
$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
File: F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft (raw, json)
Hash identifier: oWKwJSNGKUgfm0Q7fEGY2pP/+CMoSPvgIDWyd1gwkso=
Subject key identifier: 8E:72:19:F8:3F:7E:C4:7E:B5:4B:48:30:BF:2D:E5:04:A2:08:08:62
Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
Certificate issuer: /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Certificate serial: 31475C22809B261EFBCA99AFDCB14A9C8A58F02F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
Manifest number: 0574
Signing time: Wed 25 Mar 2026 19:51:38 +0000
Manifest this update: Wed 25 Mar 2026 19:46:38 +0000
Manifest next update: Sun 29 Mar 2026 07:17:38 +0000
Files and hashes: 1: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: /ri40FDmSZx726w/lEZ1lnE+M3llFsHw0OIkUDVqH2Y=)
2: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: Ju/vO7vCQQsoKWqaI5uCjlvfJIZ0F/Vpc0p/QWILZD4=)
3: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: M4ssaOvjHsdJP6LoJpiLBv94HULBEuZfCL5oS3yxuR0=)
4: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: zzz4sdR5gzKzpAbEJCRzN6BkviHvm/Eab9wuvzBGW3s=)
5: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: QqkYw4dvuAxz/Z71BLxdsCFvca35TsWBzdDiFc7djzY=)
6: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: U25XxYHsdDHg45kmjqy0PPmW/5GPYURDN/+SgVMDWdQ=)
7: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: InIenu/YRdZ+r+sG5SCyx4cnFek5Q1mbpz29x6bWyk8=)
8: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: IGEWY2eHTKaYMtxRXqYJpKskrVH7Tr78Gf7J+C6rKG8=)
9: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: u07NQFdDkw9uQJyKvseE8BXy1l4340TGYboFy4isKRg=)
10: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: 1A57a+WSkaUEe/nNKsaDACTzujL/BWvYX5TZ+R8VoL8=)
11: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: zNkUcfseAFGChQlk9FTTSxxP9VLqeS6Xzt5hWG8FeNY=)
12: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: UQwmx7kfaHxkn2EDWo9d59K9BpIkWV4oYs+G0r7Y0tg=)
13: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: zlUSo08cC5dU1tahN2pFRIpVflwenezMlRGB/W6FAVg=)
14: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: RTJdm4ux75KqUxTLd+HL3T2/W81Q6eNxAPEmBwe4d2I=)
15: F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl (hash: 9OhsISWDcvZay/QCQToLiHWmITohvQ5I5NwCJ7mqzxY=)
16: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: l2XgTKrEaZzJg/s+9XNrUPqB/jS99nk9vRMWjSJi3Ck=)
17: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: KpZING4byOb+kw62UnCHT9VpB7H105YwJJjgZg9mICg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl
rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 07:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:47:5c:22:80:9b:26:1e:fb:ca:99:af:dc:b1:4a:9c:8a:58:f0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Validity
Not Before: Mar 25 19:46:38 2026 GMT
Not After : Mar 29 07:17:38 2026 GMT
Subject: CN=8E7219F83F7EC47EB54B4830BF2DE504A2080862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:16:e9:f6:5c:36:2e:70:90:f8:3c:19:fd:9b:
0c:b8:6e:4e:0e:2a:ad:14:30:7c:f6:1a:6c:0d:2d:
2b:9a:d6:9a:23:40:ff:11:eb:ba:c1:fa:ef:62:23:
73:4a:03:07:ef:03:02:3d:d9:17:5f:e7:bd:f7:60:
a4:ba:46:6e:c5:39:64:e4:ec:4b:e5:01:a5:3c:85:
