
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json)
Hash identifier: kZgqpqDe7VjT53EDG+g/gF5hREQXHUdI9A/u2Vgt37s=
Subject key identifier: F7:ED:E2:06:FC:E4:9E:1B:2D:BF:AB:EC:F2:AF:AA:ED:FC:C8:23:48
Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Certificate serial: 365DCA474D42B9CDF5161E158B2127A40BCD0DD9
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
Manifest number: 0564
Signing time: Sat 07 Mar 2026 06:20:41 +0000
Manifest this update: Sat 07 Mar 2026 06:15:41 +0000
Manifest next update: Tue 10 Mar 2026 07:02:41 +0000
Files and hashes: 1: 38322e3135382e3132382e302f31392d3234203d3e2039333431.roa (hash: kXLN0HaZu/PhLPiFi30mit71JHQuO6u1X5gZIB305jg=)
2: 3135312e3135382e3138362e302f32342d3234203d3e20313338393930.roa (hash: FbCxZ9NqNkRJEcyQ+Z9e28f1jgxdu0y84ManyawEjFs=)
3: 3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa (hash: IT9x0P/3RDDAHWuOeI/lOb1Fh67e62i5Nd9Bu80+ylI=)
4: 3135312e3135382e3230332e302f32342d3234203d3e20313336373833.roa (hash: NPFmuPD5p1q4xsC0OUpbrvvz76wi/OaRGYsWFjn+/80=)
5: 3135312e3135382e31302e302f32332d3234203d3e20313331303735.roa (hash: cqvatD7Cg6pNEzgIw2WwWbtZBJHhttbVP+mmzWaLbBQ=)
6: 3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa (hash: TL6kftFt7vP2GTuixxW6r7zs8Ky4SmBEeLPTG5yr9A0=)
7: 1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer (hash: fewpVNLy6/HRvoDNDTlZwpVW2bZGk39++Q7XR4HP7Tk=)
8: 3135312e3135382e3138372e302f32342d3234203d3e20313432353434.roa (hash: L/WdMdCAwsC0GOHs4/vQ2hYemSSZju15ZjyEZqkYmxU=)
9: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=)
10: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: pKXZNlEb5Jv/EkHTt6dyNS2nttBQDP3hB07Pb+YKmng=)
11: 3135312e3135382e3133322e302f32332d3234203d3e20313334373238.roa (hash: 5lVjSKtWrmhtWPL47yMhwEDIaCukaKyrxLX70Wi5Smo=)
12: 3135312e3135382e33362e302f32332d3234203d3e20313432323330.roa (hash: JlCq+CeQI0IRGssW+fbcqNZoEnvUp/ZiGtyW7tWM+TY=)
13: 3135312e3135382e35362e302f32332d3234203d3e20313432323538.roa (hash: eQeLFKLBPCDpd3UM2/Z4NimaOA9d7w4AVtrEMyVO6ds=)
14: 3135312e3135382e3230342e302f32332d3234203d3e20313534353232.roa (hash: DjXkhi3atbqk0A2teZVs4TmRpsS8LWjuJgAMaAjN4zY=)
15: 3135312e3135382e3233342e302f32342d3234203d3e20313534353230.roa (hash: /mPQp0zRLRixv4ruZ9YF3ierQjYd2QtemmGEIe6D21s=)
16: 3135312e3135382e3233362e302f32332d3234203d3e20313534353233.roa (hash: 52qrDnM09tRZ9PTF92Y51pJWQ24eofPJfXULRl1uZ6c=)
17: 3135312e3135382e342e302f32332d3234203d3e20313432313938.roa (hash: AFjW+EEHhzoA6cLg/0TGjATfpii/CqiAmCZUF80TZ90=)
18: 3135312e3135382e3234302e302f32332d3234203d3e20313534353237.roa (hash: dM4L9Ic4RBC7usWTGbce/eZBXoOgJht8T0TuRtZKZGg=)
19: 24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer (hash: t0TI2xUV9CSJIC6Ugf/2mUDyvpKoJrWf1xg05ApUJ+s=)
20: 3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa (hash: snY8hCWpMQz3894nERSOV1ZUgmPo7DqaG6a4ucnpn8M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:5d:ca:47:4d:42:b9:cd:f5:16:1e:15:8b:21:27:a4:0b:cd:0d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Validity
Not Before: Mar 7 06:15:41 2026 GMT
Not After : Mar 10 07:02:41 2026 GMT
Subject: CN=F7EDE206FCE49E1B2DBFABECF2AFAAEDFCC82348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:a0:96:9b:2b:1e:a7:c0:37:50:da:19:19:
