
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft
File: C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft (raw, json)
Hash identifier: Mhx0zKorh4kml13Cbbep5o83o65ElWDdhgw4Hi01ol8=
Subject key identifier: AC:E8:7E:67:8D:AC:DB:1F:47:E1:7F:EB:5C:09:C9:0F:86:8A:34:31
Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A
Certificate issuer: /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A
Certificate serial: 7D6E3FDFA8E33BEDE778D929DCCE1D3204B363F0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft
Manifest number: 04F9
Signing time: Wed 25 Mar 2026 18:51:44 +0000
Manifest this update: Wed 25 Mar 2026 18:46:44 +0000
Manifest next update: Sun 29 Mar 2026 02:13:44 +0000
Files and hashes: 1: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: 7tgGUn+YrUZ/MWVDGtrerXtqbOMhyZDoTldLslkYYTI=)
2: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: yxV12cP+17+f4nsu4Qt/0TyM0Yc+PlYZYCbNR6RBl54=)
3: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: 8zY41tTngWvKTe/HAKHtyytdzc6XdijkL5LcFd6Ewbk=)
4: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (hash: Ffjrt07F64qfTUTQRM4q8gB9QS8eehDO7qAs3NtubXM=)
5: C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl (hash: 0QDtryYzOcCae302N7VT0UgSg6Y2M/3NE0f8gTfpccU=)
6: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: GMDlJkIYSBbaiHdAVmprXvGw9l46ixxNam2eRH2A4Uo=)
7: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: VElKMVk3iPulNjS9HeHc93PPFZl5g9fy4/nN9cMU7rI=)
8: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (hash: m0WKFr7Q9JfSEuoay78BCi3cNgU52tNMlZWVG7Fhi1s=)
9: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: EXp3RCNwYXOW99lPgPgoT2jmWozp8DenSjKe6GpVx0A=)
10: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: ZQ63p3M+wzXAXpgNpBD0Iq30pmnSOSGVBCaMjIYT+N8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl
rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 02:13:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:6e:3f:df:a8:e3:3b:ed:e7:78:d9:29:dc:ce:1d:32:04:b3:63:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A
Validity
Not Before: Mar 25 18:46:44 2026 GMT
Not After : Mar 29 02:13:44 2026 GMT
Subject: CN=ACE87E678DACDB1F47E17FEB5C09C90F868A3431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:71:6d:73:42:ab:28:2f:69:82:bc:78:ee:3d:
95:96:f0:12:c9:6f:95:55:55:f0:29:63:38:84:8f:
7a:c6:dd:bc:9b:93:9e:12:fb:a6:06:51:1c:c5:fe:
b8:4d:04:60:1c:50:f9:72:cb:3d:46:04:b3:23:52:
3d:5f:e0:b1:d8:69:05:47:20:3c:82:df:ca:a9:96:
bf:4f:44:85:d4:c0:fc:03:e6:11:25:22:56:b9:cd:
19:0f:bc:be:92:7d:e6:32:c2:a5:1e:1e:5a:24:f8:
dc:9c:32:d7:ef:0c:99:1d:b7:ed:a5:db:57:40:c7:
4c:b4:66:c8:fa:60:a1:c2:a1:73:dd:20:02:b8:05:
e2:ac:20:c4:50:03:ba:41:62:50:f9:c0:5d:c8:fa:
eb:c5:fb:62:72:cc:68:e4:87:a4:6f:25:4f:96:de:
63:dd:e3:e5:38:64:6f:cd:2b:31:9b:35:51:d4:49:
eb:ae:6b:be:77:85:b0:15:8d:78:cb:d1:a1:9b:92:
