
$ rpki-client -vvf repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
File: ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft (raw, json)
Hash identifier: TEJqw0gaKUFKvC2xy3LzEYalG3SH1BACQOXycyQSIg0=
Subject key identifier: 9F:72:1E:F6:90:BF:B6:16:77:0A:B7:EA:F9:9D:BC:0A:51:75:46:1F
Authority key identifier: AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4
Certificate issuer: /CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
Certificate serial: 7703BC700E6AA5500E5FC00F0FEB493D67B0BD49
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
Manifest number: 0288
Signing time: Tue 24 Mar 2026 14:10:53 +0000
Manifest this update: Tue 24 Mar 2026 14:05:53 +0000
Manifest next update: Fri 27 Mar 2026 18:32:53 +0000
Files and hashes: 1: ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl (hash: 0rIJGP45CvzygLT3aodGvy5Y+BBzsWQgpFwRFMSn0Kc=)
2: 3130332e3137372e3231342e302f32342d3234203d3e20313437313633.roa (hash: BQDZ7beKpSG5YJTRW/gbj7YmxhbuMugwzWVLa45Kdxg=)
3: 3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa (hash: dUSjnFJULsQt0ZMfSuCJpifmDF9rtnb0yNIzE9XIOWo=)
4: 3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa (hash: 87iDHKDOT61940UCNUXAHSvFwBkKLRCDPPSdxU2koYI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl
rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 18:32:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:03:bc:70:0e:6a:a5:50:0e:5f:c0:0f:0f:eb:49:3d:67:b0:bd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
Validity
Not Before: Mar 24 14:05:53 2026 GMT
Not After : Mar 27 18:32:53 2026 GMT
Subject: CN=9F721EF690BFB616770AB7EAF99DBC0A5175461F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a9:f3:22:14:5a:1a:43:00:8d:ae:ce:e5:f9:
f6:94:2f:11:db:92:9b:ea:23:f0:b2:38:11:ef:91:
94:e0:77:cd:5c:cb:b5:27:ea:98:3a:09:28:de:ec:
42:09:a1:22:22:49:55:54:35:15:44:4a:b3:0f:d7:
ad:0c:1c:63:a6:6a:5b:94:e9:0f:cf:13:37:f6:0f:
f3:b2:09:11:89:06:77:5e:4d:50:e5:fd:af:86:5f:
c6:ed:95:f2:a3:95:b0:71:58:d5:dc:14:e4:78:b6:
92:ab:22:68:4c:3f:36:0c:09:ee:c2:b7:92:71:22:
e0:8b:cb:e2:c7:dd:09:44:b9:78:fa:b7:ce:06:02:
6f:dd:da:54:06:83:35:5b:5a:24:43:18:dd:e9:59:
a8:98:ea:61:46:3d:64:05:8e:65:05:0d:d1:b9:a4:
a2:3b:94:07:96:82:90:90:a7:57:ba:15:52:69:ca:
e8:8c:c0:50:3d:54:7d:1f:85:c1:e8:c5:a3:20:fa:
25:7f:75:80:dd:8b:38:8f:05:4f:63:e2:d9:67:b7:
e1:77:ee:b6:83:e7:75:73:27:3d:1d:b6:dd:1c:64:
b4:64:be:14:b1:c8:7a:b3:6d:e3:2a:08:bf:4b:2c:
e0:aa:70:a1:34:c2:8d:f4:8e:d7:97:25:23:56:9e:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:72:1E:F6:90:BF:B6:16:77:0A:B7:EA:F9:9D:BC:0A:51:75:46:1F
