
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
File: 1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft (raw, json)
Hash identifier: 13+fRzXFzYYDkFKzZRTRQZtesVi1AT9N4R8Bw6IhnaY=
Subject key identifier: 58:81:32:4C:53:89:7C:11:D3:85:21:B6:7E:D4:0E:49:DD:31:E7:BA
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial: 65594F681554D22DA648ADCAD7C663A684016C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
Manifest number: 0253
Signing time: Thu 26 Mar 2026 13:47:06 +0000
Manifest this update: Thu 26 Mar 2026 13:42:06 +0000
Manifest next update: Sun 29 Mar 2026 14:25:06 +0000
Files and hashes: 1: 3138322e31362e3234322e302f32342d3234203d3e203435323938.roa (hash: tIeC9wyFXXPUAxRI7vekXWuC6/hcRWQSf3hEol1GrXs=)
2: 34332e3234392e3230382e302f32342d3234203d3e203435323938.roa (hash: kir6HzO6TsF3UBXe2ZlqXSSUm84/f99k2Bf6oJ5BbWE=)
3: 3130332e3235332e3130362e302f32332d3233203d3e2039323531.roa (hash: mn89fCBpa1L+r4Zi4IcWuFHARAg3/d1uhObCHoGGpiQ=)
4: 3130332e3234372e3234352e302f32342d3234203d3e203435323938.roa (hash: bHqpsq84uIhoWcWxe7oYJq3JF/6gomerkmgGc5KSkIk=)
5: 3138322e31362e3234302e302f32342d3234203d3e203435323938.roa (hash: qXhqvNvwuShzZJIh5ULCs68p+eXdblwycqng954jYDU=)
6: 3230322e34332e37332e302f32342d3234203d3e203435323938.roa (hash: 61f7Q97t84VkVRF5YTtz7buXAr4BZUrQSVIeifN3UC4=)
7: 3138322e31362e3234372e302f32342d3234203d3e20313337333633.roa (hash: hHyrlzR+Le+OhhKvrAcguDCXcnibJcvGLPFdVbHBstw=)
8: 3138322e31362e3235302e302f32342d3234203d3e203435323938.roa (hash: BD8EvM/xRr4bdqKJsAUI6YPxWjmEz7aV4WUFP92DPxQ=)
9: 3230322e34332e37352e302f32342d3234203d3e203435333233.roa (hash: JNYCnaXLuy7eRtAVuMOkMNCxE2+YucQHbFQ6KU266C4=)
10: 34392e35302e352e302f32342d3234203d3e203436303234.roa (hash: +bXCaBbua6T2KBv/snNdo+ibMSi47YiRL7LuzmtTWcA=)
11: 3138322e31362e3234352e302f32342d3234203d3e203435323938.roa (hash: HmndDe5qVshUrqKXy6c3lSUKP2kS5fO5we4iEJUBxwY=)
12: 1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl (hash: Fve4otHYuKRgqFj8WDLz6cfNyE+nHZmbhViswIYFnaM=)
13: 34332e3234392e3230392e302f32342d3234203d3e203435323938.roa (hash: i7hFR9y7ZN9Dd4gezE+BspWILKeKEoVfjSa55Gcaris=)
14: 34392e35302e342e302f32332d3233203d3e203436303234.roa (hash: UYaCog++0gqvsXDea9mZnkKimC89Lnd8uWKZu9Blm80=)
15: 34332e3234392e3231312e302f32342d3234203d3e203435323938.roa (hash: 5Lq+yUimOjMlxXPTxX1EWiQ/SQriMIqGapn1rF0ns70=)
