
$ rpki-client -vvf repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft
File: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft (raw, json)
Hash identifier: HEHpZkH+oUEnpqW4uFQsCj/qB65gux9LA4mY6RS7g2M=
Subject key identifier: FE:74:0E:91:05:EC:86:14:18:ED:1F:0F:66:CC:9D:43:EE:E6:B2:3A
Authority key identifier: 19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE
Certificate issuer: /CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE
Certificate serial: 1E930577569CB515CA100D38E54B7D761E7566BA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft
Manifest number: 01FA
Signing time: Wed 25 Mar 2026 18:22:12 +0000
Manifest this update: Wed 25 Mar 2026 18:17:12 +0000
Manifest next update: Sun 29 Mar 2026 06:15:12 +0000
Files and hashes: 1: 3130332e36382e3231342e302f32332d3234203d3e20313530353137.roa (hash: 5eHMmSOXqcaio0G7mCeIUfZJCaBBOr7GrZWeXm+wBUE=)
2: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl (hash: avGn3fiTHmAGAnNozl7yuclN3qUJ56OPk6Cu3HwqpU8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl
rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 06:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:93:05:77:56:9c:b5:15:ca:10:0d:38:e5:4b:7d:76:1e:75:66:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE
Validity
Not Before: Mar 25 18:17:12 2026 GMT
Not After : Mar 29 06:15:12 2026 GMT
Subject: CN=FE740E9105EC861418ED1F0F66CC9D43EEE6B23A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:09:03:be:5e:f8:88:75:f9:1f:38:51:52:6c:
c7:8d:7c:4c:6c:83:6e:0f:7a:c8:38:23:b9:83:95:
52:cc:b1:05:7a:3f:c0:37:50:34:01:56:a5:d5:fb:
7e:d2:8b:b6:95:23:4f:bd:0a:dd:d7:7a:7f:c1:7d:
6a:06:0e:82:00:b9:03:3e:1b:e5:6a:61:41:eb:27:
cf:54:5e:5e:b1:c1:e6:0d:ff:8a:5f:d0:e3:71:1e:
0b:57:31:db:30:b7:98:81:fa:2c:a6:97:b5:2e:9e:
8a:53:52:29:8d:b3:73:57:20:d7:a4:2c:43:7d:84:
07:e2:dd:a7:6e:95:ff:43:e5:f8:b0:3d:9c:55:07:
83:03:4d:ca:c8:0b:1f:7a:f5:37:ac:66:23:24:f1:
7a:b9:30:01:fb:3c:09:87:ca:41:7f:04:bb:80:7f:
08:f3:6a:5c:47:81:0c:c4:cd:2d:96:a1:c2:80:92:
5d:4d:77:f5:54:24:19:f4:89:27:24:96:15:3c:d0:
22:35:41:59:6a:41:2d:4f:28:c9:4d:18:d9:ab:d1:
96:9e:d3:31:87:50:5b:75:95:c5:d3:e5:5d:85:72:
9e:3c:b9:98:b6:49:d0:ce:b0:dc:03:67:b9:c3:b4:
b4:9f:ea:fb:48:47:94:c3:60:fd:13:84:aa:6a:3e:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:74:0E:91:05:EC:86:14:18:ED:1F:0F:66:CC:9D:43:EE:E6:B2:3A
X509v3 Authority Key Identifier:
keyid:19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:dc:5a:a9:8f:52:2d:f6:04:40:9a:77:f2:0c:63:a0:43:3b:
f6:78:74:d7:5c:3a:5f:fe:c1:ce:60:6e:9f:1a:e7:72:1d:c1:
48:12:7b:b2:1b:56:02:85:0d:35:ef:14:87:67:eb:ff:3c:71:
8d:54:3d:83:b9:10:2b:3b:d7:85:ce:1b:21:2f:a9:26:16:e7:
0c:73:25:29:9b:ff:fe:60:35:76:70:7b:4e:5d:00:d6:a9:d1:
cc:97:67:86:57:4c:51:74:86:75:3d:71:97:56:8a:c9:d4:af:
ef:bb:b8:22:6d:31:44:a7:ab:b3:1e:3b:1f:5f:45:3e:3f:e8:
14:21:5e:15:6b:08:66:a9:b3:ff:bd:bb:12:8a:bf:d0:01:b2:
08:20:66:15:9c:6e:0f:5f:b7:12:bd:40:5c:39:d7:94:3c:af:
b4:72:47:8a:cd:52:2e:80:e7:a1:41:ff:dd:4a:1c:65:3a:1f:
df:45:b3:e3:62:5e:e0:94:88:98:93:14:cc:99:b3:c0:64:1d:
eb:78:5c:d4:0d:e1:51:46:40:b6:48:f1:ee:11:c5:87:81:90:
be:d2:4e:64:db:89:d9:cf:f8:29:cc:48:f0:fa:24:77:e7:4e:
14:b9:46:49:18:57:87:04:9d:bc:9f:a6:e2:eb:01:34:48:19:
e3:64:77:c1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHpMFd1actRXKEA045Ut9dh51ZrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0
Q0Y3OTFCRTAeFw0yNjAzMjUxODE3MTJaFw0yNjAzMjkwNjE1MTJaMDMxMTAvBgNV
BAMTKEZFNzQwRTkxMDVFQzg2MTQxOEVEMUYwRjY2Q0M5RDQzRUVFNkIyM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7CQO+XviIdfkfOFFSbMeNfExs
g24Pesg4I7mDlVLMsQV6P8A3UDQBVqXV+37Si7aVI0+9Ct3Xen/BfWoGDoIAuQM+
G+VqYUHrJ89UXl6xweYN/4pf0ONxHgtXMdswt5iB+iyml7UunopTUimNs3NXINek
LEN9hAfi3adulf9D5fiwPZxVB4MDTcrICx969TesZiMk8Xq5MAH7PAmHykF/BLuA
fwjzalxHgQzEzS2WocKAkl1Nd/VUJBn0iScklhU80CI1QVlqQS1PKMlNGNmr0Zae
0zGHUFt1lcXT5V2Fcp48uZi2SdDOsNwDZ7nDtLSf6vtIR5TDYP0ThKpqPvlRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/nQOkQXshhQY7R8PZsydQ+7msjowHwYDVR0j
BBgwFoAUGSgLj1qk+97GecNR6wQNKEz3kb4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZWJmNjNlZC1kNDUwLTQ3N2UtYjMxYi1hZjkyYjE3MjZkMmUvMC8xOTI4MEI4RjVB
QTRGQkRFQzY3OUMzNTFFQjA0MEQyODRDRjc5MUJFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0Q0Y3
OTFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGViZjYzZWQtZDQ1MC00NzdlLWIz
MWItYWY5MmIxNzI2ZDJlLzAvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBE
Mjg0Q0Y3OTFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKDcWqmPUi32BECad/IMY6BDO/Z4dNdcOl/+
wc5gbp8a53IdwUgSe7IbVgKFDTXvFIdn6/88cY1UPYO5ECs714XOGyEvqSYW5wxz
JSmb//5gNXZwe05dANap0cyXZ4ZXTFF0hnU9cZdWisnUr++7uCJtMUSnq7MeOx9f
RT4/6BQhXhVrCGaps/+9uxKKv9ABsgggZhWcbg9ftxK9QFw515Q8r7RyR4rNUi6A
56FB/91KHGU6H99Fs+NiXuCUiJiTFMyZs8BkHet4XNQN4VFGQLZI8e4RxYeBkL7S
TmTbidnP+CnMSPD6JHfnThS5RkkYV4cEnbyfpuLrATRIGeNkd8E=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:41 2026 by rpki-client