
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json)
Hash identifier: EGwFBYUHA1MMel3j/jLTkjuINo68y6faqsZnNwL74j8=
Subject key identifier: 0A:01:7C:95:CB:D6:BA:7E:74:BB:DA:08:3C:31:A5:A0:34:89:F6:F7
Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Certificate serial: 2CAEEA33E1E46FC10C5AD9587FA2E22DD6A73777
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
Manifest number: 057C
Signing time: Tue 21 Apr 2026 01:20:42 +0000
Manifest this update: Tue 21 Apr 2026 01:15:42 +0000
Manifest next update: Fri 24 Apr 2026 08:35:42 +0000
Files and hashes: 1: 3135312e3135382e31302e302f32332d3234203d3e20313331303735.roa (hash: cqvatD7Cg6pNEzgIw2WwWbtZBJHhttbVP+mmzWaLbBQ=)
2: 3135312e3135382e33362e302f32332d3234203d3e20313432323330.roa (hash: JlCq+CeQI0IRGssW+fbcqNZoEnvUp/ZiGtyW7tWM+TY=)
3: 3135312e3135382e3138372e302f32342d3234203d3e20313432353434.roa (hash: L/WdMdCAwsC0GOHs4/vQ2hYemSSZju15ZjyEZqkYmxU=)
4: 3135312e3135382e3230342e302f32332d3234203d3e20313534353232.roa (hash: DjXkhi3atbqk0A2teZVs4TmRpsS8LWjuJgAMaAjN4zY=)
5: 3135312e3135382e3233342e302f32342d3234203d3e20313534353230.roa (hash: /mPQp0zRLRixv4ruZ9YF3ierQjYd2QtemmGEIe6D21s=)
6: 3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa (hash: snY8hCWpMQz3894nERSOV1ZUgmPo7DqaG6a4ucnpn8M=)
7: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: AT39syYHMQIuwZkwo/msd1e32Mfd4HbU/f+OOMLwnQE=)
8: 3135312e3135382e342e302f32332d3234203d3e20313432313938.roa (hash: AFjW+EEHhzoA6cLg/0TGjATfpii/CqiAmCZUF80TZ90=)
9: 3135312e3135382e34322e302f32332d3234203d3e20313534343935.roa (hash: HOZT2Ynqka+xtNavl4KWOoX/MgQf9aLmuSZguGcd2u4=)
10: 3135312e3135382e3137362e302f32342d3234203d3e20313534353039.roa (hash: sij2ghOb/bHaf6sAnwpAnK7H2xX31zIFc2+5Lb2x4RM=)
11: 38322e3135382e3132382e302f31392d3234203d3e2039333431.roa (hash: kXLN0HaZu/PhLPiFi30mit71JHQuO6u1X5gZIB305jg=)
12: 3135312e3135382e35362e302f32332d3234203d3e20313432323538.roa (hash: eQeLFKLBPCDpd3UM2/Z4NimaOA9d7w4AVtrEMyVO6ds=)
13: 3135312e3135382e3130362e302f32332d3234203d3e20313534343934.roa (hash: AZthBup3GN43JmRthTYHXFQog/yv2zTfPqeXiB57+AA=)
14: 3135312e3135382e3233392e302f32342d3234203d3e20313534353238.roa (hash: wpGsP5+dmtc+mo9jkkLJhvYfdaoWqGz7+ZwQ9EIWJrQ=)
15: 3135312e3135382e3135302e302f32332d3234203d3e20313430333034.roa (hash: nKoJx+ps7nbi7qjScdwuergOeJAMrw6Ipvaj9iQKbkE=)
16: 3135312e3135382e3138362e302f32342d3234203d3e20313338393930.roa (hash: FbCxZ9NqNkRJEcyQ+Z9e28f1jgxdu0y84ManyawEjFs=)
17: 3135312e3135382e3233362e302f32332d3234203d3e20313534353233.roa (hash: 52qrDnM09tRZ9PTF92Y51pJWQ24eofPJfXULRl1uZ6c=)
18: 1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer (hash: fewpVNLy6/HRvoDNDTlZwpVW2bZGk39++Q7XR4HP7Tk=)
19: 24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer (hash: t0TI2xUV9CSJIC6Ugf/2mUDyvpKoJrWf1xg05ApUJ+s=)
20: F8EA79769F4F98F7D5A723816314CD216D8F01AA.cer (hash: jWRcOEtjjDvspoWa+pEhrBdCuOMVZJEcsnEKE1D68Hs=)