X509v3 Authority Key Identifier:
keyid:AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5b:85:9d:36:c2:e6:19:13:51:29:94:89:1b:62:89:96:39:
dc:f9:05:c2:e2:22:a1:3e:7f:21:46:be:94:6e:48:17:b0:e3:
c7:4a:16:ff:1f:d3:bd:2e:5c:81:5a:49:99:b5:65:dd:cc:ff:
d0:9e:32:b3:59:34:db:9d:16:29:5b:c2:8e:74:e6:58:a7:3c:
0e:70:66:27:2c:a0:40:d3:97:74:42:00:48:69:af:7f:8f:c1:
25:f2:71:ab:ee:c1:a4:84:84:da:da:a1:f3:d5:59:1d:d4:16:
f0:14:8c:c9:42:9f:06:b5:d9:3f:c7:4c:9e:32:d9:4b:fc:c5:
cb:b7:3d:20:77:d8:b9:5f:3b:d0:85:70:49:8a:ee:0b:24:a7:
34:7d:7c:60:4f:f5:cd:89:16:50:0f:8c:0d:8a:26:d2:8c:f2:
3b:bd:6c:63:5d:30:1c:bb:c7:b2:dd:23:c5:65:47:a0:7d:36:
4a:64:7c:0e:80:3e:47:0d:b3:eb:bd:db:29:56:4a:ae:43:cd:
67:9a:3b:86:c8:01:76:f3:15:0b:84:4c:24:f0:8d:50:f1:25:
0a:83:dc:f2:a5:bd:51:d9:1a:b6:4b:45:71:05:92:15:34:00:
85:66:0e:24:72:da:6b:5f:0e:ad:e4:7b:de:73:29:85:d6:52:
92:89:2b:6b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdwO8cA5qpVAOX8APD+tJPWewvUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURCOUMxOTczNTJGODEyOEY2REFBNDdBMjI3RDM4NjlB
NEMyMzhGNDAeFw0yNjAzMjQxNDA1NTNaFw0yNjAzMjcxODMyNTNaMDMxMTAvBgNV
BAMTKDlGNzIxRUY2OTBCRkI2MTY3NzBBQjdFQUY5OURCQzBBNTE3NTQ2MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkqfMiFFoaQwCNrs7l+faULxHb
kpvqI/CyOBHvkZTgd81cy7Un6pg6CSje7EIJoSIiSVVUNRVESrMP160MHGOmaluU
6Q/PEzf2D/OyCRGJBndeTVDl/a+GX8btlfKjlbBxWNXcFOR4tpKrImhMPzYMCe7C
t5JxIuCLy+LH3QlEuXj6t84GAm/d2lQGgzVbWiRDGN3pWaiY6mFGPWQFjmUFDdG5
pKI7lAeWgpCQp1e6FVJpyuiMwFA9VH0fhcHoxaMg+iV/dYDdiziPBU9j4tlnt+F3
7raD53VzJz0dtt0cZLRkvhSxyHqzbeMqCL9LLOCqcKE0wo30jteXJSNWnlgDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUn3Ie9pC/thZ3Crfq+Z28ClF1Rh8wHwYDVR0j
BBgwFoAUrbnBlzUvgSj22qR6In04aaTCOPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NzNkMmI2MC0xMmM4LTQxM2UtYjk0MS0zOTNlMDBmZGQ2NTMvMC9BREI5QzE5NzM1
MkY4MTI4RjZEQUE0N0EyMjdEMzg2OUE0QzIzOEY0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQURCOUMxOTczNTJGODEyOEY2REFBNDdBMjI3RDM4NjlBNEMy
MzhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzczZDJiNjAtMTJjOC00MTNlLWI5
NDEtMzkzZTAwZmRkNjUzLzAvQURCOUMxOTczNTJGODEyOEY2REFBNDdBMjI3RDM4
NjlBNEMyMzhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABZbhZ02wuYZE1EplIkbYomWOdz5BcLiIqE+
fyFGvpRuSBew48dKFv8f070uXIFaSZm1Zd3M/9CeMrNZNNudFilbwo505linPA5w
ZicsoEDTl3RCAEhpr3+PwSXycavuwaSEhNraofPVWR3UFvAUjMlCnwa12T/HTJ4y
2Uv8xcu3PSB32LlfO9CFcEmK7gskpzR9fGBP9c2JFlAPjA2KJtKM8ju9bGNdMBy7
x7LdI8VlR6B9NkpkfA6APkcNs+u92ylWSq5DzWeaO4bIAXbzFQuETCTwjVDxJQqD
3PKlvVHZGrZLRXEFkhU0AIVmDiRy2mtfDq3ke95zKYXWUpKJK2s=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:51 2026 by rpki-client