4d:7c:65:16:31:28:c3:01:5f:8c:ed:8d:0d:fa:dd:
85:49:21:01:42:b0:36:eb:e5:a3:52:54:21:1b:e3:
de:58:1c:8b:8a:ce:6d:a7:9d:6a:f0:b3:86:1a:d0:
fe:20:b0:05:d9:ac:94:fd:94:fd:4b:99:46:b5:fd:
ef:6e:86:8f:9e:04:ce:d2:f6:67:87:96:4f:b8:30:
35:4b:be:59:30:67:ad:87:9f:16:34:31:da:c9:da:
9f:a0:03:34:4d:d9:52:d2:cc:bf:42:df:cc:c1:b0:
33:6a:b0:39:18:4b:ca:bb:6c:bd:b4:54:58:0c:21:
41:27:2f:73:94:5c:0b:f6:09:61:57:53:13:d9:89:
33:bb:4a:d9:6a:cd:e9:4d:05:f5:d6:b5:d0:6a:a8:
88:83:80:9e:56:b3:bb:b5:39:fd:e1:cb:54:9c:db:
69:5f:b3:b6:9e:d4:8d:03:df:d4:b3:eb:08:e5:61:
d7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:72:19:F8:3F:7E:C4:7E:B5:4B:48:30:BF:2D:E5:04:A2:08:08:62
X509v3 Authority Key Identifier:
keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e0:08:28:61:cf:fe:f2:8c:d9:ce:65:ed:ef:96:1c:2a:90:
11:c3:ad:66:46:cf:1f:9a:0b:46:ca:31:5a:97:5b:ac:a3:fa:
1a:ef:85:0c:20:21:11:1d:69:11:df:c2:df:ff:9e:d8:a4:3e:
94:c7:ef:33:f0:6d:b6:f3:97:56:00:18:02:6a:bd:04:25:3b:
bb:f3:f4:df:cc:80:04:db:d8:8d:8e:a3:ae:f8:49:a0:c2:95:
19:00:07:3c:5d:53:1b:dd:42:c7:52:2b:27:da:17:4a:90:69:
2e:cb:ab:28:1d:4c:39:e4:7e:60:12:d2:80:69:f3:60:7a:86:
77:ac:bf:a0:0c:d8:67:f0:60:9a:7f:ab:04:fa:e2:ce:64:10:
1e:05:5b:26:3c:5d:06:16:ae:d7:ca:73:0c:e7:39:9e:f2:17:
e0:91:35:49:fd:a0:a6:22:53:64:3c:25:20:42:a1:d4:e9:1d:
df:96:c6:7e:df:eb:f3:ea:47:49:59:28:c0:02:05:7c:b0:74:
53:38:72:c5:5b:17:9d:c5:d8:e8:bf:11:37:3b:79:45:c6:49:
94:cf:55:ec:23:63:97:2e:0d:e8:8f:c6:7c:d9:84:bc:a3:ae:
c6:c1:18:cd:22:ba:0f:a7:cc:e5:3e:96:98:84:7f:be:30:6b:
c1:d0:d7:97
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMUdcIoCbJh77ypmv3LFKnIpY8C8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJB
NzJCNTgzNzAeFw0yNjAzMjUxOTQ2MzhaFw0yNjAzMjkwNzE3MzhaMDMxMTAvBgNV
BAMTKDhFNzIxOUY4M0Y3RUM0N0VCNTRCNDgzMEJGMkRFNTA0QTIwODA4NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrFun2XDYucJD4PBn9mwy4bk4O
Kq0UMHz2GmwNLSua1pojQP8R67rB+u9iI3NKAwfvAwI92Rdf5733YKS6Rm7FOWTk
7EvlAaU8hU18ZRYxKMMBX4ztjQ363YVJIQFCsDbr5aNSVCEb495YHIuKzm2nnWrw
s4Ya0P4gsAXZrJT9lP1LmUa1/e9uho+eBM7S9meHlk+4MDVLvlkwZ62HnxY0MdrJ
2p+gAzRN2VLSzL9C38zBsDNqsDkYS8q7bL20VFgMIUEnL3OUXAv2CWFXUxPZiTO7
StlqzelNBfXWtdBqqIiDgJ5Ws7u1Of3hy1Sc22lfs7ae1I0D39Sz6wjlYddHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjnIZ+D9+xH61S0gwvy3lBKIICGIwHwYDVR0j
BBgwFoAU86uo88LdiSXdR79+ohNzAqcrWDcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZTY5M2I4OS00NTk3LTQwYjUtOTJiMC1iMjk5ZmE3NjlhZmEvMC9GM0FCQThGM0My
REQ4OTI1REQ0N0JGN0VBMjEzNzMwMkE3MkI1ODM3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJBNzJC
NTgzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGU2OTNiODktNDU5Ny00MGI1LTky
YjAtYjI5OWZhNzY5YWZhLzAvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzcz
MDJBNzJCNTgzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADjgCChhz/7yjNnOZe3vlhwqkBHDrWZGzx+a
C0bKMVqXW6yj+hrvhQwgIREdaRHfwt//ntikPpTH7zPwbbbzl1YAGAJqvQQlO7vz
9N/MgATb2I2Oo674SaDClRkABzxdUxvdQsdSKyfaF0qQaS7LqygdTDnkfmAS0oBp
82B6hnesv6AM2GfwYJp/qwT64s5kEB4FWyY8XQYWrtfKcwznOZ7yF+CRNUn9oKYi
U2Q8JSBCodTpHd+Wxn7f6/PqR0lZKMACBXywdFM4csVbF53F2Oi/ETc7eUXGSZTP
VewjY5cuDeiPxnzZhLyjrsbBGM0iug+nzOU+lpiEf74wa8HQ15c=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:51 2026 by rpki-client