16: 3138322e31362e3234332e302f32342d3234203d3e203435323938.roa (hash: yzViDUy15p7n4BcCRqTTglbGa8IcIW7RyWumPNJDvqo=)
17: 3230322e34332e37342e302f32342d3234203d3e203435323938.roa (hash: i+PnRRnUxlVeVQWYK+xvxmyT3h6ABZPSD9MUCiKy2nc=)
18: 34392e35302e342e302f32342d3234203d3e203436303234.roa (hash: ZHh4TwmNkfiSfrilBWgPwnleDnUmWbiEe9KNZbEdlK8=)
19: 3130332e3235332e3130362e302f32342d3234203d3e2039323531.roa (hash: 76H0qrG4Uy5/8aWW6KHmL8OdUAxhoKIYB8VrEwRt7hA=)
20: 3138322e31362e3234382e302f32342d3234203d3e203435323938.roa (hash: X2MWoYk15EbtUusvVf62LOnsk/5nadLOVJxwILgNrpw=)
21: 3138322e31362e3234312e302f32342d3234203d3e203435323938.roa (hash: wY7i4EqwqdRyPK3tA7Ai92los6YnXZwhh+FXLbFVJSQ=)
22: 3138322e31362e3235342e302f32342d3234203d3e203435323938.roa (hash: WHf+vsK6H58iEm7i814JdrFsRDazGTrDW/jhnCRMY5o=)
23: 3138322e31362e3234392e302f32342d3234203d3e203435323938.roa (hash: Gy/bdPPAnwE1EJJewbOkW44uCE/LT49cEeFhDgih3rI=)
24: 3230322e34332e37322e302f32342d3234203d3e203435323938.roa (hash: jDiUEHNdOW0W156ifBRgYX7rTv/4v0ShYtKyTk4mP1Y=)
25: 3138322e31362e3235332e302f32342d3234203d3e203435333233.roa (hash: rnW674Nfaq+nd+C3AdFWIPPv9a7ZGDzKn3MFfHaiNyU=)
26: 3138322e31362e3234372e302f32342d3234203d3e203435323938.roa (hash: AtrdEbBV5DShM2mzws5DP5xaMV8dfYRa04OIV3075t0=)
27: 3138322e31362e3234362e302f32342d3234203d3e203435323938.roa (hash: FjDJ58MGH2Kic7+guQjA1l9znFMPxD6S25vaDbSNElQ=)
28: 3130332e3234372e3234342e302f32342d3234203d3e203435323938.roa (hash: ofYpfyIwrFc3EyGc5HbuOjiaT8PI5lzgpR6J06rc1og=)
29: 3230322e34332e37352e302f32342d3234203d3e203435323938.roa (hash: 30eJKjPguB8J/C491EioBhp+pwYsL924TdydIpQQU1s=)
30: 323430353a3730303a3a2f33322d3332203d3e2039323531.roa (hash: zJMU7QEPzt1Do0d3+Mn+WDUWKKEjrLl9f5m3udavO0Q=)
31: 3138322e31362e3235322e302f32342d3234203d3e203435323938.roa (hash: rL0yA2eg2dpCd9nph1t0CwiHstByILDunVuD3ZpaeRA=)
32: 3138322e31362e3235312e302f32342d3234203d3e203435323938.roa (hash: tuJLeEsIMyZFf0T93zoOyKZn9yjy4oU9oMLzTS55h8U=)
33: 34332e3234392e3231302e302f32342d3234203d3e203435323938.roa (hash: UekkDKgU/YAhXJ6R9+NFWqKcbGGHHXyI8VU8wt8dut8=)
34: 3138322e31362e3234342e302f32342d3234203d3e203435323938.roa (hash: rWcyY6h+WeyKitdTgCaLhWornePj5xcoNPCsRnNqZB8=)
35: 3138322e31362e3235352e302f32342d3234203d3e203435323938.roa (hash: 9ep46STng+HOxh9c8HhUmGX/ItsHhIo20sbDT4SfbmQ=)
36: 3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa (hash: 9GPvbzS14nrsGqBa86Psp3VYtnnpTdNwmEPZ8WpOVfk=)
