
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft
File: 1259FE91D21610D4BA487C60C804F66EB6591CA8.mft (raw, json)
Hash identifier: UXneyx8e0NbN9+z8nIgXYiPm4LSzExbQ2ZmZnJuIkJU=
Subject key identifier: 71:70:F6:13:37:CC:19:4E:A0:5A:93:45:CF:AC:4F:13:3F:67:3D:C0
Authority key identifier: 12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8
Certificate issuer: /CN=1259FE91D21610D4BA487C60C804F66EB6591CA8
Certificate serial: 5B260F480D20F1815DB831A487D76DDFAB202D9B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft
Manifest number: 0525
Signing time: Tue 24 Mar 2026 23:21:47 +0000
Manifest this update: Tue 24 Mar 2026 23:16:47 +0000
Manifest next update: Sat 28 Mar 2026 08:51:47 +0000
Files and hashes: 1: 1259FE91D21610D4BA487C60C804F66EB6591CA8.crl (hash: r8t0HYijQXoPYF0ygPymEyWlbLFAtkOMRB86JXUaX3c=)
2: 3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (hash: ybooJJfuCLWJ6Wkr2xd+dtjVGbG8gCLcuXzjWzkx1V0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl
rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 08:51:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:26:0f:48:0d:20:f1:81:5d:b8:31:a4:87:d7:6d:df:ab:20:2d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1259FE91D21610D4BA487C60C804F66EB6591CA8
Validity
Not Before: Mar 24 23:16:47 2026 GMT
Not After : Mar 28 08:51:47 2026 GMT
Subject: CN=7170F61337CC194EA05A9345CFAC4F133F673DC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b9:9d:0e:b3:b3:51:08:68:3c:3a:df:96:29:
fa:ed:7a:67:fd:11:cf:a3:59:fa:38:8f:05:d0:86:
3e:75:19:b0:f0:21:cf:02:54:74:d6:b0:ad:d9:1a:
2d:5e:33:ba:28:79:ab:b5:ac:1c:c7:04:1f:0f:a9:
23:ec:f9:b3:1d:84:ae:c1:a3:8b:1d:7e:06:d1:84:
e8:3c:58:a1:cc:27:e1:ae:59:41:4a:b9:7f:63:2f:
3d:0b:53:46:dd:e5:e7:cb:d4:d3:e4:c8:26:bc:f5:
f1:ff:ff:00:bd:19:bf:13:80:71:c7:f0:8e:f0:d5:
75:09:c5:80:9f:7d:aa:9e:79:ac:96:6b:dd:e0:95:
f9:c9:5e:0b:cc:04:d5:4e:3f:70:a9:ab:2c:d2:b0:
39:3c:40:8c:6b:a2:73:91:58:ee:e7:ba:12:f7:1b:
82:6a:b7:00:c9:7c:87:63:79:21:40:2e:bc:63:13:
05:b6:07:ca:88:b5:96:35:e2:08:0e:ef:d3:f3:18:
ad:be:18:b5:d1:b9:0f:e8:53:78:42:c3:0e:05:1c:
38:9f:9a:14:22:19:20:d4:ef:c6:bb:72:22:78:d3:
b8:85:be:79:cf:3c:33:8e:22:2d:e7:f8:c8:fb:f5:
12:4e:07:38:32:e2:a7:5c:ac:cf:4a:f1:9f:04:ba:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:70:F6:13:37:CC:19:4E:A0:5A:93:45:CF:AC:4F:13:3F:67:3D:C0
X509v3 Authority Key Identifier:
keyid:12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:98:d3:f6:38:2f:38:96:0b:be:69:bd:81:bf:66:80:62:c0:
a2:dc:19:31:96:86:72:ab:bd:6d:73:0d:b0:af:90:60:24:2f:
5d:24:bf:dc:2a:30:cd:50:ea:39:f0:37:7d:28:2f:a8:8c:9e:
69:fb:dd:9a:f5:ee:0d:25:cf:95:12:e2:f9:67:71:d0:52:ae:
2b:b1:4f:2f:24:dc:39:d1:fb:c1:75:45:37:97:cb:74:66:29:
cf:00:02:bb:a1:07:02:a2:d7:76:d9:42:77:d9:6b:49:8e:cf:
6c:6f:ea:da:65:42:da:75:71:3c:29:60:dc:0b:be:2b:24:7e:
3a:4e:3d:e7:b3:28:d9:a0:7e:6f:da:4e:62:e3:47:58:05:02:
bc:bb:a3:62:50:7d:c0:20:8b:2b:b4:1d:fc:2b:5a:5a:5a:d5:
17:8c:22:9e:59:29:0b:05:48:b8:9e:f1:b3:ac:5b:aa:dc:31:
23:fa:72:55:c1:bb:f5:24:b5:42:4e:8e:a5:57:e1:5a:33:ef:
fb:1f:95:a9:bc:2d:9f:01:bd:e8:df:19:5b:4d:a2:a7:60:c9:
bd:ad:83:1c:55:a4:48:99:ac:cc:fc:1c:b8:a4:aa:37:c9:78:
29:29:dc:f8:8d:80:25:e8:11:fb:4f:2b:22:ab:c3:da:7e:ed:
01:2a:e0:ae
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWyYPSA0g8YFduDGkh9dt36sgLZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVC
NjU5MUNBODAeFw0yNjAzMjQyMzE2NDdaFw0yNjAzMjgwODUxNDdaMDMxMTAvBgNV
BAMTKDcxNzBGNjEzMzdDQzE5NEVBMDVBOTM0NUNGQUM0RjEzM0Y2NzNEQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDluZ0Os7NRCGg8Ot+WKfrtemf9
Ec+jWfo4jwXQhj51GbDwIc8CVHTWsK3ZGi1eM7ooeau1rBzHBB8PqSPs+bMdhK7B
o4sdfgbRhOg8WKHMJ+GuWUFKuX9jLz0LU0bd5efL1NPkyCa89fH//wC9Gb8TgHHH
8I7w1XUJxYCffaqeeayWa93glfnJXgvMBNVOP3CpqyzSsDk8QIxronORWO7nuhL3
G4JqtwDJfIdjeSFALrxjEwW2B8qItZY14ggO79PzGK2+GLXRuQ/oU3hCww4FHDif
mhQiGSDU78a7ciJ407iFvnnPPDOOIi3n+Mj79RJOBzgy4qdcrM9K8Z8Euq1nAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcXD2EzfMGU6gWpNFz6xPEz9nPcAwHwYDVR0j
BBgwFoAUEln+kdIWENS6SHxgyAT2brZZHKgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
YzkwOTczNy0xNTY0LTQ2Y2EtOTAwOS04ZDI4YTU2ZTk4ZWUvMC8xMjU5RkU5MUQy
MTYxMEQ0QkE0ODdDNjBDODA0RjY2RUI2NTkxQ0E4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2NkVCNjU5
MUNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmM5MDk3MzctMTU2NC00NmNhLTkw
MDktOGQyOGE1NmU5OGVlLzAvMTI1OUZFOTFEMjE2MTBENEJBNDg3QzYwQzgwNEY2
NkVCNjU5MUNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHGY0/Y4LziWC75pvYG/ZoBiwKLcGTGWhnKr
vW1zDbCvkGAkL10kv9wqMM1Q6jnwN30oL6iMnmn73Zr17g0lz5US4vlncdBSriux
Ty8k3DnR+8F1RTeXy3RmKc8AAruhBwKi13bZQnfZa0mOz2xv6tplQtp1cTwpYNwL
viskfjpOPeezKNmgfm/aTmLjR1gFAry7o2JQfcAgiyu0HfwrWlpa1ReMIp5ZKQsF
SLie8bOsW6rcMSP6clXBu/UktUJOjqVX4Voz7/sflam8LZ8BvejfGVtNoqdgyb2t
gxxVpEiZrMz8HLikqjfJeCkp3PiNgCXoEftPKyKrw9p+7QEq4K4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:44 2026 by rpki-client