
$ rpki-client -vvf repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
File: A575236C1BE8E700EF4D54FB243030C7256654C6.mft (raw, json)
Hash identifier: E+isu3je69iTgr7MIioPcLvUfoDL94uq/YZMSjCeZFg=
Subject key identifier: BD:0C:3D:6A:B4:87:2C:CB:98:A0:4A:04:27:FA:6A:F2:9B:CF:DB:3B
Authority key identifier: A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6
Certificate issuer: /CN=A575236C1BE8E700EF4D54FB243030C7256654C6
Certificate serial: 74270C0CA48741F57F06834A57EE2AF202B5469A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
Manifest number: 0143
Signing time: Thu 26 Mar 2026 14:21:29 +0000
Manifest this update: Thu 26 Mar 2026 14:16:29 +0000
Manifest next update: Mon 30 Mar 2026 00:53:29 +0000
Files and hashes: 1: 3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (hash: ZIzUt+4j3ybpxiWs7Q5/MtmcKRN4EENpYpP86/UWwr0=)
2: A575236C1BE8E700EF4D54FB243030C7256654C6.crl (hash: c5KKpp7fjbsAB1oB3kbpUhObUjbv+uO2WaKzMFfcmTg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl
rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 30 Mar 2026 00:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:27:0c:0c:a4:87:41:f5:7f:06:83:4a:57:ee:2a:f2:02:b5:46:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A575236C1BE8E700EF4D54FB243030C7256654C6
Validity
Not Before: Mar 26 14:16:29 2026 GMT
Not After : Mar 30 00:53:29 2026 GMT
Subject: CN=BD0C3D6AB4872CCB98A04A0427FA6AF29BCFDB3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:94:09:92:6b:ca:a6:68:27:2c:dc:ec:f2:
ae:e6:dd:59:93:dd:22:6c:7a:22:ed:65:02:64:3b:
a3:7c:c6:1b:b9:4e:c5:87:de:aa:74:74:5f:c1:93:
5b:23:a3:7b:46:2b:f9:be:ba:a2:92:e1:19:91:c6:
91:4c:8e:e3:55:d8:cb:f9:30:0c:7c:33:cb:e9:38:
dc:97:4a:0c:af:4a:95:1c:d9:09:33:0c:bc:24:d4:
f0:6a:b9:4b:74:b9:11:08:39:f6:0b:28:05:b0:d7:
cd:e6:d9:83:6d:02:e6:2b:2c:ba:9b:15:db:05:67:
b1:06:27:17:af:99:54:e9:56:51:e8:66:12:0e:f4:
59:7c:49:be:0c:24:80:f4:9b:55:cb:77:d0:d6:3c:
0d:2a:31:cd:e8:77:18:3c:7e:35:9b:0f:72:91:63:
94:5c:ed:d0:f8:79:ac:e5:9b:6a:b4:d3:76:61:07:
45:4b:c4:89:f7:86:97:84:fa:92:cb:38:10:bc:6b:
25:9a:b8:5c:f9:60:47:d2:64:65:6b:f2:a9:29:b8:
b1:93:82:eb:d9:00:7a:94:03:dd:c3:ed:df:a3:50:
de:1d:02:88:97:80:37:65:d4:52:b1:a4:70:99:2c:
08:43:87:95:46:bf:4f:05:bd:7f:aa:b4:7e:ee:30:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0C:3D:6A:B4:87:2C:CB:98:A0:4A:04:27:FA:6A:F2:9B:CF:DB:3B
X509v3 Authority Key Identifier:
keyid:A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e1:be:fe:e1:fb:15:7a:c1:e4:91:c0:8c:d3:c5:f6:16:0b:
