
$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
File: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft (raw, json)
Hash identifier: 8uzkZQRlHM6VEu6waTxtvSTOOPFNHjP//JKr9T6oeZQ=
Subject key identifier: 2E:91:EF:E9:29:DD:3C:CE:78:A9:86:4F:71:5B:84:A4:80:72:10:C1
Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Certificate serial: 7338AA7DDFDC9A67BDD0E16FAE64A12B063E28CE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
Manifest number: 0574
Signing time: Tue 03 Mar 2026 02:01:12 +0000
Manifest this update: Tue 03 Mar 2026 01:56:12 +0000
Manifest next update: Fri 06 Mar 2026 03:47:12 +0000
Files and hashes: 1: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: PE8TrRaW4vcKNAJ983twfVSijpuNJ3TLSSc+Qt8t8hU=)
2: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: /z09OiRj3X3jdpAzL2zzsyQl3NVUfWX0DmTJAQJUjoA=)
3: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl (hash: wEYkGPC6PtV8ajydid83Th+rkcRh+MIycLuIcYe4uGI=)
4: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: U/6aanmiS3G1NNN9piNHjwZVd8g8y5TJEUDFQPXUGlk=)
5: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: XFEPxT5rgKneUguYZI7iHSi0r6woQzAHzM7M2WIoeNI=)
6: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: aI1tvHYppd3YXyR/O37hfeObUgos+GLtu2SX+nqPoQU=)
7: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: XaCxNhVFk1U1KTVB2CbYanrzfxuEtPcg5wcygy4gOYY=)
8: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: G9QQEUF/JEpvuMiEFjI454QFIL6ErRBbxzNtJBadEKo=)
9: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: EADkNzeGnGCmwQU5JKqfE+M8ZMnucERvk9U//gfvfYM=)
10: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: +seHZcuWtkwwgdY5gf9yiLnl5NtpTzkJHA183uWwsjQ=)
11: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: W0KpE+rUhEn171HevcbczmdRBRinyTjaRQYX3+eLx8w=)
12: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: 6q6G3WlaBoWOxOrDz9l3FTN6AH7AT8Eijh6MTkRhXls=)
13: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: gXLN3MXkJce/eFsTQ9PNYvadHko8wdBPO3cRtiaDQ0I=)
14: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: UcZisdRV6VpbDwvpN9+PovvAC3nXLEWnKVwQNbh4YQE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Mar 2026 03:47:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:38:aa:7d:df:dc:9a:67:bd:d0:e1:6f:ae:64:a1:2b:06:3e:28:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Validity
Not Before: Mar 3 01:56:12 2026 GMT
Not After : Mar 6 03:47:12 2026 GMT
Subject: CN=2E91EFE929DD3CCE78A9864F715B84A4807210C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:c1:00:71:fc:11:3e:62:ca:42:86:b6:8f:
ca:dd:e7:b5:86:85:9e:4f:a3:c2:b5:99:6f:62:14:
e7:31:8e:ff:c7:ea:d1:d4:34:7e:ad:fc:1a:e0:70:
3e:f0:e0:2d:26:c9:7f:44:67:e3:a8:c9:9b:fa:93:
39:9b:5b:af:6f:e5:aa:bd:8a:80:53:3e:66:3a:68:
e5:07:1e:22:c9:0a:cb:2f:03:9f:a5:9f:9b:e9:06:
3a:0d:33:f1:49:88:28:da:5d:25:8e:61:df:bf:ca:
5e:24:1d:9e:6f:d2:98:51:1c:1e:e2:2d:61:97:f0:
d6:f1:d4:ca:2d:3a:d5:f3:51:82:da:52:71:a6:87:
