
$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft
File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft (raw, json)
Hash identifier: Lru/A8g5VKNuhgOMcM9UgGDW1FXWGMVjYBP2SL0+AR8=
Subject key identifier: 05:FF:CD:0A:CC:12:46:9E:F6:EA:5F:8E:50:B4:09:3E:18:0C:05:7B
Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66
Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66
Certificate serial: 482DF2EEA814266EF8FDFDC3F9731582457A9461
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft
Manifest number: 025B
Signing time: Mon 20 Apr 2026 14:52:49 +0000
Manifest this update: Mon 20 Apr 2026 14:47:49 +0000
Manifest next update: Thu 23 Apr 2026 22:06:49 +0000
Files and hashes: 1: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl (hash: f+9IM7UCBjCz8nT4/Xra3HnC/QXM027/FrBVSUhLNVI=)
2: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: DTA7XaMvO6/yJH95Q2H4dcuyJyFkTQZvJ4qtwIMhRBo=)
3: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: KkOi57cp3QYrSPg3L4piWw9fN5UZON52i91Hq3Yxv3k=)
4: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: TA90bkE55ZETm7aG8neqT5bIm1Ztp4RfdpQNAXifiyc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl
rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:2d:f2:ee:a8:14:26:6e:f8:fd:fd:c3:f9:73:15:82:45:7a:94:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66
Validity
Not Before: Apr 20 14:47:49 2026 GMT
Not After : Apr 23 22:06:49 2026 GMT
Subject: CN=05FFCD0ACC12469EF6EA5F8E50B4093E180C057B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:6f:f9:f3:b0:bd:e3:10:90:95:35:00:28:
61:73:20:e6:40:f7:3f:b8:94:6a:11:86:11:a6:25:
03:bc:9b:45:81:8c:e2:8d:f7:c1:8c:2a:7e:02:c1:
33:d1:fa:a1:1b:f3:2b:4e:59:05:22:4f:47:c0:33:
eb:fa:4d:88:64:a1:bc:c7:2a:03:ee:58:73:b5:ba:
32:ce:5b:f6:25:07:84:e7:12:82:36:6d:c5:c6:01:
42:7c:8a:f5:3d:c2:5a:d9:2b:e8:e7:54:29:0d:0e:
ce:30:b3:c2:f9:64:cc:e4:09:ac:75:c1:4c:0b:ff:
17:fb:99:12:82:a1:28:8e:4b:f7:43:ed:4b:a2:06:
43:27:a0:79:1b:7f:8b:82:89:82:82:48:1e:9a:e6:
64:e0:d8:df:91:dd:17:3a:cc:1d:0b:14:de:8d:51:
40:99:ac:eb:bd:9e:78:ce:c3:1f:a2:94:82:c5:e0:
13:4b:aa:2f:a0:9c:9d:b0:5d:28:24:85:40:8b:46:
66:10:de:17:41:d0:13:f3:17:74:47:a4:35:7f:64:
58:62:17:91:14:21:28:8e:d3:61:42:6a:84:7d:83:
90:5b:cc:aa:ce:3a:fe:83:d9:13:d5:2a:1a:7a:f2:
30:83:74:bb:8f:fd:10:ea:d3:81:a9:2b:13:86:07:
4c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FF:CD:0A:CC:12:46:9E:F6:EA:5F:8E:50:B4:09:3E:18:0C:05:7B
X509v3 Authority Key Identifier:
keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d9:88:7e:ae:4c:eb:ae:ca:18:ba:de:63:ea:55:51:66:e6:
b8:af:44:e9:c1:16:0b:db:dc:36:f4:ab:60:a0:d8:35:6b:02:
89:9f:c7:31:cb:6c:88:64:e0:df:6d:69:6d:2b:f2:90:24:10:
cc:8d:a1:67:ca:4f:af:1a:6c:d5:b7:ba:13:24:0b:72:b5:e0:
03:a7:08:ca:c8:12:9a:c0:ae:4d:10:16:3b:37:f1:f0:d2:d5:
24:b5:1b:3c:f8:f5:bd:38:fb:0b:b5:43:0d:74:61:8a:51:32:
57:48:37:bf:87:8f:24:bd:36:e7:45:a0:d7:56:f6:ba:a1:d5:
47:27:2d:b3:b4:61:ed:8a:ca:03:ea:28:f3:0b:51:57:57:1f:
90:43:ac:cf:16:c2:b6:b1:a0:55:9b:58:11:a2:e2:b5:64:c2:
1d:53:dd:71:29:54:65:6c:6a:3d:8e:46:46:99:1a:2d:c9:5e:
a4:d3:3a:d5:6d:f5:6a:df:e5:02:23:9a:3b:d3:f6:95:35:13:
6b:fe:23:28:2a:f9:0a:c0:a3:74:a0:ef:f2:a8:93:af:a5:11:
80:d9:24:a5:00:eb:46:06:c1:15:ff:4e:50:4f:01:cd:f9:17:
62:02:40:8e:27:38:a9:c9:09:d8:0d:06:84:21:2d:f4:75:34:
aa:7c:7f:ab
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSC3y7qgUJm74/f3D+XMVgkV6lGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThC
Q0UyNkM2NjAeFw0yNjA0MjAxNDQ3NDlaFw0yNjA0MjMyMjA2NDlaMDMxMTAvBgNV
BAMTKDA1RkZDRDBBQ0MxMjQ2OUVGNkVBNUY4RTUwQjQwOTNFMTgwQzA1N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmm/587C94xCQlTUAKGFzIOZA
9z+4lGoRhhGmJQO8m0WBjOKN98GMKn4CwTPR+qEb8ytOWQUiT0fAM+v6TYhkobzH
KgPuWHO1ujLOW/YlB4TnEoI2bcXGAUJ8ivU9wlrZK+jnVCkNDs4ws8L5ZMzkCax1
wUwL/xf7mRKCoSiOS/dD7UuiBkMnoHkbf4uCiYKCSB6a5mTg2N+R3Rc6zB0LFN6N
UUCZrOu9nnjOwx+ilILF4BNLqi+gnJ2wXSgkhUCLRmYQ3hdB0BPzF3RHpDV/ZFhi
F5EUISiO02FCaoR9g5BbzKrOOv6D2RPVKhp68jCDdLuP/RDq04GpKxOGB0xlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBf/NCswSRp726l+OULQJPhgMBXswHwYDVR0j
BBgwFoAUoA6eIe6TJ/BZMK+d1YR6mLzibGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMC9BMDBFOUUyMUVF
OTMyN0YwNTkzMEFGOURENTg0N0E5OEJDRTI2QzY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThCQ0Uy
NkM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm
MzItMmU1MTU0MWEzNGZmLzAvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdB
OThCQ0UyNkM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADTZiH6uTOuuyhi63mPqVVFm5rivROnBFgvb
3Db0q2Cg2DVrAomfxzHLbIhk4N9taW0r8pAkEMyNoWfKT68abNW3uhMkC3K14AOn
CMrIEprArk0QFjs38fDS1SS1Gzz49b04+wu1Qw10YYpRMldIN7+HjyS9NudFoNdW
9rqh1UcnLbO0Ye2KygPqKPMLUVdXH5BDrM8WwraxoFWbWBGi4rVkwh1T3XEpVGVs
aj2ORkaZGi3JXqTTOtVt9Wrf5QIjmjvT9pU1E2v+Iygq+QrAo3Sg7/Kok6+lEYDZ
JKUA60YGwRX/TlBPAc35F2ICQI4nOKnJCdgNBoQhLfR1NKp8f6s=
-----END CERTIFICATE-----
Generated at Wed Apr 22 09:59:47 2026 by rpki-client