
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
File: 1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft (raw, json)
Hash identifier: 8gdbP0ue60sac4egqdh/W3O2jxGTSoTQsegZEabHsB0=
Subject key identifier: C5:BB:70:AD:F5:3D:76:3E:65:AD:2F:E9:EB:AB:E9:1A:3F:C3:C6:F8
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial: 1609F3728CFC64F6BF343CA2896BE17E69ADC49A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
Manifest number: 0248
Signing time: Sun 22 Mar 2026 20:01:48 +0000
Manifest this update: Sun 22 Mar 2026 19:56:48 +0000
Manifest next update: Thu 26 Mar 2026 01:05:48 +0000
Files and hashes: 1: 3230322e34332e37322e302f32342d3234203d3e203435323938.roa (hash: jDiUEHNdOW0W156ifBRgYX7rTv/4v0ShYtKyTk4mP1Y=)
2: 3138322e31362e3235352e302f32342d3234203d3e203435323938.roa (hash: 9ep46STng+HOxh9c8HhUmGX/ItsHhIo20sbDT4SfbmQ=)
3: 3130332e3234372e3234342e302f32342d3234203d3e203435323938.roa (hash: ofYpfyIwrFc3EyGc5HbuOjiaT8PI5lzgpR6J06rc1og=)
4: 3138322e31362e3235332e302f32342d3234203d3e203435333233.roa (hash: rnW674Nfaq+nd+C3AdFWIPPv9a7ZGDzKn3MFfHaiNyU=)
5: 3138322e31362e3234352e302f32342d3234203d3e203435323938.roa (hash: HmndDe5qVshUrqKXy6c3lSUKP2kS5fO5we4iEJUBxwY=)
6: 3138322e31362e3235322e302f32342d3234203d3e203435323938.roa (hash: rL0yA2eg2dpCd9nph1t0CwiHstByILDunVuD3ZpaeRA=)
7: 3138322e31362e3235312e302f32342d3234203d3e203435323938.roa (hash: tuJLeEsIMyZFf0T93zoOyKZn9yjy4oU9oMLzTS55h8U=)
8: 3138322e31362e3234312e302f32342d3234203d3e203435323938.roa (hash: wY7i4EqwqdRyPK3tA7Ai92los6YnXZwhh+FXLbFVJSQ=)
9: 3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa (hash: 9GPvbzS14nrsGqBa86Psp3VYtnnpTdNwmEPZ8WpOVfk=)
10: 34332e3234392e3230382e302f32342d3234203d3e203435323938.roa (hash: kir6HzO6TsF3UBXe2ZlqXSSUm84/f99k2Bf6oJ5BbWE=)
11: 3138322e31362e3234382e302f32342d3234203d3e203435323938.roa (hash: X2MWoYk15EbtUusvVf62LOnsk/5nadLOVJxwILgNrpw=)
12: 3138322e31362e3234372e302f32342d3234203d3e203435323938.roa (hash: AtrdEbBV5DShM2mzws5DP5xaMV8dfYRa04OIV3075t0=)
13: 3138322e31362e3234332e302f32342d3234203d3e203435323938.roa (hash: yzViDUy15p7n4BcCRqTTglbGa8IcIW7RyWumPNJDvqo=)
14: 3138322e31362e3234342e302f32342d3234203d3e203435323938.roa (hash: rWcyY6h+WeyKitdTgCaLhWornePj5xcoNPCsRnNqZB8=)
15: 3130332e3235332e3130362e302f32342d3234203d3e2039323531.roa (hash: 76H0qrG4Uy5/8aWW6KHmL8OdUAxhoKIYB8VrEwRt7hA=)