58:92:42:cf:02:51:df:e3:ca:35:cb:fe:85:37:13:
b5:42:20:ea:70:b9:8a:73:7b:a0:3f:09:12:f6:c2:
0a:45:1d:bd:a9:95:b4:fc:62:50:8e:5d:e8:4a:88:
30:82:0a:a3:6a:fb:14:b0:d7:9b:bf:f9:71:2e:2a:
dc:15:9c:65:ef:e3:1e:2d:cd:c5:d8:44:d6:7e:d5:
a1:57:07:23:75:c7:f3:11:c0:a4:91:f8:a3:0a:2b:
99:d5:43:32:92:d2:66:a5:2b:4e:75:92:85:85:9e:
d2:62:69:df:84:43:c6:38:fd:29:c8:f5:d0:df:fd:
3e:37:d6:67:b6:a2:a7:71:04:6d:78:02:b8:3d:fb:
97:09:b3:f2:90:84:12:38:70:ce:66:70:be:c2:9c:
c0:2d:04:3e:20:8f:83:b4:90:be:06:89:d7:7d:d1:
a2:47:fa:b7:30:85:34:11:2b:62:fb:c7:8b:73:fa:
01:57:32:06:97:49:52:15:72:15:1e:96:7d:7a:b8:
bf:a1:fb:6f:31:97:11:51:8c:ea:fb:ec:08:32:0e:
88:93:d8:4e:aa:92:a6:04:12:ba:39:09:e1:1f:05:
d2:85:28:c6:f4:b8:45:6b:a2:15:15:46:cc:cc:3c:
94:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:ED:E2:06:FC:E4:9E:1B:2D:BF:AB:EC:F2:AF:AA:ED:FC:C8:23:48
X509v3 Authority Key Identifier:
keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0d:c4:9a:ac:e4:cb:52:a3:38:d6:00:65:a0:c6:9f:f3:0f:
cd:60:52:e7:15:63:cf:91:ce:28:56:07:c3:a3:b4:15:dc:a4:
29:52:15:b5:96:71:8a:0a:b7:82:57:09:67:5d:87:86:5e:52:
5d:d0:19:6b:b8:13:dc:b9:4d:84:a7:27:3b:ca:cb:47:2f:ab:
79:ab:4a:ea:47:f7:c4:da:b7:3e:af:98:ec:93:d1:82:21:ed:
d8:d6:83:f3:c7:4f:c3:7d:f3:ad:79:34:dc:f8:d9:45:fe:82:
05:3f:d5:40:e2:01:39:f6:cd:93:de:47:6f:79:0d:ef:d5:f5:
12:53:e1:4b:19:33:6c:e7:1d:ea:e9:54:8a:1d:84:0b:ed:3c:
98:a7:04:ba:23:46:32:5e:e5:44:63:24:8f:57:dc:61:44:6e:
92:56:00:93:2e:18:f7:a5:15:04:8f:b9:8a:5d:89:b1:79:2f:
67:10:0a:c2:bd:24:d6:56:7c:86:ef:26:01:5a:cb:81:a4:74:
08:99:61:59:ce:82:1e:53:50:98:d8:01:f5:a8:50:1f:85:7b:
3b:0e:ab:6e:d5:1e:52:e0:15:9e:fc:a6:2d:ba:42:96:0a:03:
1d:24:92:84:77:5b:e5:ba:d2:48:44:cf:52:61:fb:f1:bf:51:
7e:ed:2d:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUNl3KR01Cuc31Fh4ViyEnpAvNDdkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB
QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI2MDMwNzA2MTU0MVoX
DTI2MDMxMDA3MDI0MVowMzExMC8GA1UEAxMoRjdFREUyMDZGQ0U0OUUxQjJEQkZB
QkVDRjJBRkFBRURGQ0M4MjM0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK2moJabKx6nwDdQ2hkZWJJCzwJR3+PKNcv+hTcTtUIg6nC5inN7oD8JEvbC
CkUdvamVtPxiUI5d6EqIMIIKo2r7FLDXm7/5cS4q3BWcZe/jHi3NxdhE1n7VoVcH
I3XH8xHApJH4owormdVDMpLSZqUrTnWShYWe0mJp34RDxjj9Kcj10N/9PjfWZ7ai
p3EEbXgCuD37lwmz8pCEEjhwzmZwvsKcwC0EPiCPg7SQvgaJ133Rokf6tzCFNBEr
YvvHi3P6AVcyBpdJUhVyFR6WfXq4v6H7bzGXEVGM6vvsCDIOiJPYTqqSpgQSujkJ
4R8F0oUoxvS4RWuiFRVGzMw8lD8CAwEAAaOCAgkwggIFMB0GA1UdDgQWBBT37eIG
/OSeGy2/q+zyr6rt/MgjSDAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ
ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB
NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy
QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n
ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB
QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQ3Emqzk
y1KjONYAZaDGn/MPzWBS5xVjz5HOKFYHw6O0FdykKVIVtZZxigq3glcJZ12Hhl5S
XdAZa7gT3LlNhKcnO8rLRy+reatK6kf3xNq3Pq+Y7JPRgiHt2NaD88dPw33zrXk0
3PjZRf6CBT/VQOIBOfbNk95Hb3kN79X1ElPhSxkzbOcd6ulUih2EC+08mKcEuiNG
Ml7lRGMkj1fcYURuklYAky4Y96UVBI+5il2JsXkvZxAKwr0k1lZ8hu8mAVrLgaR0
CJlhWc6CHlNQmNgB9ahQH4V7Ow6rbtUeUuAVnvymLbpClgoDHSSShHdb5brSSETP
UmH78b9Rfu0tRQ==
-----END CERTIFICATE-----
Generated at Sat Mar 7 14:36:11 2026 by rpki-client