
$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
File: 0110A7C2C5E7B74C89B036FFF78974619577D31C.mft (raw, json)
Hash identifier: XE5bA+i2eHbv6HtAksmi4BpoA35kCEQWtHaMFB9HVbc=
Subject key identifier: BF:E0:10:9B:8E:43:72:25:B9:58:C2:D4:59:89:F0:71:E7:D0:8F:D4
Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
Certificate issuer: /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Certificate serial: 674E2F5369EF932FA245AE064F9460DE331AFA37
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
Manifest number: 03CF
Signing time: Mon 23 Mar 2026 21:52:40 +0000
Manifest this update: Mon 23 Mar 2026 21:47:40 +0000
Manifest next update: Fri 27 Mar 2026 09:38:40 +0000
Files and hashes: 1: 323430373a623463303a63633a3a2f34382d3438203d3e20313432333636.roa (hash: keDZ5dqo7QpwKbY9EEgBghaBvUKpvyvuxTWbyrg58Eo=)
2: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (hash: PwS8ZteZSgPMYr/+U7TBWB1NbbKeXLIctaDRv9tMXAw=)
3: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (hash: QyrGvl3uJu4kbUzsbT9TbYc82tEmeuxMRe2nDKPqdys=)
4: 323430373a623463303a64643a3a2f34382d3438203d3e20313432333636.roa (hash: fYJfmsjf+SULVX6dy88bE8cQRoUB/HUNHP8Mc9BU5Es=)
5: 323430373a623463303a643a3a2f34382d3438203d3e20313432333636.roa (hash: neHLBe/fEcPkBE3oSjIGkPPuzPFnKvLrnK1gADqMmBU=)
6: 323430373a623463303a31323a3a2f34382d3438203d3e20313432333636.roa (hash: F5F4og+0ANkMp2eyG+y4uSqqLHGppY2rxvIFdOjz0YY=)
7: 0110A7C2C5E7B74C89B036FFF78974619577D31C.crl (hash: L9R9AHnxJtQejvOTHDR+EaJb4ufjV8oqbgw8u/Koi2c=)
8: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (hash: AljrwxcXPRJV2CeaxgkjeFz1mPYn0NpdJRkpDNeohWs=)
9: 3130332e3137302e33312e302f32342d3234203d3e20313432333636.roa (hash: kiDIcGQKQVZgpPkBmd3kKHyPvS5ByOoUMCBMCrkzvlY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl
rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 09:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:4e:2f:53:69:ef:93:2f:a2:45:ae:06:4f:94:60:de:33:1a:fa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Validity
Not Before: Mar 23 21:47:40 2026 GMT
Not After : Mar 27 09:38:40 2026 GMT
Subject: CN=BFE0109B8E437225B958C2D45989F071E7D08FD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:f4:77:33:b3:f4:00:c0:73:c4:a6:a1:dc:
b5:15:7a:79:18:c7:15:11:79:87:fa:d4:c0:a4:0f:
3a:64:79:85:0c:6c:7f:3f:97:12:9b:99:0a:51:18:
87:a8:66:71:7d:12:bb:de:37:3b:ba:5d:7c:b6:ea:
f5:09:73:0c:42:74:ec:e4:d9:dd:42:53:bc:0d:c4:
9b:89:4f:86:7c:b6:ab:b8:28:c7:39:c1:bc:70:e7:
a9:8f:7a:56:7c:9d:50:01:51:c2:86:60:b6:8f:e7:
f6:bd:e7:f0:6a:da:49:74:bc:7d:ed:c8:48:db:88:
4e:e9:ca:22:7e:e2:56:0b:3a:af:b4:c7:68:03:70:
c6:86:02:19:3a:3d:95:88:bc:ef:92:55:77:f0:7f:
3c:d9:29:d3:39:47:a5:b7:0c:29:78:9a:6b:95:00:
3c:13:da:5a:2f:e0:9b:1c:bb:46:5d:53:db:2d:27:
4a:15:30:b6:bd:e7:78:a9:2f:f8:c6:ea:94:36:09:
