZFrZUvgyAUVZduFZA6VqGujX+c3smzb0mEg=)
10: 735D87BA86773AC70137CF53116358A1F3B19766.crl (hash: 0CLBkQcJUeHjyQ8Amp7pCGhbnpabsTUGHWK/bOclz+k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Mar 2026 21:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:ec:e3:ea:43:68:5b:59:6f:c5:fb:8a:9d:d2:5b:06:c6:6d:77:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
Validity
Not Before: Mar 12 17:56:15 2026 GMT
Not After : Mar 15 21:04:15 2026 GMT
Subject: CN=F572B347A22ABA94FBB7E588C805BCB6474DB3F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:aa:6f:3a:42:eb:81:ec:7e:84:41:1c:41:
22:d8:1f:4d:36:d1:04:f2:37:77:95:62:48:12:62:
22:53:4d:64:e1:af:22:6f:02:3d:a8:e3:cf:30:63:
c5:0e:07:75:89:ed:a3:9c:22:81:f0:aa:f6:18:9e:
74:a7:c5:d9:c1:f2:52:c1:a0:b7:bc:7a:b6:97:f9:
dd:7e:e3:64:e2:fe:b8:51:e2:80:1e:bc:f9:ac:69:
f4:cf:21:42:8c:c7:7f:55:3c:c5:02:86:54:72:dc:
75:f1:66:96:47:64:5e:13:34:26:ea:f3:c5:03:a7:
1e:59:0d:12:45:30:1c:43:b0:62:aa:af:fe:e5:9c:
19:71:96:15:d3:d3:64:6d:7e:56:6c:c3:24:93:22:
68:a2:e4:5a:74:13:7b:b1:8c:5e:71:7f:7d:5d:b2:
cf:a3:30:95:8c:30:94:0e:07:22:2b:a4:bf:45:1f:
68:84:ad:84:f4:a5:28:a7:03:55:cb:2c:3c:40:4a:
a1:8a:9e:c8:fb:9c:c9:a0:47:07:94:f7:30:9d:64:
f5:82:2a:9b:99:a6:26:f1:de:b3:64:09:0f:ae:22:
82:d3:a6:2c:bd:1a:d4:87:0b:77:b0:70:01:af:e8:
fa:47:51:34:58:d5:85:b4:20:44:18:69:ba:70:dc:
f2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:72:B3:47:A2:2A:BA:94:FB:B7:E5:88:C8:05:BC:B6:47:4D:B3:F5
X509v3 Authority Key Identifier:
keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:50:6e:1d:22:1d:c7:ad:e9:cb:8f:ef:bb:0b:e9:b8:80:1d:
d9:f9:d1:a6:48:2c:38:5d:4b:0f:e7:68:1e:16:db:28:48:53:
53:66:53:80:39:51:c4:3a:42:7a:89:d9:22:a0:3e:c8:57:b4:
ac:9c:c1:0a:74:1a:3f:c2:28:0d:a9:88:a9:1a:3a:31:bf:03:
3c:13:17:b4:37:d5:e6:b5:bb:a5:b3:f4:6d:4b:8b:75:ab:4b:
32:c0:bf:61:b6:ea:68:36:76:d2:68:8b:16:21:73:ce:d8:43:
72:1e:18:00:5d:ee:d2:d2:e9:c5:b3:d7:3e:78:90:70:d4:5f:
1f:42:c8:09:18:88:29:5e:e8:cd:48:ac:07:98:f9:54:0e:ae:
1d:d4:fb:02:25:eb:a8:5b:5f:02:3e:aa:ad:80:ce:cf:78:3a:
69:1d:58:77:f2:5e:c6:2b:b6:8a:7f:62:22:e8:27:e4:b5:87:
63:83:de:ea:c9:2a:76:87:25:68:99:32:e1:24:bd:55:f5:2e:
13:c7:a1:24:31:83:33:61:6f:63:a7:ac:fa:3d:b2:52:7d:fb:
3d:78:1b:97:16:f1:81:be:41:a3:af:e1:c6:82:ce:36:ad:e0:
d5:94:88:a7:54:13:ae:69:db:32:51:2f:5d:97:28:1c:b8:10:
ba:04:f8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:59:10 2026 by rpki-client