
$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
File: 012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft (raw, json)
Hash identifier: n9I/K3FOCKQSdfbxk/eUcd890gpcB7wErqHuWcPeM8o=
Subject key identifier: D4:56:7B:62:CB:F1:99:4E:37:00:6D:2D:BA:76:69:D6:30:39:C6:0F
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial: 325140CC839580131961F7FE34D511DB92955AF4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
Manifest number: 0564
Signing time: Tue 24 Mar 2026 19:02:33 +0000
Manifest this update: Tue 24 Mar 2026 18:57:33 +0000
Manifest next update: Sat 28 Mar 2026 03:04:33 +0000
Files and hashes: 1: 3230322e39332e3133352e302f32342d3234203d3e2034333832.roa (hash: ri1oMn8me80QpVGUqBtvPXHCGV+V3jM8xkbu4T3ytno=)
2: 3230322e39332e3132392e302f32342d3234203d3e2034333832.roa (hash: 0aNy0ETuqhbORaoBLuDRgIvkLNekuqgE5MuIzbIuHu4=)
3: 3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (hash: AxG3Av6Lr1ooWeZ52jFBXjksOOp131HOnOlkyHCdSIY=)
4: 3230322e39332e3133342e302f32342d3234203d3e2034333832.roa (hash: XNOVEI3YN45FFKxPdBMlhL4tIvoqWKr9UzQJy69423A=)
5: 3230322e39332e3134312e302f32342d3234203d3e2034333832.roa (hash: bBONzBtnp5cZgKGGF/WSDLhv6iSsnxnb46nVEQMcaEk=)
6: 3230322e39332e3133312e302f32342d3234203d3e2034333832.roa (hash: w9IXrLEpnOTvHIWW3gOa5yz7gU/R3agEoOz9SkOzTf8=)
7: 3230322e39332e3134322e302f32342d3234203d3e2034333832.roa (hash: /rqrLGb+IkPW8rjy02EXXMaWAA6ibmhWcBGw6CAxGjc=)
8: 3230322e39332e3133332e302f32342d3234203d3e2034333832.roa (hash: vkTDe9buXDOgB6kWHFGcwJdVcp2flSZI09Z4kQqjciU=)
9: 3230322e39332e3133382e302f32342d3234203d3e2034333832.roa (hash: 9VqDU3d2jTW23JJ05scMXpgKwNdRFXtjy3WCszDduNE=)
10: 012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl (hash: 17xVF2GuFYky5QvOzHtN6ChJg5KAN/Cs68p5+Nd6QTw=)
11: 3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa (hash: sFm39yL/wE3VY7beJqFDG9gTkKfaNeEukDIdxaa9zRE=)
12: 3230322e39332e3132382e302f32342d3234203d3e2034333832.roa (hash: Kcq6RiACas78b8uWIYiFOtGS3r3yMXUnaWfx7z/cdEU=)
13: 3230322e39332e3133302e302f32342d3234203d3e2034333832.roa (hash: mk2uuBuKIDHj7rkFbCdRe6jSuAPJ/hDxuUfm/exdaSw=)
14: 3230322e39332e3134332e302f32342d3234203d3e2034333832.roa (hash: HxTVM3BaA8ke4XmmAmeOxfSVVSVRh0EkdWqpyqwPT1U=)
15: 323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa (hash: yvbmRN5GX0Kxoc+90gun4y0Zq8jLX00f2pb/Z/G8CGA=)
16: 3230322e39332e3133322e302f32342d3234203d3e2034333832.roa (hash: HZhJmMH/Ke4cPS3cjwshrQlxCqO5LSReCzOgD2oJQGE=)
17: 3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa (hash: qkkJ54NZ40Um3ciYsl/FGUnS4rYZSGlzZD4dWlUI5hM=)
18: 323430333a623930303a3a2f33322d3332203d3e2034333832.roa (hash: JWHfZ6w+iObuBrwQGbo/6Xd2nLZuo2KPm5ntS1O1mZA=)
19: 323430333a623930303a313531663a3a2f34382d3438203d3e2034333832.roa (hash: Mn12cCWWwqenSncttGnq31sIu/+Hnb5sVeUQv3iCWNw=)
