
$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft
File: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft (raw, json)
Hash identifier: 09M8/uD9ZX/jgcPwMTZ4dchqIMkEgwZWsDrtMlGB+eU=
Subject key identifier: 13:A0:8E:0E:91:CA:1E:F6:85:F8:45:FE:D8:93:E3:E5:40:6A:5E:C2
Authority key identifier: 1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32
Certificate issuer: /CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32
Certificate serial: 5FFF47A234F1308E43C7273BA6EB94747A5C29FC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft
Manifest number: 0260
Signing time: Mon 06 Apr 2026 02:32:12 +0000
Manifest this update: Mon 06 Apr 2026 02:27:12 +0000
Manifest next update: Thu 09 Apr 2026 06:02:12 +0000
Files and hashes: 1: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: cvSUe3AQS7vHmxajLkKKuMBi1DdbqQp+jMzC9vjMR70=)
2: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl (hash: 5Ndhfjv2O89Yi09EYk8Nv9hD91tym2HeiEwFdH6GtIc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl
rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 Apr 2026 06:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ff:47:a2:34:f1:30:8e:43:c7:27:3b:a6:eb:94:74:7a:5c:29:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32
Validity
Not Before: Apr 6 02:27:12 2026 GMT
Not After : Apr 9 06:02:12 2026 GMT
Subject: CN=13A08E0E91CA1EF685F845FED893E3E5406A5EC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:17:a9:61:cd:c5:87:82:a1:42:48:dc:02:
cb:fc:66:ec:70:44:e5:c0:e6:65:2d:36:ee:bb:f2:
f9:1c:8b:fe:85:27:75:e1:3b:fb:08:b6:07:24:9a:
2d:ab:95:e7:dd:c2:91:a1:d0:35:6d:5e:b7:cc:34:
6f:79:d9:7a:fe:40:49:86:93:3e:f5:5a:61:73:10:
b6:bc:ea:9b:54:78:e0:14:ac:42:c4:1a:07:d2:95:
49:9c:98:64:aa:f5:30:46:dd:62:d8:a5:c6:57:46:
3d:3c:27:18:a8:76:90:3f:ca:08:c6:a4:43:e4:30:
70:93:d5:9a:43:89:da:28:f8:51:06:9a:71:ed:79:
47:be:4e:86:20:0e:db:63:19:7b:d9:08:6f:b4:db:
38:56:03:77:a5:14:30:4d:58:cb:b0:1f:99:28:5a:
55:fc:49:3e:cf:25:8d:26:43:06:13:6b:84:98:64:
bb:5b:f3:4c:f5:ca:7c:54:02:6a:dc:44:f5:5e:98:
31:b5:aa:26:eb:52:0c:30:a0:32:eb:b0:90:78:30:
3f:69:0d:2f:8e:cd:ac:42:49:3e:13:78:be:f7:d1:
37:ef:ed:89:70:fe:a3:32:94:61:34:df:6d:76:54:
fa:32:a9:fc:db:3b:af:0e:09:ce:ae:2c:ae:de:19:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A0:8E:0E:91:CA:1E:F6:85:F8:45:FE:D8:93:E3:E5:40:6A:5E:C2
X509v3 Authority Key Identifier:
keyid:1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2a:23:45:4c:da:22:95:dc:1b:7b:16:7a:f5:e9:91:97:3e:
fb:73:b2:bf:c5:77:48:c0:8a:a9:6b:a9:00:63:ed:ce:9d:49:
bb:9f:b5:3c:e2:97:fd:30:1b:db:3e:5d:6d:4f:d8:ab:3f:1c:
fe:f1:02:15:10:a1:c8:62:15:fe:be:a7:2e:64:5c:0d:62:77:
25:9e:20:df:2d:04:52:77:87:cb:fc:04:81:62:b9:01:c1:3a:
0d:38:c2:85:20:3e:2f:8a:da:f3:04:33:72:60:18:2f:e3:1d:
73:6f:91:0a:0e:25:00:ce:d7:ae:dc:96:5b:7f:5c:38:23:a5:
52:a6:9a:b3:ef:21:38:b4:96:d8:c5:01:49:4f:94:c6:ae:2d:
2a:21:3d:cc:32:4d:09:5f:7d:fd:30:71:b7:79:9a:49:3c:ad:
9c:a8:e9:70:6a:d2:ec:dc:1b:d8:fb:5f:5a:3d:77:23:e5:23:
ed:c5:1a:81:51:ae:97:08:13:b1:6c:d6:e7:65:05:7c:90:5b:
0b:66:73:e7:97:54:df:c8:8a:f8:be:63:a5:af:55:da:6c:15:
06:9f:b9:39:3a:28:ff:a7:2d:01:1a:20:77:ad:aa:42:b7:a6:
0b:e3:ab:5e:d5:9e:c4:e4:58:c7:70:d4:b6:9f:89:14:fd:85:
c2:1b:e6:a7
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUX/9HojTxMI5Dxyc7puuUdHpcKfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFD
OUI4M0IzMjAeFw0yNjA0MDYwMjI3MTJaFw0yNjA0MDkwNjAyMTJaMDMxMTAvBgNV
BAMTKDEzQTA4RTBFOTFDQTFFRjY4NUY4NDVGRUQ4OTNFM0U1NDA2QTVFQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCozhepYc3Fh4KhQkjcAsv8Zuxw
ROXA5mUtNu678vkci/6FJ3XhO/sItgckmi2rlefdwpGh0DVtXrfMNG952Xr+QEmG
kz71WmFzELa86ptUeOAUrELEGgfSlUmcmGSq9TBG3WLYpcZXRj08JxiodpA/ygjG
pEPkMHCT1ZpDidoo+FEGmnHteUe+ToYgDttjGXvZCG+02zhWA3elFDBNWMuwH5ko
WlX8ST7PJY0mQwYTa4SYZLtb80z1ynxUAmrcRPVemDG1qibrUgwwoDLrsJB4MD9p
DS+OzaxCST4TeL730Tfv7Ylw/qMylGE03212VPoyqfzbO68OCc6uLK7eGRDnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUE6CODpHKHvaF+EX+2JPj5UBqXsIwHwYDVR0j
BBgwFoAUH/ZS3lQAFQUuoGvONkTJwcm4OzIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YmUxNWU2Zi0wNjg5LTQ3MTMtYjBmYy05NDMwNjJhYzU5MmUvMC8xRkY2NTJERTU0
MDAxNTA1MkVBMDZCQ0UzNjQ0QzlDMUM5QjgzQjMyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFDOUI4
M0IzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw
ZmMtOTQzMDYyYWM1OTJlLzAvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5
QzFDOUI4M0IzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABUqI0VM2iKV3Bt7Fnr16ZGXPvtzsr/Fd0jA
iqlrqQBj7c6dSbuftTzil/0wG9s+XW1P2Ks/HP7xAhUQochiFf6+py5kXA1idyWe
IN8tBFJ3h8v8BIFiuQHBOg04woUgPi+K2vMEM3JgGC/jHXNvkQoOJQDO167cllt/
XDgjpVKmmrPvITi0ltjFAUlPlMauLSohPcwyTQlfff0wcbd5mkk8rZyo6XBq0uzc
G9j7X1o9dyPlI+3FGoFRrpcIE7Fs1udlBXyQWwtmc+eXVN/Iivi+Y6WvVdpsFQaf
uTk6KP+nLQEaIHetqkK3pgvjq17VnsTkWMdw1LafiRT9hcIb5qc=
-----END CERTIFICATE-----
Generated at Mon Apr 6 16:17:36 2026 by rpki-client