78:08:78:65:58:f4:6c:a0:ca:a8:43:76:86:3d:be:
98:88:f8:f6:52:95:f1:42:78:87:5e:ee:0e:a4:c4:
eb:d3:fa:5c:72:bf:81:e6:ea:7b:cd:c0:38:ed:82:
2b:84:29:f3:5d:81:9c:98:b7:96:0d:4b:a1:b5:05:
62:f0:63:c9:4d:e1:8c:38:b8:74:3a:0e:85:50:08:
a8:45:20:09:8d:78:30:35:77:87:04:31:97:be:10:
30:e2:07:aa:d2:5b:48:ec:58:c3:2a:ee:92:92:1b:
b3:fd:23:4e:7e:43:21:9e:e9:50:6f:ca:e7:2a:e3:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:91:EF:E9:29:DD:3C:CE:78:A9:86:4F:71:5B:84:A4:80:72:10:C1
X509v3 Authority Key Identifier:
keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:55:25:44:b4:f4:82:11:7f:fa:4c:56:a8:c5:1c:d5:ae:87:
3b:b3:9b:e1:37:c7:21:69:dd:c2:ab:f1:9b:60:52:c8:0a:31:
5b:13:c2:30:9e:49:28:76:2a:b0:00:ba:39:62:92:30:6b:6c:
5e:e9:ad:25:95:a1:f5:ca:45:da:86:7c:33:ab:28:a5:7d:c3:
17:e0:79:32:48:47:e9:b5:11:32:90:62:d8:91:71:7b:cf:0b:
4f:37:58:bb:ca:0c:cc:39:88:ec:fc:ed:a7:b8:10:0b:83:25:
8e:f6:58:4e:55:0c:f2:aa:67:fa:06:bb:26:30:44:69:e4:68:
d6:14:8b:b3:1b:8c:dc:4f:67:7d:99:5c:5d:49:67:ac:9f:78:
96:8f:a3:aa:1c:34:0a:76:9c:e3:b7:2b:47:3b:00:a2:13:d4:
df:ca:ae:51:3d:1f:d0:e3:7d:64:64:15:80:4f:99:63:17:6e:
a5:d1:01:24:77:49:31:db:c3:c9:cb:46:25:38:9d:0c:12:9b:
ac:dc:76:40:72:88:5e:dd:73:89:c0:b4:c7:2a:be:0f:cf:ee:
8c:6b:1c:5e:6b:02:92:9e:8f:2f:f3:9b:b1:8f:f5:b2:9e:34:
c9:7f:c3:fd:2e:29:b2:7b:3d:a0:5a:be:7e:ae:70:b8:67:5c:
a5:0c:4c:66
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcziqfd/cmme90OFvrmShKwY+KM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB
RjcwRTczMzAeFw0yNjAzMDMwMTU2MTJaFw0yNjAzMDYwMzQ3MTJaMDMxMTAvBgNV
BAMTKDJFOTFFRkU5MjlERDNDQ0U3OEE5ODY0RjcxNUI4NEE0ODA3MjEwQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMMEAcfwRPmLKQoa2j8rd57WG
hZ5Po8K1mW9iFOcxjv/H6tHUNH6t/BrgcD7w4C0myX9EZ+OoyZv6kzmbW69v5aq9
ioBTPmY6aOUHHiLJCssvA5+ln5vpBjoNM/FJiCjaXSWOYd+/yl4kHZ5v0phRHB7i
LWGX8Nbx1MotOtXzUYLaUnGmh3gIeGVY9GygyqhDdoY9vpiI+PZSlfFCeIde7g6k
xOvT+lxyv4Hm6nvNwDjtgiuEKfNdgZyYt5YNS6G1BWLwY8lN4Yw4uHQ6DoVQCKhF
IAmNeDA1d4cEMZe+EDDiB6rSW0jsWMMq7pKSG7P9I05+QyGe6VBvyucq47FdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULpHv6SndPM54qYZPcVuEpIByEMEwHwYDVR0j
BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC
NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw
RTczMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFiYTRlNTktZmIzMS00MWI1LTg4
ZTctMGIyY2VkMWYyMDFjLzAvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3
MUVBRjcwRTczMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBANRVJUS09IIRf/pMVqjFHNWuhzuzm+E3xyFp
3cKr8ZtgUsgKMVsTwjCeSSh2KrAAujlikjBrbF7prSWVofXKRdqGfDOrKKV9wxfg
eTJIR+m1ETKQYtiRcXvPC083WLvKDMw5iOz87ae4EAuDJY72WE5VDPKqZ/oGuyYw
RGnkaNYUi7MbjNxPZ32ZXF1JZ6yfeJaPo6ocNAp2nOO3K0c7AKIT1N/KrlE9H9Dj
fWRkFYBPmWMXbqXRASR3STHbw8nLRiU4nQwSm6zcdkByiF7dc4nAtMcqvg/P7oxr
HF5rApKejy/zm7GP9bKeNMl/w/0uKbJ7PaBavn6ucLhnXKUMTGY=
-----END CERTIFICATE-----
Generated at Wed Mar 4 15:41:07 2026 by rpki-client