16: 3230322e34332e37332e302f32342d3234203d3e203435323938.roa (hash: 61f7Q97t84VkVRF5YTtz7buXAr4BZUrQSVIeifN3UC4=)
17: 34332e3234392e3230392e302f32342d3234203d3e203435323938.roa (hash: i7hFR9y7ZN9Dd4gezE+BspWILKeKEoVfjSa55Gcaris=)
18: 3230322e34332e37342e302f32342d3234203d3e203435323938.roa (hash: i+PnRRnUxlVeVQWYK+xvxmyT3h6ABZPSD9MUCiKy2nc=)
19: 3230322e34332e37352e302f32342d3234203d3e203435323938.roa (hash: i6/PHdchDVzNOn1ijGjOYuOBRtdGd0SlcF2ajlTzVgU=)
20: 1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl (hash: G+f7aEQQnte1TbXwRy08aAnq19mHQeix3KtUWn6nOsE=)
21: 323430353a3730303a3a2f33322d3332203d3e2039323531.roa (hash: zJMU7QEPzt1Do0d3+Mn+WDUWKKEjrLl9f5m3udavO0Q=)
22: 3138322e31362e3234372e302f32342d3234203d3e20313337333633.roa (hash: hHyrlzR+Le+OhhKvrAcguDCXcnibJcvGLPFdVbHBstw=)
23: 3130332e3234372e3234352e302f32342d3234203d3e203435323938.roa (hash: bHqpsq84uIhoWcWxe7oYJq3JF/6gomerkmgGc5KSkIk=)
24: 3230322e34332e37352e302f32342d3234203d3e20313337333633.roa (hash: nk9CeskmOhQC6XjBRgYhclCRJwtujNj/cQR4XOqGRuQ=)
25: 3230332e3230392e3139302e302f32342d3234203d3e203435323938.roa (hash: jIby9s1nINd6rj0OgWJ3XrEYmtSQ3/1M0by0m4EkKEA=)
26: 3138322e31362e3235342e302f32342d3234203d3e203435323938.roa (hash: WHf+vsK6H58iEm7i814JdrFsRDazGTrDW/jhnCRMY5o=)
27: 3138322e31362e3234362e302f32342d3234203d3e203435323938.roa (hash: FjDJ58MGH2Kic7+guQjA1l9znFMPxD6S25vaDbSNElQ=)
28: 34392e35302e352e302f32342d3234203d3e203436303234.roa (hash: +bXCaBbua6T2KBv/snNdo+ibMSi47YiRL7LuzmtTWcA=)
29: 3130332e3235332e3130362e302f32332d3233203d3e2039323531.roa (hash: mn89fCBpa1L+r4Zi4IcWuFHARAg3/d1uhObCHoGGpiQ=)
30: 34392e35302e342e302f32332d3233203d3e203436303234.roa (hash: UYaCog++0gqvsXDea9mZnkKimC89Lnd8uWKZu9Blm80=)
31: 3138322e31362e3235302e302f32342d3234203d3e203435323938.roa (hash: BD8EvM/xRr4bdqKJsAUI6YPxWjmEz7aV4WUFP92DPxQ=)
32: 34392e35302e342e302f32342d3234203d3e203436303234.roa (hash: ZHh4TwmNkfiSfrilBWgPwnleDnUmWbiEe9KNZbEdlK8=)
33: 3138322e31362e3234322e302f32342d3234203d3e203435323938.roa (hash: tIeC9wyFXXPUAxRI7vekXWuC6/hcRWQSf3hEol1GrXs=)
34: 3138322e31362e3234302e302f32342d3234203d3e203435323938.roa (hash: qXhqvNvwuShzZJIh5ULCs68p+eXdblwycqng954jYDU=)
35: 3138322e31362e3234392e302f32342d3234203d3e203435323938.roa (hash: Gy/bdPPAnwE1EJJewbOkW44uCE/LT49cEeFhDgih3rI=)
36: 34332e3234392e3231302e302f32342d3234203d3e203435323938.roa (hash: UekkDKgU/YAhXJ6R9+NFWqKcbGGHHXyI8VU8wt8dut8=)
