
$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
File: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft (raw, json)
Hash identifier: KMvRfV0NibJXV6lR0BoDxPBCExToZV3Gaq+9RSETPVE=
Subject key identifier: 3F:0F:69:DD:74:07:17:4A:42:81:AD:71:51:C5:11:CF:CE:41:FA:5D
Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1
Certificate issuer: /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1
Certificate serial: 7B447027D08121BE4B619FAF6FA491F5B9163CAE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
Manifest number: 04A4
Signing time: Thu 02 Apr 2026 11:30:43 +0000
Manifest this update: Thu 02 Apr 2026 11:25:43 +0000
Manifest next update: Sun 05 Apr 2026 21:06:43 +0000
Files and hashes: 1: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: KGskRiaq/+lRAEP6f41FobsVw96uMstK/fLzsAVB4eg=)
2: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl (hash: R0UbP3wI0/lxDw1VOQWZ+98AgOmGyfTaZijPiBaEKT4=)
3: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: inNvDvxX4hbCC8+Dho69jFxrO3UdsZFxdsWq+NYPKcc=)
4: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: ghtilaMZ6RJAQvHOL9rJ7eLcuLTYk5ZeH+7mykIlzjM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl
rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 21:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:44:70:27:d0:81:21:be:4b:61:9f:af:6f:a4:91:f5:b9:16:3c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1
Validity
Not Before: Apr 2 11:25:43 2026 GMT
Not After : Apr 5 21:06:43 2026 GMT
Subject: CN=3F0F69DD7407174A4281AD7151C511CFCE41FA5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:64:65:8a:10:f8:08:2e:7b:bf:12:bc:8b:
43:bd:5c:f5:d4:62:8b:55:98:1e:78:a3:27:3d:d5:
9c:ce:bd:32:1e:1d:5a:c6:7d:f6:45:a6:ed:e1:d0:
b2:81:f7:83:23:b8:e5:51:ad:30:f7:aa:ec:22:20:
68:65:e5:a3:8d:48:11:17:fe:50:9e:b9:2b:de:0d:
5c:e0:7f:47:1e:14:00:31:ab:63:85:6d:17:d4:1f:
d6:7a:8a:1a:ef:94:10:b4:5e:a5:f1:d2:7f:e2:d6:
28:55:a4:6d:a9:bd:c1:c3:44:6c:7a:fe:b1:6b:9c:
f2:16:2d:9d:c4:09:79:1b:d1:c1:20:5d:03:dc:23:
60:9d:a8:91:65:19:21:bb:23:bd:23:79:74:c2:be:
31:85:ac:c1:8c:08:43:aa:3e:63:06:2b:fc:ce:2a:
3f:61:fa:d1:c3:c3:d1:b9:d2:3d:86:2b:9a:cb:08:
d6:ec:76:68:4f:d9:32:80:e2:a8:f8:61:14:f8:9a:
30:35:c3:08:a6:a1:05:09:69:ca:54:30:c4:35:8b:
eb:ac:44:85:78:cf:61:bc:71:09:bd:2f:ed:31:82:
0e:7c:72:8c:93:a3:59:04:df:6b:f9:b6:4a:9a:f0:
79:68:7a:ec:d1:04:e2:50:c1:99:0f:59:e8:95:1e:
11:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0F:69:DD:74:07:17:4A:42:81:AD:71:51:C5:11:CF:CE:41:FA:5D
X509v3 Authority Key Identifier:
keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4d:73:73:27:24:f1:84:eb:f2:89:e7:6a:13:69:7c:f1:33:
7a:7e:0d:0b:05:5a:fb:98:28:23:e6:bb:6e:97:eb:04:b9:b6:
c8:53:c7:12:31:26:f9:7c:9a:98:24:d6:34:94:68:3d:2d:2e:
bb:54:a7:be:95:95:e0:0c:3b:f2:6e:c2:96:2d:96:07:84:9b:
e0:08:0b:72:bb:9a:8e:a4:7f:45:cb:60:13:3e:24:39:fc:b2:
4e:9c:75:f7:e5:33:d4:ef:c1:ce:2a:f4:00:fc:a3:97:d8:cb:
20:04:f4:00:60:92:16:ac:75:54:f9:88:87:a7:e1:20:1e:87:
53:06:3b:e3:49:88:ab:94:36:89:dc:be:4e:37:e2:b9:84:73:
d5:d0:ee:9a:6d:74:12:40:02:7a:42:e7:68:03:b0:31:ff:90:
f8:0b:78:88:56:3b:1d:22:cf:cb:e1:df:08:e7:26:f2:08:1f:
ed:e1:97:6d:3b:5c:ef:89:c9:2b:c9:c7:f6:ea:3b:7e:cd:7b:
8b:2a:5e:90:c4:da:4a:19:31:6f:0a:09:b1:2c:34:4c:eb:48:
30:7d:7a:f7:d3:45:1d:24:eb:12:87:5b:05:96:a8:e0:52:ac:
0d:d9:4a:5e:60:95:92:88:6f:fe:c0:67:fe:0a:e8:dc:cb:18:
86:b0:df:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 10:31:00 2026 by rpki-client