b8:4d:b3:36:3b:cf:2e:d2:7b:91:23:6a:18:cc:79:
63:57:3e:ea:c4:a5:5c:c0:1e:9c:5e:15:33:17:7b:
4e:40:d0:7e:e3:3b:42:f2:58:df:f7:73:67:c3:0d:
03:e7:a8:4b:1b:01:5b:3a:b9:e5:d7:fd:45:e4:cd:
cf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E8:7E:67:8D:AC:DB:1F:47:E1:7F:EB:5C:09:C9:0F:86:8A:34:31
X509v3 Authority Key Identifier:
keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ae:81:5f:90:c2:84:fb:93:e4:26:91:97:8e:02:62:aa:d0:
e9:88:ba:41:5d:f0:f4:df:df:f9:ce:26:12:ee:fb:83:d6:14:
58:72:88:1a:dc:82:e9:d4:5d:77:68:4e:f3:96:91:bd:74:a7:
23:4c:ab:f1:da:48:c0:e8:7d:c6:d7:d2:1f:c8:07:ed:15:44:
4f:17:a7:f3:8d:dc:86:0b:72:15:06:c2:7d:5f:59:3a:a7:08:
df:b6:79:37:17:3c:b7:b1:32:f0:96:7f:a8:60:18:df:7b:da:
b9:4a:c7:c7:c7:58:95:3e:93:e1:c5:c1:15:d2:af:9b:8d:33:
6b:b3:09:c2:de:42:e4:b8:5d:71:1c:95:37:07:64:94:d3:67:
5e:08:4f:28:16:31:56:2f:b2:22:17:71:a4:08:b7:c5:a2:1f:
85:d1:cd:f2:cb:64:8e:13:3d:b2:2e:e4:c0:3b:bc:88:00:4c:
21:1c:4c:56:28:40:06:6d:15:0a:7b:9d:59:9b:e5:78:ce:7b:
99:f7:2d:6b:02:5f:2d:08:88:99:60:80:fa:3d:d9:c0:8c:99:
75:03:ea:60:c6:01:4c:09:a8:a6:18:84:7b:5d:de:29:9c:33:
80:20:7e:50:0e:c6:7b:07:23:13:17:24:15:b6:55:ab:4d:23:
61:2a:85:8a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfW4/36jjO+3neNkp3M4dMgSzY/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZG
QjQ4ODcxQTAeFw0yNjAzMjUxODQ2NDRaFw0yNjAzMjkwMjEzNDRaMDMxMTAvBgNV
BAMTKEFDRTg3RTY3OERBQ0RCMUY0N0UxN0ZFQjVDMDlDOTBGODY4QTM0MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWcW1zQqsoL2mCvHjuPZWW8BLJ
b5VVVfApYziEj3rG3bybk54S+6YGURzF/rhNBGAcUPlyyz1GBLMjUj1f4LHYaQVH
IDyC38qplr9PRIXUwPwD5hElIla5zRkPvL6SfeYywqUeHlok+NycMtfvDJkdt+2l
21dAx0y0Zsj6YKHCoXPdIAK4BeKsIMRQA7pBYlD5wF3I+uvF+2JyzGjkh6RvJU+W
3mPd4+U4ZG/NKzGbNVHUSeuua753hbAVjXjL0aGbkrhNszY7zy7Se5EjahjMeWNX
PurEpVzAHpxeFTMXe05A0H7jO0LyWN/3c2fDDQPnqEsbAVs6ueXX/UXkzc83AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrOh+Z42s2x9H4X/rXAnJD4aKNDEwHwYDVR0j
BBgwFoAUwlRKDB7oq/naBhRQCTABL/tIhxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZTBmOTE2My0zZTVhLTRlZmEtOGJkOS00YWM0YmM2MzA0MTQvMC9DMjU0NEEwQzFF
RThBQkY5REEwNjE0NTAwOTMwMDEyRkZCNDg4NzFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZGQjQ4
ODcxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwZjkxNjMtM2U1YS00ZWZhLThi
ZDktNGFjNGJjNjMwNDE0LzAvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAx
MkZGQjQ4ODcxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADuugV+QwoT7k+QmkZeOAmKq0OmIukFd8PTf
3/nOJhLu+4PWFFhyiBrcgunUXXdoTvOWkb10pyNMq/HaSMDofcbX0h/IB+0VRE8X
p/ON3IYLchUGwn1fWTqnCN+2eTcXPLexMvCWf6hgGN972rlKx8fHWJU+k+HFwRXS
r5uNM2uzCcLeQuS4XXEclTcHZJTTZ14ITygWMVYvsiIXcaQIt8WiH4XRzfLLZI4T
PbIu5MA7vIgATCEcTFYoQAZtFQp7nVmb5XjOe5n3LWsCXy0IiJlggPo92cCMmXUD
6mDGAUwJqKYYhHtd3imcM4AgflAOxnsHIxMXJBW2VatNI2EqhYo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:21:48 2026 by rpki-client