37: 34332e3234392e3231312e302f32342d3234203d3e203435323938.roa (hash: 5Lq+yUimOjMlxXPTxX1EWiQ/SQriMIqGapn1rF0ns70=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 01:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:09:f3:72:8c:fc:64:f6:bf:34:3c:a2:89:6b:e1:7e:69:ad:c4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Validity
Not Before: Mar 22 19:56:48 2026 GMT
Not After : Mar 26 01:05:48 2026 GMT
Subject: CN=C5BB70ADF53D763E65AD2FE9EBABE91A3FC3C6F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:8e:9f:13:87:0d:2a:00:55:23:76:4e:c5:
3a:5c:41:b0:12:dc:7b:9d:ec:ba:6b:dd:13:56:21:
e4:d7:01:e6:61:7f:9d:bf:52:27:53:ad:de:eb:73:
3b:6d:0e:b6:0c:97:60:7b:f7:5e:9c:00:d4:a4:6a:
70:ea:01:83:e0:f9:86:69:12:bf:b2:a9:39:78:80:
4a:43:0e:d2:00:7c:6c:f8:74:e7:73:f7:c6:4b:c2:
0d:d3:43:7d:3b:86:38:e1:3c:92:df:40:64:06:86:
70:81:87:91:30:f2:60:32:f5:8b:ce:c1:b6:22:fc:
d1:4f:54:53:40:5d:9b:44:b3:ff:51:3c:3c:93:29:
7d:85:8c:d0:c4:a1:08:6c:08:0f:f5:99:aa:c1:10:
8d:6a:ba:69:9f:9c:20:0b:e0:02:07:e8:cc:1d:c3:
38:7a:98:31:31:ff:53:0d:9b:d5:e8:3b:12:1f:bc:
67:9a:5e:20:17:9c:f9:9d:61:68:c7:07:5d:06:09:
f3:7d:03:24:fa:dd:02:85:06:4a:6c:74:9b:d0:8f:
5b:48:66:ea:2a:10:46:d9:fc:33:b3:23:fb:e0:ab:
d9:e1:2c:f8:bc:90:ac:c9:be:46:ab:b5:fb:9c:6f:
5c:da:13:69:1b:b5:6b:36:8c:b8:a2:6f:45:8b:c1:
ce:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BB:70:AD:F5:3D:76:3E:65:AD:2F:E9:EB:AB:E9:1A:3F:C3:C6:F8
X509v3 Authority Key Identifier:
keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:56:38:be:d9:0f:b5:1e:12:46:4d:4f:e7:e5:e7:31:d9:da:
4b:19:08:3c:d2:28:03:44:53:18:d9:bd:21:ff:06:68:15:a3:
68:86:83:25:2d:b7:6f:37:dd:b0:ff:7e:00:02:1a:56:5a:2f:
9f:a9:4e:05:7e:12:0b:24:40:13:7b:e2:17:1b:f8:d4:50:87:
2e:73:a1:98:4c:68:3b:69:74:f6:8d:16:33:11:34:55:95:b2:
3b:4e:d3:47:50:db:04:8d:61:f3:65:37:cb:b2:6f:fc:9a:4d:
4b:4d:bc:c4:eb:ba:0b:04:29:27:27:d4:4a:7c:3b:0d:a4:c1:
89:09:fb:65:9d:47:05:a4:b9:1f:76:25:45:2e:2f:c6:0f:51:
f7:b1:7b:d1:6f:f1:7c:3b:b5:a9:c8:b9:37:dd:1b:ed:a4:bd:
6f:59:da:17:35:b8:97:3e:5e:2f:6e:b1:9e:46:09:f3:5a:4f:
31:71:24:a3:5c:f5:fe:c8:1d:ef:96:47:32:6a:da:de:93:d6:
2d:3a:c9:4c:d6:92:55:38:3f:0f:d7:6a:da:9b:f4:c6:ca:18:
bd:36:4a:52:9a:b1:13:ad:64:9c:38:ed:fa:83:a0:17:d2:4b:
20:e3:c3:e3:7b:ab:ce:6a:75:68:8f:d5:6b:d1:cb:86:5a:f5:
45:d4:d2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 12:30:35 2026 by rpki-client