37: 3230332e3230392e3139302e302f32342d3234203d3e203435323938.roa (hash: jIby9s1nINd6rj0OgWJ3XrEYmtSQ3/1M0by0m4EkKEA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 14:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:59:4f:68:15:54:d2:2d:a6:48:ad:ca:d7:c6:63:a6:84:01:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Validity
Not Before: Mar 26 13:42:06 2026 GMT
Not After : Mar 29 14:25:06 2026 GMT
Subject: CN=5881324C53897C11D38521B67ED40E49DD31E7BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:65:54:2b:00:dd:87:6d:c9:ae:76:b0:98:
95:06:65:52:02:49:e2:79:59:59:5d:2f:19:28:32:
60:c8:51:2e:69:1d:09:9c:e9:1e:8e:06:85:e7:f1:
e6:11:52:b2:f3:02:cf:4e:fd:63:6b:bc:1b:5e:76:
1c:70:50:ec:cb:9e:59:2e:4d:86:6f:7b:1c:3b:c9:
74:1f:ec:05:ec:0e:b9:4a:97:92:f8:81:e8:41:31:
4d:31:b5:7d:38:d6:34:1f:f2:17:66:2b:c0:12:b0:
f5:3a:b4:bc:7a:4c:8e:be:f0:02:eb:40:60:fe:d6:
79:e9:ad:e8:6d:dc:fe:1f:0f:79:b6:fd:ee:aa:c8:
44:c9:9b:a5:b4:49:8c:29:a9:36:c3:39:85:54:5c:
ab:61:5d:5c:22:65:6f:56:37:ce:1e:12:76:89:4f:
4c:c3:a1:07:f4:50:f2:19:ed:c1:8b:13:d0:61:ce:
c6:96:5e:56:9a:06:f0:69:fd:2c:8e:60:d0:fe:41:
7c:22:84:a8:3e:5f:c2:c6:58:10:a9:ed:11:02:b3:
6a:79:2b:a2:fc:2a:92:7b:09:d5:cb:1e:b1:e3:3f:
e9:62:5d:2e:2f:04:3b:10:9e:44:78:43:b2:86:c3:
2e:0f:24:bd:77:ca:a8:40:3d:36:b5:62:4b:8e:bb:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:81:32:4C:53:89:7C:11:D3:85:21:B6:7E:D4:0E:49:DD:31:E7:BA
X509v3 Authority Key Identifier:
keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b6:5c:de:aa:f6:4d:8e:b2:35:36:f8:04:a1:32:9d:df:4a:
42:7c:e7:11:16:c1:b2:00:85:67:f7:5c:91:1d:9c:c1:43:1c:
93:e2:98:46:f4:a4:30:e1:8a:b6:f2:3c:50:96:48:01:f1:db:
ef:b9:fd:8a:68:ff:a2:c4:c8:e1:c8:de:4a:70:77:b3:61:00:
f0:1d:63:bf:ac:b0:6c:4b:4c:0f:29:9b:0f:ed:08:ca:56:25:
ea:86:a6:6f:f9:3c:5a:ac:af:8a:76:b3:a9:4e:74:e4:a8:2f:
a1:26:7c:18:55:6a:76:3f:06:28:36:4c:b4:cb:7f:4b:33:3c:
a6:3b:ae:65:c6:9e:bd:00:a8:d2:7c:95:2e:82:57:d4:fc:17:
e7:45:bc:16:fe:74:d3:7e:b2:a4:ca:2e:34:35:b1:2c:19:71:
74:e9:21:79:18:10:c5:d8:9e:a4:0e:53:b4:5d:ad:db:2a:9b:
bf:4d:ab:2b:d8:f4:39:44:5b:99:6e:3b:a0:da:6e:32:0f:89:
d4:e1:23:11:de:d7:be:41:1c:32:b6:08:1d:f6:0c:ca:d8:0d:
fe:ae:32:24:be:1d:1b:2c:ea:a4:09:23:12:de:56:9c:a2:0f:
06:b0:72:e8:cf:eb:95:95:15:98:c5:37:96:7f:85:67:52:a9:
7a:2d:54:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:30 2026 by rpki-client