20: 3230322e39332e3133362e302f32342d3234203d3e2034333832.roa (hash: uZGMmLO+ihx1HauuMCEhDeKUaoZ9Cej3WyjpZuP5mxw=)
21: 3230322e39332e3133372e302f32342d3234203d3e2034333832.roa (hash: bc52vQ8UC2G4/y1ll8Fk+/X4/gPss4cwSVJImtHITIQ=)
22: 3230322e39332e3133392e302f32342d3234203d3e2034333832.roa (hash: 2xWfiK5wGmMcUrPcXTeK+FMi4oIrH3FKfxMpAgGIdSQ=)
23: 3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (hash: /w7eKmK7IgjbUT0N0MS/xY50UMcyTaRIoyZfbv+wX+Q=)
24: 3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa (hash: iVB5CfMmFrw/1sxkrTtiTl8LrYbLbK8j8toSYOpEOdI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 03:04:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:51:40:cc:83:95:80:13:19:61:f7:fe:34:d5:11:db:92:95:5a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Validity
Not Before: Mar 24 18:57:33 2026 GMT
Not After : Mar 28 03:04:33 2026 GMT
Subject: CN=D4567B62CBF1994E37006D2DBA7669D63039C60F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:e6:6a:46:4c:ed:b0:a0:61:49:e5:c0:44:
22:53:ff:b3:67:2e:af:08:c2:cf:e7:95:b9:6e:6c:
31:bb:16:d9:40:45:3e:15:81:e7:78:57:67:d2:b0:
8d:6e:33:b5:8e:1f:21:20:e7:e5:b9:6d:b1:f1:35:
ff:1a:a7:69:bc:79:e9:49:42:3c:b5:a2:06:3d:36:
9c:be:84:1e:14:d2:f1:f4:33:0b:5c:4e:7b:b6:04:
fc:17:03:2b:69:a8:32:fe:9b:3c:d2:04:ad:2f:c2:
6f:e9:33:ee:8d:8b:d5:c6:d1:f3:d5:be:6c:be:43:
8a:30:c2:a5:b3:37:94:9f:59:51:ca:03:b8:89:00:
82:13:2c:48:15:a0:1c:43:20:9f:0a:8d:e9:b5:46:
98:bd:ab:eb:ba:39:48:17:06:c2:d0:fa:ae:58:76:
d3:e8:5b:af:74:d1:9f:e7:1a:9a:c5:31:a1:a9:b4:
60:f8:f9:fa:74:f1:95:66:f4:f5:04:27:83:1c:16:
e3:53:7b:a5:7a:c5:61:e0:87:d1:4e:6e:db:af:58:
5c:15:f0:3e:24:99:39:5c:ca:ff:68:f1:1d:71:d6:
a0:a4:c6:e8:6d:d5:89:17:16:54:7f:73:7f:e9:37:
4c:7f:d5:fa:1e:ec:01:c6:f2:3f:98:5e:c2:ae:f7:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:56:7B:62:CB:F1:99:4E:37:00:6D:2D:BA:76:69:D6:30:39:C6:0F
X509v3 Authority Key Identifier:
keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:40:9f:a1:96:fd:9f:2e:e5:be:a5:b1:43:14:14:3e:6e:46:
b3:c0:5a:9d:62:88:9a:5d:d3:05:80:94:f6:58:c3:31:b6:8d:
f9:8e:ec:e3:0c:95:dd:a2:74:33:35:e4:bb:d6:23:6c:69:7c:
04:99:c4:8f:b5:06:33:c7:3c:15:a9:4d:cc:cb:d3:be:5b:05:
4d:c9:85:3d:1c:68:60:77:d2:11:78:f5:76:9e:34:de:21:93:
d7:c8:09:f7:36:df:ef:60:a2:c9:eb:55:e9:29:cc:76:1a:04:
52:ed:45:56:fd:20:b6:ad:0f:d0:0b:97:a2:4d:86:53:3b:e9:
b3:e8:09:37:0b:8c:1f:31:85:0f:4f:d7:5a:4d:1b:e3:6d:55:
46:dc:65:1c:da:ed:65:38:ce:37:1d:97:e4:3d:81:a0:51:6d:
cd:22:2f:98:73:d4:f3:8d:d6:00:29:f0:cd:a7:69:a9:0c:62:
75:91:5a:d7:b8:6b:cd:72:de:85:c1:4d:26:cc:44:99:0e:82:
39:f1:09:89:df:3f:1c:20:64:d5:d7:13:dc:7b:c1:2a:4e:fc:
e6:80:bf:99:32:8e:72:75:77:44:8e:1d:fa:b9:a5:c6:a0:66:
0c:e2:af:0b:7b:59:36:d6:78:7d:68:6c:3e:af:ce:1b:7d:70:
b1:4c:59:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:07:48 2026 by rpki-client