
$ rpki-client -vvf repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft
File: 056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft (raw, json)
Hash identifier: Ky+cP19R5C29QK9rt+7QquYgdtrQwUkrxi2pbbZ1Y9c=
Subject key identifier: 9F:8E:4D:C5:BA:D2:45:E5:51:58:39:05:75:F8:50:16:7F:3F:72:0C
Authority key identifier: 05:69:30:DE:7F:74:01:B4:CC:AB:5E:C0:10:FB:E2:92:D6:55:3E:E0
Certificate issuer: /CN=056930DE7F7401B4CCAB5EC010FBE292D6553EE0
Certificate serial: 292002FFD234C59F5FE84DC553837FBEA6D48D66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft
Manifest number: 0215
Signing time: Wed 25 Mar 2026 22:12:14 +0000
Manifest this update: Wed 25 Mar 2026 22:07:14 +0000
Manifest next update: Sun 29 Mar 2026 02:35:14 +0000
Files and hashes: 1: 056930DE7F7401B4CCAB5EC010FBE292D6553EE0.crl (hash: rcaJmwMoizZW2jjIFB9lFEWdVsscOP/lSVHwSblq4uw=)
2: 3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa (hash: 59UbQui0o21vn/pvYKOG2V8T8i8LLCzy1vsMTTAH/fg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.crl
rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 02:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:20:02:ff:d2:34:c5:9f:5f:e8:4d:c5:53:83:7f:be:a6:d4:8d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056930DE7F7401B4CCAB5EC010FBE292D6553EE0
Validity
Not Before: Mar 25 22:07:14 2026 GMT
Not After : Mar 29 02:35:14 2026 GMT
Subject: CN=9F8E4DC5BAD245E55158390575F850167F3F720C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:f1:0f:c9:af:09:34:3d:77:3a:41:56:f2:
92:1e:7b:95:f8:42:a8:38:d3:9a:c5:76:ac:5a:dc:
c3:cb:d1:60:90:19:ef:c4:f0:3a:c3:60:c0:59:16:
08:2a:a8:4f:9e:1b:d9:08:a4:27:ce:3e:72:d8:fd:
af:b3:e1:5a:3e:2a:0e:6b:9d:00:87:af:b0:90:6b:
b7:02:0c:31:52:de:7f:d3:bf:28:6d:46:bc:65:97:
bf:e9:95:d3:00:31:01:0a:b4:52:1f:4b:78:ad:5b:
2b:98:73:34:e7:a3:7f:b4:d0:b9:a1:fa:ee:a4:07:
ca:62:82:52:d9:66:c6:8d:6d:89:85:97:e4:b5:b8:
2f:4e:1a:9d:14:fc:c0:f9:9e:b0:18:e4:bf:2b:dc:
ad:9e:3d:b1:8b:63:5d:5c:30:91:0e:33:3a:a2:94:
47:07:c5:e3:d7:96:3e:45:e4:72:86:b6:ae:1a:c5:
d6:bb:33:c9:bd:1c:4e:53:f9:c6:25:47:70:ae:64:
41:8e:0b:28:db:7a:4b:fd:6e:f6:ef:2b:cf:a1:a3:
a3:f3:26:d6:43:c3:3c:49:47:f8:1d:43:41:62:73:
1f:54:bb:b6:af:4e:0e:3e:b4:83:db:f3:c6:bb:c7:
03:ba:30:b6:84:b7:17:a5:85:a1:70:07:d1:ac:92:
5f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8E:4D:C5:BA:D2:45:E5:51:58:39:05:75:F8:50:16:7F:3F:72:0C
X509v3 Authority Key Identifier:
keyid:05:69:30:DE:7F:74:01:B4:CC:AB:5E:C0:10:FB:E2:92:D6:55:3E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:25:75:97:bd:aa:69:16:48:09:f5:ac:f5:38:0b:21:1e:09:
a5:b1:8d:c4:55:6b:1b:16:dc:d0:b9:af:e1:ec:d5:e3:81:90:
be:e8:28:d2:c8:71:60:b9:3f:7c:3e:41:1f:26:62:9b:88:31:
40:e0:fd:fa:64:d7:28:bc:a2:11:24:66:c4:06:ed:2e:3c:3b:
76:b3:48:e6:ce:56:9e:f9:4c:16:a7:f4:d1:94:0e:53:b5:42:
b9:81:56:7a:b3:8c:77:8c:46:f4:46:16:37:59:9a:f3:2e:5e:
af:b2:46:e0:92:ed:48:4b:b7:0d:7e:4d:eb:36:cb:10:f7:08:
d3:a6:41:59:97:ce:05:49:c9:2b:f0:0c:1a:04:62:ea:56:69:
d1:7d:51:3e:d5:98:50:bb:e2:2f:19:7c:4b:fc:c2:64:b4:72:
4c:59:70:d3:93:ad:bf:55:97:26:ed:cf:1a:70:45:79:68:5c:
1a:4e:32:ed:0e:66:83:ce:6f:5e:39:14:e1:52:80:07:ba:20:
5b:c2:89:17:21:be:4c:22:a3:8a:a9:80:dc:0e:d5:08:ef:c1:
57:21:ad:0c:05:ff:85:35:0c:af:ea:72:07:91:02:42:ed:7e:
5b:87:56:dd:03:37:cd:cc:22:fc:85:67:e4:71:8e:b4:bd:93:
2b:83:7c:12
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKSAC/9I0xZ9f6E3FU4N/vqbUjWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU2OTMwREU3Rjc0MDFCNENDQUI1RUMwMTBGQkUyOTJE
NjU1M0VFMDAeFw0yNjAzMjUyMjA3MTRaFw0yNjAzMjkwMjM1MTRaMDMxMTAvBgNV
BAMTKDlGOEU0REM1QkFEMjQ1RTU1MTU4MzkwNTc1Rjg1MDE2N0YzRjcyMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCao/EPya8JND13OkFW8pIee5X4
Qqg405rFdqxa3MPL0WCQGe/E8DrDYMBZFggqqE+eG9kIpCfOPnLY/a+z4Vo+Kg5r
nQCHr7CQa7cCDDFS3n/TvyhtRrxll7/pldMAMQEKtFIfS3itWyuYczTno3+00Lmh
+u6kB8piglLZZsaNbYmFl+S1uC9OGp0U/MD5nrAY5L8r3K2ePbGLY11cMJEOMzqi
lEcHxePXlj5F5HKGtq4axda7M8m9HE5T+cYlR3CuZEGOCyjbekv9bvbvK8+ho6Pz
JtZDwzxJR/gdQ0Ficx9Uu7avTg4+tIPb88a7xwO6MLaEtxelhaFwB9Gskl9fAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUn45NxbrSReVRWDkFdfhQFn8/cgwwHwYDVR0j
BBgwFoAUBWkw3n90AbTMq17AEPviktZVPuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MzM4NDQ5Ny03NzJkLTQxNzktYjI0Ny1iMDFjNjRlZDEwZDEvMC8wNTY5MzBERTdG
NzQwMUI0Q0NBQjVFQzAxMEZCRTI5MkQ2NTUzRUUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDU2OTMwREU3Rjc0MDFCNENDQUI1RUMwMTBGQkUyOTJENjU1
M0VFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMzODQ0OTctNzcyZC00MTc5LWIy
NDctYjAxYzY0ZWQxMGQxLzAvMDU2OTMwREU3Rjc0MDFCNENDQUI1RUMwMTBGQkUy
OTJENjU1M0VFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKsldZe9qmkWSAn1rPU4CyEeCaWxjcRVaxsW
3NC5r+Hs1eOBkL7oKNLIcWC5P3w+QR8mYpuIMUDg/fpk1yi8ohEkZsQG7S48O3az
SObOVp75TBan9NGUDlO1QrmBVnqzjHeMRvRGFjdZmvMuXq+yRuCS7UhLtw1+Tes2
yxD3CNOmQVmXzgVJySvwDBoEYupWadF9UT7VmFC74i8ZfEv8wmS0ckxZcNOTrb9V
lybtzxpwRXloXBpOMu0OZoPOb145FOFSgAe6IFvCiRchvkwio4qpgNwO1QjvwVch
rQwF/4U1DK/qcgeRAkLtfluHVt0DN83MIvyFZ+RxjrS9kyuDfBI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:07:49 2026 by rpki-client