
$ rpki-client -vvf repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
File: 722FE79638E6D14E4794815122247CBEC27B8505.mft (raw, json)
Hash identifier: UGOW51PFoOkIKuJa+sfrwYenMeXMND+M70bgDu51Yis=
Subject key identifier: 75:30:D2:A1:38:0C:C7:32:43:C0:84:09:EB:A4:56:A8:5D:6A:68:B7
Authority key identifier: 72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
Certificate issuer: /CN=722FE79638E6D14E4794815122247CBEC27B8505
Certificate serial: 5DAC8FC653500CA2C26F47300911F4607C3D993B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
Manifest number: 0414
Signing time: Thu 26 Mar 2026 01:10:45 +0000
Manifest this update: Thu 26 Mar 2026 01:05:45 +0000
Manifest next update: Sun 29 Mar 2026 05:52:45 +0000
Files and hashes: 1: 3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa (hash: gxjALHEbHW92GdGOTxNMADVK9qRHCqtwF9yiaiRIXlQ=)
2: 722FE79638E6D14E4794815122247CBEC27B8505.crl (hash: EAyysOGqqC2TMrCDRypWMP76EE2xq2FHZNMeCSB6N1Y=)
3: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (hash: LCaSxIc71iZBDh0yi4LjrBXL1wqAIM0xU5o5V+eH4Rg=)
4: 3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (hash: sCzn25/m0je6VeQbbVeLyb+BPsHQc3CBvZyRKt6D7A8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl
rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 05:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ac:8f:c6:53:50:0c:a2:c2:6f:47:30:09:11:f4:60:7c:3d:99:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722FE79638E6D14E4794815122247CBEC27B8505
Validity
Not Before: Mar 26 01:05:45 2026 GMT
Not After : Mar 29 05:52:45 2026 GMT
Subject: CN=7530D2A1380CC73243C08409EBA456A85D6A68B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:fd:10:75:e4:05:e2:81:f0:80:ce:06:5a:
19:8d:fe:e3:2c:41:25:7e:23:52:2a:74:a8:6c:79:
18:5e:02:47:73:b8:56:da:3b:74:0f:80:a7:46:24:
6f:9e:36:ad:d7:d6:8c:b4:3e:3c:99:fb:0f:2b:44:
9b:0e:9e:46:2a:a0:86:83:b0:51:09:87:2c:0b:f3:
7d:f4:bc:e3:6e:40:a3:81:9e:2c:b3:ce:0c:25:ee:
83:1b:62:9f:01:3c:61:17:3b:e1:1c:07:76:60:c4:
fc:9d:af:2e:74:ed:25:08:54:4e:33:f6:8c:50:7d:
71:a3:40:12:66:ce:c0:60:f7:0c:a7:e7:d1:7f:f7:
f5:e5:45:83:3b:c6:b3:11:0f:6e:6d:e3:8e:cc:42:
f4:24:c7:f6:8e:44:83:10:75:eb:b8:9c:94:51:3a:
79:2e:68:aa:23:66:ec:b2:3d:b4:e7:7c:f3:d9:a6:
9f:24:7b:ec:76:b1:a9:c2:c5:15:6f:bb:c4:84:45:
77:28:3b:ab:58:ae:50:0a:85:a5:46:22:e2:b6:ed:
5a:91:2a:28:57:c4:80:4d:20:b4:15:43:b7:ce:23:
a8:46:ec:77:b1:52:74:66:e9:0e:b1:58:a4:79:30:
02:dc:d1:dc:1f:2f:5c:d2:61:8f:ae:4c:8b:12:7e:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:30:D2:A1:38:0C:C7:32:43:C0:84:09:EB:A4:56:A8:5D:6A:68:B7
X509v3 Authority Key Identifier:
keyid:72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:bb:fd:19:c0:e7:65:76:f2:06:14:92:c3:2c:2e:74:84:1f:
fc:e6:78:87:24:dc:c9:2b:18:b6:7a:25:77:44:58:24:db:2d:
7b:73:61:63:13:a3:0f:0e:65:1c:74:53:b1:a4:28:2a:da:56:
cd:ac:b5:30:25:ea:0c:0a:ff:3a:70:cf:ff:1b:28:92:02:5a:
79:ff:1c:d5:d2:d8:88:2b:1b:01:20:90:89:f2:39:c7:0f:c7:
a5:30:eb:7d:f1:df:5d:88:c9:32:22:b7:bd:a5:cd:43:e2:67:
af:1e:32:25:af:86:c4:8f:18:e9:06:f3:ec:e9:c5:74:fd:10:
79:86:cc:f0:4e:f2:c3:79:07:62:4f:71:95:6b:b8:99:e8:79:
ca:c5:33:4a:f3:01:22:41:2c:37:6b:09:ff:c5:59:e7:ce:c8:
c9:cf:d0:85:26:32:77:6c:8a:70:7b:0a:d9:25:26:16:31:18:
00:d4:7b:b4:49:1f:74:f1:31:56:43:12:75:eb:5a:cb:d9:09:
d1:44:74:8a:95:d4:b4:2a:68:15:b8:0d:33:4f:f9:85:dc:de:
21:09:fc:b6:fc:fe:59:0c:02:b4:a8:5b:4d:c3:db:7e:c0:bf:
ff:ca:2c:16:be:fd:ec:45:3f:65:da:c7:fd:86:e4:c5:78:79:
3d:e1:9c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:57:45 2026 by rpki-client