f7:7a:13:02:4b:9d:52:77:6b:62:22:83:aa:f4:cd:
e1:44:13:55:95:29:47:62:7e:5a:5a:d4:4a:37:bf:
af:72:cd:48:c8:6f:f2:51:cf:3a:77:0b:0f:8e:0c:
ad:a8:1a:a0:2d:7c:64:60:55:4a:cd:43:20:20:f9:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E0:10:9B:8E:43:72:25:B9:58:C2:D4:59:89:F0:71:E7:D0:8F:D4
X509v3 Authority Key Identifier:
keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:38:9f:80:ce:ec:92:5d:f2:f5:b2:8b:61:57:a4:9b:e7:ee:
0b:11:b4:dc:f1:df:29:d4:dd:7f:33:54:96:54:96:b5:b7:8c:
32:1f:e0:dd:27:53:b5:5a:0b:3b:15:b4:cc:34:a8:07:54:17:
43:ba:a6:0c:d9:6d:d1:51:c9:b7:af:b0:78:db:bb:83:90:7e:
03:48:af:2a:86:44:c2:d9:d1:4c:f4:23:d5:d0:90:80:d8:92:
06:ac:20:ac:39:49:d0:ff:ae:85:7b:54:dc:ff:c7:9e:32:1b:
5c:18:9e:ed:9f:97:ef:c3:64:a7:07:a9:8b:ab:57:4c:ca:2f:
5c:e5:d4:5a:97:a9:df:03:f4:7f:58:2d:8f:ed:e8:c0:7b:95:
55:15:3e:17:dc:8c:ab:81:c1:22:08:d1:e9:22:1b:e0:db:40:
b1:70:a2:ba:16:8e:e8:7f:07:2b:e8:2f:c9:eb:ff:1a:5a:1d:
d9:d5:2c:86:56:57:eb:0a:c6:b7:f4:58:b8:18:3d:dd:a0:29:
bf:0a:2a:e8:e1:1a:81:74:ef:b1:0f:6f:dd:15:8c:11:fb:14:
b1:a0:23:5b:b7:c3:a5:ec:a2:ee:01:3a:f3:51:92:d1:28:ed:
e8:68:18:34:d8:18:11:10:35:f9:bb:59:39:e1:9f:ee:fb:4e:
9e:54:f6:ca
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ04vU2nvky+iRa4GT5Rg3jMa+jcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5
NTc3RDMxQzAeFw0yNjAzMjMyMTQ3NDBaFw0yNjAzMjcwOTM4NDBaMDMxMTAvBgNV
BAMTKEJGRTAxMDlCOEU0MzcyMjVCOTU4QzJENDU5ODlGMDcxRTdEMDhGRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxvPR3M7P0AMBzxKah3LUVenkY
xxUReYf61MCkDzpkeYUMbH8/lxKbmQpRGIeoZnF9ErveNzu6XXy26vUJcwxCdOzk
2d1CU7wNxJuJT4Z8tqu4KMc5wbxw56mPelZ8nVABUcKGYLaP5/a95/Bq2kl0vH3t
yEjbiE7pyiJ+4lYLOq+0x2gDcMaGAhk6PZWIvO+SVXfwfzzZKdM5R6W3DCl4mmuV
ADwT2lov4Jscu0ZdU9stJ0oVMLa953ipL/jG6pQ2Cfd6EwJLnVJ3a2Iig6r0zeFE
E1WVKUdiflpa1Eo3v69yzUjIb/JRzzp3Cw+ODK2oGqAtfGRgVUrNQyAg+R2FAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUv+AQm45DciW5WMLUWYnwcefQj9QwHwYDVR0j
BBgwFoAUARCnwsXnt0yJsDb/94l0YZV30xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NzBkZmI1YS04NDVlLTRkZGYtYWNhNy1hOWIzMWMzMWRmZjQvMC8wMTEwQTdDMkM1
RTdCNzRDODlCMDM2RkZGNzg5NzQ2MTk1NzdEMzFDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5NTc3
RDMxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwZGZiNWEtODQ1ZS00ZGRmLWFj
YTctYTliMzFjMzFkZmY0LzAvMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0
NjE5NTc3RDMxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJE4n4DO7JJd8vWyi2FXpJvn7gsRtNzx3ynU
3X8zVJZUlrW3jDIf4N0nU7VaCzsVtMw0qAdUF0O6pgzZbdFRybevsHjbu4OQfgNI
ryqGRMLZ0Uz0I9XQkIDYkgasIKw5SdD/roV7VNz/x54yG1wYnu2fl+/DZKcHqYur
V0zKL1zl1FqXqd8D9H9YLY/t6MB7lVUVPhfcjKuBwSII0ekiG+DbQLFworoWjuh/
ByvoL8nr/xpaHdnVLIZWV+sKxrf0WLgYPd2gKb8KKujhGoF077EPb90VjBH7FLGg
I1u3w6Xsou4BOvNRktEo7ehoGDTYGBEQNfm7WTnhn+77Tp5U9so=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:45 2026 by rpki-client