21: 3135312e3135382e3133322e302f32332d3234203d3e20313334373238.roa (hash: 5lVjSKtWrmhtWPL47yMhwEDIaCukaKyrxLX70Wi5Smo=)
22: 3135312e3135382e3230332e302f32342d3234203d3e20313336373833.roa (hash: NPFmuPD5p1q4xsC0OUpbrvvz76wi/OaRGYsWFjn+/80=)
23: 3135312e3135382e3234302e302f32332d3234203d3e20313534353237.roa (hash: dM4L9Ic4RBC7usWTGbce/eZBXoOgJht8T0TuRtZKZGg=)
24: 3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa (hash: TL6kftFt7vP2GTuixxW6r7zs8Ky4SmBEeLPTG5yr9A0=)
25: 71541EF74561083EF5B89C20FF0ECD5E565A4C9E.cer (hash: ObDrybQUH8zeG+nFpwuAiHUomqzj63etXRwpS8XT+5U=)
26: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=)
27: 3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa (hash: IT9x0P/3RDDAHWuOeI/lOb1Fh67e62i5Nd9Bu80+ylI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ae:ea:33:e1:e4:6f:c1:0c:5a:d9:58:7f:a2:e2:2d:d6:a7:37:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Validity
Not Before: Apr 21 01:15:42 2026 GMT
Not After : Apr 24 08:35:42 2026 GMT
Subject: CN=0A017C95CBD6BA7E74BBDA083C31A5A03489F6F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:02:67:83:95:eb:89:cb:50:e0:34:45:68:
88:97:e4:09:43:87:ef:39:ae:22:32:6e:dd:98:44:
fa:78:ad:c1:8f:9a:8c:a8:b8:15:db:40:d0:fc:e3:
35:66:88:9c:94:40:42:16:dd:c6:33:8b:b8:2b:d0:
82:4a:6f:da:77:9e:39:b6:5a:78:a5:3b:af:fa:a8:
be:c8:1c:77:bd:ee:45:91:6b:b0:a1:88:43:33:91:
72:50:ad:76:b5:9f:27:17:a8:d5:14:a0:3f:c9:99:
5c:5d:87:f5:96:11:a1:e0:73:79:0f:30:1d:4f:be:
e2:ae:48:3b:f6:ec:ca:99:ec:f3:e5:4f:39:e5:3c:
c9:49:49:86:e3:b6:49:18:af:8d:d5:5e:0b:de:e8:
08:ed:7c:cd:21:e5:74:a8:9b:dd:c5:d6:25:ef:ee:
dd:43:ee:40:e9:44:7c:ac:6e:64:08:a7:50:eb:f5:
35:12:6e:d6:46:11:5d:72:a7:da:fe:31:5c:f9:b7:
9c:91:c3:f9:4d:e6:f4:77:39:15:9d:11:6a:81:23:
cb:3c:29:1e:3c:20:cb:3a:5f:cc:1e:94:f0:ae:63:
82:38:9d:6f:23:e0:08:c6:b8:57:fa:ec:fd:e2:4d:
52:07:ce:52:94:3a:0a:9e:96:6c:75:b6:ab:22:f5:
f1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:01:7C:95:CB:D6:BA:7E:74:BB:DA:08:3C:31:A5:A0:34:89:F6:F7
X509v3 Authority Key Identifier:
keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:96:b2:e6:00:f2:1b:54:5f:81:00:8f:26:21:da:47:e7:d4:
81:37:19:cd:10:64:34:ed:c8:b4:99:4a:69:b7:f5:48:32:14:
a5:35:c9:a4:c6:d2:00:19:c5:c8:f8:5f:ab:2e:e6:84:f7:f4:
6a:8c:c5:74:92:18:9c:f9:a0:46:9f:26:6f:1d:ad:e2:bf:10:
fc:e3:0d:3a:eb:11:1f:a2:0e:76:52:b8:11:07:0f:da:df:36:
8f:ac:ce:24:ea:9f:87:6e:8c:6a:cd:48:63:6b:2e:44:3f:11:
74:ba:f1:4e:72:c2:c6:4c:bd:da:39:83:e1:c0:9a:49:7b:45:
31:e7:3d:86:0f:a2:7d:c2:df:65:68:1e:c5:de:e4:a6:09:8f:
5d:df:60:25:24:39:e7:1a:6e:29:43:06:46:bb:f3:07:5e:f1:
5e:5c:44:10:07:0e:a1:7f:90:6b:a1:b1:82:d5:bb:f0:db:cc:
9e:e1:23:f2:cb:1c:d0:3e:19:f9:ec:d9:3a:7b:a7:8a:82:29:
7f:5f:d4:72:ff:70:c1:8e:a7:a3:42:11:88:fa:ac:96:48:ae:
7c:7e:f6:d1:6d:5e:5b:27:19:7b:fe:38:7f:de:5a:3a:0d:22:
27:df:de:1c:34:71:f8:83:b1:c0:8f:49:60:61:6f:fe:29:86:
05:34:70:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:54:41 2026 by rpki-client