
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
File: A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json)
Hash identifier: pW5aTMlsRUMjxG4N8MXvf1wlHzQMSB4jkwjdyLM2vd8=
Subject key identifier: 81:9F:F3:FB:98:38:1D:D4:8D:14:2C:31:DD:29:1C:D2:41:62:52:0A
Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26
Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
Certificate serial: 436F35F82506BF4B550BA4BAC4473BCCCBCF6203
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
Manifest number: 055B
Signing time: Wed 25 Mar 2026 15:52:38 +0000
Manifest this update: Wed 25 Mar 2026 15:47:38 +0000
Manifest next update: Sun 29 Mar 2026 03:11:38 +0000
Files and hashes: 1: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: lIpuwQni1CJCCy7a6RQeBOueUSsNd+BwETQKPZ3/nzw=)
2: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: taq/X1CYOAF5sGEGq6xtMBoTvaWcHnljHWkFYZgUEvc=)
3: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: N5WXqZ6Jw+zSS8rnedVuQEefp7BbCpCEzbN4PssNcrU=)
4: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: oiQrxAKU3WAq8WQAa4AsG/VSgBXo6JykRbhPhmfaGc4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl
rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 03:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:6f:35:f8:25:06:bf:4b:55:0b:a4:ba:c4:47:3b:cc:cb:cf:62:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
Validity
Not Before: Mar 25 15:47:38 2026 GMT
Not After : Mar 29 03:11:38 2026 GMT
Subject: CN=819FF3FB98381DD48D142C31DD291CD24162520A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:83:e5:4a:c1:f8:14:d9:dc:16:f9:ab:af:
39:14:f4:e9:63:dd:62:6a:fb:a0:5a:b7:a8:ec:b3:
5f:56:5f:78:9e:1e:5b:0b:a2:d3:ec:84:cf:b7:23:
82:c7:29:00:e8:0e:25:f4:31:c4:d5:2c:8b:f0:f7:
e0:7a:9f:ab:08:09:71:59:e6:de:cd:3e:a6:ca:56:
2d:28:d3:36:95:db:82:67:03:51:f0:55:59:ef:8b:
76:5f:86:93:9f:53:81:e6:6f:89:2c:c9:6c:36:b5:
f4:03:6a:f7:09:bb:97:1d:23:fa:44:5b:4e:a8:a0:
60:9c:1c:cf:3d:89:26:44:3a:fa:67:bc:8b:14:3d:
41:cf:4d:50:6e:0a:9c:47:e0:09:f2:3b:a7:ed:dd:
76:93:e3:e2:59:31:92:6c:f0:c4:f1:65:1e:70:53:
bc:8e:44:fa:d9:83:de:f7:09:87:82:6c:72:bb:8f:
f3:c4:fa:88:18:c1:ab:2b:d4:82:a4:a4:7e:3f:3b:
3b:1e:00:e5:25:95:9a:19:6a:9a:79:dd:2c:91:18:
85:df:dc:27:2c:89:b0:6d:71:25:eb:ac:fb:d0:62:
55:0d:83:19:cf:44:a5:b3:a4:06:0a:5c:7d:33:49:
99:07:1b:68:4d:77:07:00:64:4b:f0:64:1e:89:b6:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9F:F3:FB:98:38:1D:D4:8D:14:2C:31:DD:29:1C:D2:41:62:52:0A
X509v3 Authority Key Identifier:
keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b5:43:81:ee:c5:13:5e:be:df:48:b1:dd:dd:d7:45:00:a5:
66:be:65:b1:25:8c:cf:07:bc:00:b6:38:3b:5e:fc:4d:68:d5:
1e:e3:b8:b5:6a:e4:39:5d:f0:35:02:16:43:ae:67:4f:cf:d9:
14:38:5c:97:39:b4:94:f8:5c:0b:05:90:db:0d:8a:18:2b:71:
f9:89:be:88:54:ba:e9:9b:dd:53:2f:77:4f:33:70:40:c9:29:
98:c0:86:59:85:fd:bd:6b:86:fa:4c:9a:3d:b1:34:ef:33:dc:
2e:21:56:32:3c:df:7f:33:4f:b4:7d:fb:be:5c:f0:d2:52:87:
f2:5c:0d:4e:9d:a8:de:8e:2f:22:51:3d:d7:53:f2:e6:f5:ce:
65:1c:50:3d:dd:1f:2f:92:ad:56:eb:b1:30:65:e9:34:cd:a3:
75:55:ca:3f:93:6d:0e:b5:6e:e7:18:ee:31:c0:e0:44:02:16:
31:93:77:35:74:82:61:0f:3c:92:d0:a1:81:29:e6:54:61:e2:
78:35:f6:de:f8:d9:d4:e4:a1:50:9a:07:80:44:df:38:59:01:
3b:b4:7e:71:8d:73:83:2d:78:0a:66:0b:93:00:69:4c:7b:1a:
38:c8:1d:21:c0:a7:68:d9:73:6b:3a:5b:72:2e:71:99:b5:6e:
7a:80:0f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:57:39 2026 by rpki-client