
$ rpki-client -vvf repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft
File: F075D91933F7B3147C303794D6C498142A2D33C6.mft (raw, json)
Hash identifier: FbBHv/GgGjUOhiPZwLpAynweGVAOMj5TgYbI+zqmHOs=
Subject key identifier: CE:96:1F:BB:D8:54:16:B0:46:A0:01:9D:84:47:B6:CC:65:C1:5D:CC
Authority key identifier: F0:75:D9:19:33:F7:B3:14:7C:30:37:94:D6:C4:98:14:2A:2D:33:C6
Certificate issuer: /CN=F075D91933F7B3147C303794D6C498142A2D33C6
Certificate serial: 3870AE5191FBBEE72CFA8C893B938F3B9B86FBBC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft
Manifest number: 01DF
Signing time: Tue 21 Apr 2026 11:41:47 +0000
Manifest this update: Tue 21 Apr 2026 11:36:47 +0000
Manifest next update: Fri 24 Apr 2026 14:54:47 +0000
Files and hashes: 1: 3130332e3235332e3132342e302f32342d3234203d3e203539313432.roa (hash: KhdAwHPIRwMrgrQqaZcX0vHGpMUk+wFVQWNDCczhLBo=)
2: F075D91933F7B3147C303794D6C498142A2D33C6.crl (hash: 8TfA4TgKLvo2AWlNzdGjNVl7njyouP8usky7YJVLfDI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.crl
rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:70:ae:51:91:fb:be:e7:2c:fa:8c:89:3b:93:8f:3b:9b:86:fb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F075D91933F7B3147C303794D6C498142A2D33C6
Validity
Not Before: Apr 21 11:36:47 2026 GMT
Not After : Apr 24 14:54:47 2026 GMT
Subject: CN=CE961FBBD85416B046A0019D8447B6CC65C15DCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:cf:97:87:87:eb:5e:89:04:4e:fb:97:4d:
82:f6:d5:34:e4:40:f8:59:20:25:3f:96:5a:a9:a3:
3c:0b:2e:3c:6c:6e:d2:ae:c9:d2:8d:e8:fb:9a:57:
02:7d:de:91:d4:38:47:85:0d:1b:aa:85:80:6c:b5:
99:d1:41:6c:9e:13:3f:50:37:f9:03:c1:fa:ff:1e:
1d:99:d2:97:da:c4:8d:71:96:75:38:a4:86:6d:73:
a2:cd:ad:89:cb:3c:3f:84:89:e7:d4:22:95:27:21:
02:b5:d7:4a:d3:f0:ef:4a:13:95:9a:05:54:76:49:
17:a5:06:d6:f4:7a:09:4e:33:a3:e4:91:55:f1:26:
bf:43:38:70:4e:d3:07:d8:d1:70:e4:02:fa:40:d2:
dc:8f:e3:3d:e3:4c:dd:79:f1:ba:f1:bb:ca:25:ac:
9e:2b:49:27:d3:7b:ab:39:59:01:98:98:9c:dd:ac:
25:f4:28:0d:7e:95:42:ca:ff:31:1a:a9:f9:99:88:
66:ed:e8:f7:f5:93:a2:57:fc:7a:c6:05:b9:bc:c9:
10:3d:e1:56:df:f2:85:5e:b7:0c:0b:5d:81:ee:3b:
cb:6c:b1:c2:38:1f:40:0e:d2:82:77:75:b3:89:40:
f2:6e:31:d9:6a:02:60:18:db:8d:d1:7f:19:14:6c:
1e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:96:1F:BB:D8:54:16:B0:46:A0:01:9D:84:47:B6:CC:65:C1:5D:CC
X509v3 Authority Key Identifier:
keyid:F0:75:D9:19:33:F7:B3:14:7C:30:37:94:D6:C4:98:14:2A:2D:33:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F075D91933F7B3147C303794D6C498142A2D33C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/532c5121-f749-4a54-a9ec-f6c349f34310/0/F075D91933F7B3147C303794D6C498142A2D33C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7d:1c:fa:fb:86:c9:39:b0:58:54:30:65:7c:65:6c:b2:8e:
22:23:79:44:e1:2d:fe:82:61:28:cc:b4:eb:fb:14:18:fc:d6:
47:8a:53:91:8d:8c:23:70:1b:78:0e:ba:e9:c1:ff:3d:ea:07:
fe:9a:b5:5f:01:65:54:00:00:e6:49:de:9c:25:56:37:40:af:
fb:b0:5f:60:ba:68:e7:f2:b0:a4:1b:f2:fc:6a:66:e2:8a:93:
d0:09:b0:ab:ad:6b:00:37:8a:62:5a:a0:4d:f9:53:28:65:24:
7e:d1:f8:98:5c:d0:66:14:04:3d:cb:6d:5d:25:5f:ea:b5:9c:
5d:56:47:3e:3b:02:be:c9:57:12:c5:c0:51:26:dc:c6:74:be:
11:66:7d:19:5a:8c:84:2a:d6:15:08:e4:9e:eb:6c:55:63:3e:
0b:b8:4d:95:c4:25:f7:37:0f:d1:ad:4f:d2:79:50:86:d9:fc:
fc:a7:40:93:0f:c0:b7:19:38:90:d9:b0:ed:eb:de:d4:32:c4:
9b:6e:86:9f:58:5a:9d:3a:b6:60:6d:6f:e1:16:d9:3e:ff:80:
44:d4:70:a6:ab:69:3b:d4:46:c8:31:25:49:78:60:be:d5:3c:
9d:30:d6:3e:f4:f6:24:0d:24:60:80:1d:21:a3:28:a1:7e:e2:
77:30:50:49
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOHCuUZH7vucs+oyJO5OPO5uG+7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA3NUQ5MTkzM0Y3QjMxNDdDMzAzNzk0RDZDNDk4MTQy
QTJEMzNDNjAeFw0yNjA0MjExMTM2NDdaFw0yNjA0MjQxNDU0NDdaMDMxMTAvBgNV
BAMTKENFOTYxRkJCRDg1NDE2QjA0NkEwMDE5RDg0NDdCNkNDNjVDMTVEQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBz8+Xh4frXokETvuXTYL21TTk
QPhZICU/llqpozwLLjxsbtKuydKN6PuaVwJ93pHUOEeFDRuqhYBstZnRQWyeEz9Q
N/kDwfr/Hh2Z0pfaxI1xlnU4pIZtc6LNrYnLPD+EiefUIpUnIQK110rT8O9KE5Wa
BVR2SRelBtb0eglOM6PkkVXxJr9DOHBO0wfY0XDkAvpA0tyP4z3jTN158brxu8ol
rJ4rSSfTe6s5WQGYmJzdrCX0KA1+lULK/zEaqfmZiGbt6Pf1k6JX/HrGBbm8yRA9
4Vbf8oVetwwLXYHuO8tsscI4H0AO0oJ3dbOJQPJuMdlqAmAY243RfxkUbB5NAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUzpYfu9hUFrBGoAGdhEe2zGXBXcwwHwYDVR0j
BBgwFoAU8HXZGTP3sxR8MDeU1sSYFCotM8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MzJjNTEyMS1mNzQ5LTRhNTQtYTllYy1mNmMzNDlmMzQzMTAvMC9GMDc1RDkxOTMz
RjdCMzE0N0MzMDM3OTRENkM0OTgxNDJBMkQzM0M2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjA3NUQ5MTkzM0Y3QjMxNDdDMzAzNzk0RDZDNDk4MTQyQTJE
MzNDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyYzUxMjEtZjc0OS00YTU0LWE5
ZWMtZjZjMzQ5ZjM0MzEwLzAvRjA3NUQ5MTkzM0Y3QjMxNDdDMzAzNzk0RDZDNDk4
MTQyQTJEMzNDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABV9HPr7hsk5sFhUMGV8ZWyyjiIjeUThLf6C
YSjMtOv7FBj81keKU5GNjCNwG3gOuunB/z3qB/6atV8BZVQAAOZJ3pwlVjdAr/uw
X2C6aOfysKQb8vxqZuKKk9AJsKutawA3imJaoE35UyhlJH7R+Jhc0GYUBD3LbV0l
X+q1nF1WRz47Ar7JVxLFwFEm3MZ0vhFmfRlajIQq1hUI5J7rbFVjPgu4TZXEJfc3
D9GtT9J5UIbZ/PynQJMPwLcZOJDZsO3r3tQyxJtuhp9YWp06tmBtb+EW2T7/gETU
cKaraTvURsgxJUl4YL7VPJ0w1j709iQNJGCAHSGjKKF+4ncwUEk=
-----END CERTIFICATE-----
Generated at Wed Apr 22 07:28:30 2026 by rpki-client