
$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
File: 798A229C42DA54D0690064D264AA7AA2375D0419.mft (raw, json)
Hash identifier: 64PlsCCT1eFqFnjhlnJ8hnIcokEuaz4HR/Cc4+zR2Y4=
Subject key identifier: E8:CF:CA:8A:4C:0F:97:1C:34:96:C7:A2:10:AD:B9:CF:00:88:95:A8
Authority key identifier: 79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19
Certificate issuer: /CN=798A229C42DA54D0690064D264AA7AA2375D0419
Certificate serial: 7974BF775A216D7B977C2021B7A23E6857911083
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
Manifest number: 012F
Signing time: Tue 21 Apr 2026 20:32:32 +0000
Manifest this update: Tue 21 Apr 2026 20:27:32 +0000
Manifest next update: Sat 25 Apr 2026 00:20:32 +0000
Files and hashes: 1: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: LeLneOQVqT8nH1sSpsfTnxgLUumewJs3lygRvnJGU1E=)
2: 798A229C42DA54D0690064D264AA7AA2375D0419.crl (hash: C+dTZGD9XAU7SK/6m1JJSex0wvSMhT37VXVTwHBlzr0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl
rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 00:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:74:bf:77:5a:21:6d:7b:97:7c:20:21:b7:a2:3e:68:57:91:10:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798A229C42DA54D0690064D264AA7AA2375D0419
Validity
Not Before: Apr 21 20:27:32 2026 GMT
Not After : Apr 25 00:20:32 2026 GMT
Subject: CN=E8CFCA8A4C0F971C3496C7A210ADB9CF008895A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7a:00:8a:d4:ba:05:8c:8d:9f:8b:db:b5:a8:
fb:a4:b1:85:5d:35:09:f5:74:cf:76:78:ae:82:ef:
78:27:1c:ab:d5:51:f6:74:56:ed:bb:8e:2e:0f:64:
cc:0b:c3:1d:79:d4:00:30:d6:e9:74:73:f5:30:75:
8e:35:b3:c2:14:74:f0:f4:52:60:c1:f5:21:4d:31:
60:72:11:64:95:c4:5b:17:38:7a:3e:bd:3f:ce:b4:
56:a7:10:3e:2a:92:0e:8d:32:18:f5:b7:ad:65:30:
49:50:84:b4:c6:09:73:32:83:7b:75:68:88:f8:f5:
cf:3f:c5:3c:b9:6c:a0:d4:3d:ef:26:7d:ca:6b:f8:
71:7f:3b:8c:91:b5:d7:cd:fe:33:dd:db:f9:21:32:
59:7a:f4:d4:af:66:c6:7f:14:df:e2:0e:75:ac:b9:
cf:85:a8:33:c4:69:9c:47:c3:a1:2b:50:ee:32:d9:
c5:4a:79:18:af:44:f2:26:a9:3f:09:b3:4c:1a:b0:
59:e8:b3:78:c8:ed:87:0a:61:c5:a7:98:b7:fc:1c:
24:3a:2c:c4:72:5e:3b:21:c7:15:9f:e6:c6:5a:ea:
a1:30:48:98:79:48:9b:f5:97:3e:f2:5d:45:5b:54:
3e:57:c1:5c:ce:bf:22:9d:25:ac:05:db:58:eb:c6:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CF:CA:8A:4C:0F:97:1C:34:96:C7:A2:10:AD:B9:CF:00:88:95:A8
X509v3 Authority Key Identifier:
keyid:79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:67:e7:bc:94:84:15:96:e3:90:5c:b1:6b:79:43:e7:ac:30:
d7:1e:a6:63:47:44:c7:92:6e:df:ce:dd:7f:0c:98:c9:ce:ea:
09:d8:af:59:d5:ad:62:be:d2:1a:bf:d5:ac:5a:87:12:a2:46:
6c:1c:65:db:c8:d8:42:65:14:95:bf:cb:7a:30:bc:28:d2:69:
e3:30:d6:7f:fc:7c:8b:1e:c9:21:c4:17:b6:53:47:cc:62:55:
b7:4c:8a:5a:d1:d9:65:c0:0c:a4:4a:de:6a:c2:c7:f6:fd:01:
95:26:2f:99:98:1a:9b:49:c7:1b:fc:bf:a1:5b:9f:43:a3:73:
97:41:05:31:8f:a8:3f:f2:d2:43:71:bb:24:d5:a1:d2:a5:d7:
9b:97:c3:f5:47:5e:1b:5e:4a:07:58:83:94:e1:19:43:91:f8:
23:88:39:97:10:b4:de:8a:98:72:d2:75:e2:46:a9:e2:48:bf:
8d:75:e7:14:44:aa:34:62:6f:b8:d5:00:34:c4:56:7f:38:d8:
86:ab:a0:4d:db:00:66:62:14:ca:43:5f:da:1e:b7:ac:34:0c:
e6:c3:1e:d3:4e:d6:c7:df:bc:39:7e:b0:4f:fe:c3:a8:18:ab:
df:4b:62:13:3f:d2:9d:6c:aa:17:7f:30:5b:b6:33:b4:4a:f8:
75:a9:1e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:02:02 2026 by rpki-client