da:22:34:93:42:1e:a3:9c:f3:4a:1b:46:08:d6:97:d4:2f:79:
cf:8d:c1:6a:0a:6e:91:af:f0:21:bb:f7:53:6b:2d:e2:78:fd:
2a:f6:07:a6:dd:af:21:2c:60:f4:52:c2:4f:20:af:a2:8e:bd:
b4:4d:bf:68:dc:8e:12:73:ec:b2:c1:e7:14:78:b1:9c:84:0d:
19:75:46:93:4f:5f:c1:c6:89:fb:1b:aa:eb:20:6c:9c:e5:58:
1e:ed:da:ac:43:b3:f9:70:fa:23:5c:bd:68:d7:ca:09:be:97:
98:35:f8:e5:f7:32:35:85:7c:79:a3:76:3f:ff:4c:42:ac:bf:
27:15:34:e3:32:bf:de:fe:78:f0:45:80:4c:7b:2f:bb:cb:50:
e3:3e:6e:73:d7:97:c5:7e:48:3b:20:a4:a2:1a:6b:80:7c:a0:
8b:0f:62:a9:73:14:8d:28:b7:cf:bb:cf:e2:da:2a:79:84:32:
13:9c:1f:9d:44:11:db:e8:0e:63:bd:f9:9a:be:6b:67:52:de:
d4:2c:d7:75:21:4f:ec:92:0b:54:ad:92:e8:d4:20:28:23:7a:
e2:a0:63:5d:0b:52:bf:7c:fc:15:d9:d6:8d:c9:df:69:67:00:
4f:a7:8e:26
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdCcMDKSHQfV/BoNKV+4q8gK1RpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcy
NTY2NTRDNjAeFw0yNjAzMjYxNDE2MjlaFw0yNjAzMzAwMDUzMjlaMDMxMTAvBgNV
BAMTKEJEMEMzRDZBQjQ4NzJDQ0I5OEEwNEEwNDI3RkE2QUYyOUJDRkRCM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7fpQJkmvKpmgnLNzs8q7m3VmT
3SJseiLtZQJkO6N8xhu5TsWH3qp0dF/Bk1sjo3tGK/m+uqKS4RmRxpFMjuNV2Mv5
MAx8M8vpONyXSgyvSpUc2QkzDLwk1PBquUt0uREIOfYLKAWw183m2YNtAuYrLLqb
FdsFZ7EGJxevmVTpVlHoZhIO9Fl8Sb4MJID0m1XLd9DWPA0qMc3odxg8fjWbD3KR
Y5Rc7dD4eazlm2q003ZhB0VLxIn3hpeE+pLLOBC8ayWauFz5YEfSZGVr8qkpuLGT
guvZAHqUA93D7d+jUN4dAoiXgDdl1FKxpHCZLAhDh5VGv08FvX+qtH7uMCvlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvQw9arSHLMuYoEoEJ/pq8pvP2zswHwYDVR0j
BBgwFoAUpXUjbBvo5wDvTVT7JDAwxyVmVMYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDY5YzNlMy03YjU5LTQ0OTAtODRjZi1mZWYxNTg1YWM3NWIvMC9BNTc1MjM2QzFC
RThFNzAwRUY0RDU0RkIyNDMwMzBDNzI1NjY1NEM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcyNTY2
NTRDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ2OWMzZTMtN2I1OS00NDkwLTg0
Y2YtZmVmMTU4NWFjNzViLzAvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMw
QzcyNTY2NTRDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADjhvv7h+xV6weSRwIzTxfYWC9oiNJNCHqOc
80obRgjWl9Qvec+NwWoKbpGv8CG791NrLeJ4/Sr2B6bdryEsYPRSwk8gr6KOvbRN
v2jcjhJz7LLB5xR4sZyEDRl1RpNPX8HGifsbqusgbJzlWB7t2qxDs/lw+iNcvWjX
ygm+l5g1+OX3MjWFfHmjdj//TEKsvycVNOMyv97+ePBFgEx7L7vLUOM+bnPXl8V+
SDsgpKIaa4B8oIsPYqlzFI0ot8+7z+LaKnmEMhOcH51EEdvoDmO9+Zq+a2dS3tQs
13UhT+ySC1StkujUICgjeuKgY10LUr98/BXZ1o3J32lnAE+njiY=
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:02:45 2026 by rpki-client