
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
File: 981E5677AC602950ABE1A442C2779E7CB0C108A9.mft (raw, json)
Hash identifier: NtN7aAa661HYNEcdsLBnhNK/zIMfjH1i4dtTDYFmDc0=
Subject key identifier: 1E:CF:4C:BF:D2:83:4C:E2:A1:96:A2:8F:DC:FE:97:94:4B:BC:44:61
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 221C92C73EAE74A73601542DDA604F89AA882B5C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
Manifest number: 05D3
Signing time: Thu 26 Mar 2026 07:21:32 +0000
Manifest this update: Thu 26 Mar 2026 07:16:32 +0000
Manifest next update: Sun 29 Mar 2026 09:17:32 +0000
Files and hashes: 1: 3131302e34342e3137312e302f32342d3234203d3e20333935373933.roa (hash: CzsB1i2n8blmvNya3o9w8kwH8dKsWQzSUJDKNEk5v+Y=)
2: 323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (hash: tmM3oKcQYom0eZ0XNJS+YU7h43ssUwLiYaqon6dfaUY=)
3: 3230332e38342e3133392e302f32342d3234203d3e20313338383433.roa (hash: wu8diV5jdWuux9C39Tvhu1GJ88vcA6Du/7ncHsnVM8k=)
4: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (hash: Wij0WNmFzkS7ii03UOjMpVj1DHEK+SaLjmorAVH1mZI=)
5: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (hash: DzgPlEX76YPqKshtrhPz/EVID2lXXaNvCCo/tHgJE8c=)
6: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (hash: njKwh9fBki9cQ9S37NNLRAGEY/gEGO5YoV7LWFXK6D8=)
7: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (hash: aaVQCjxDcTZfVP0GXV6UmhAVx/WHjfyhQPMjY9CDL1Y=)
8: 3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (hash: u/hRr1E7iAZVxPG4K+GYy4e7bkPpI7qrdTq8mm4/3Ao=)
9: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (hash: zp9YwqJpaJqPSfkIdca9i4u3v/DatX4/IMoUS9bihyA=)
10: 3230332e38342e3133362e302f32342d3234203d3e20333935373933.roa (hash: RFhrg4bv5ZNSWmuLud5F/oLaU4cTEMAfMqrRIOATFAw=)
11: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (hash: k8TYiHXc6vZmoqXaKgcDXCYwJI5QRLDArVJpzQsFi0s=)
12: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (hash: vmMOC54VRYyQ6zaPWhSxLckPPT+mw9crTtfHlgZPBE8=)
13: 3230332e38342e3134302e302f32342d3234203d3e20313338303737.roa (hash: 7UyyeOfOAAWwvi60EPh0vF8B3qR4laDvRoyaINvRTM4=)
14: 3131302e34342e3136382e302f32342d3234203d3e203234323036.roa (hash: H0HlMimCqXAso/aispJtA9+9Apf+w3psosa64aEPhuo=)
15: 981E5677AC602950ABE1A442C2779E7CB0C108A9.crl (hash: ARJCIoiZItCFi9DVgJuUch41VeAoqwbJhQl7FNnv8TU=)
16: 3230332e38342e3133372e302f32342d3234203d3e20323134313433.roa (hash: gGq3gtPXXpT8qmppXJpdYMGRNCe8MtmuCS9LRZ9VUgI=)
17: 323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (hash: 1MMaA/JALdwU46Gmn5cadR8bFFMn6pjjD2wa0Pe9Aag=)
18: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (hash: yCnISErH8Sna1COh5a/JsnVWUa2WsXkM6lcVpwgWaI8=)
19: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (hash: XBonl+MDq5JKpWntnVm6TMfayZbg8tQu2RWN6XgAyJw=)
20: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (hash: 9MSiXUftqD7YwgoDDhRkUOlJfbnaxlrR0kRkqPsHDsM=)
21: 3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (hash: L7B4TlCu6+XGwvVIhFVxD06j+oz/txAbz7A9RLeSSuk=)
22: 3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (hash: 8Z6QdZAm6ipP1goiFZjslQYb9XOb/wZyuYYrPlulaFM=)
23: 323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (hash: yk2Beo121KKGPqhGrImYDU3EMLdITUqRzn7ocJjo60c=)
24: 3230332e38342e3134332e302f32342d3234203d3e20323133363037.roa (hash: SU/DxOnFopjxkv8c6HfEkmadSFV8VExLgA9VBa2HuUc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 09:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:1c:92:c7:3e:ae:74:a7:36:01:54:2d:da:60:4f:89:aa:88:2b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Mar 26 07:16:32 2026 GMT
Not After : Mar 29 09:17:32 2026 GMT
Subject: CN=1ECF4CBFD2834CE2A196A28FDCFE97944BBC4461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:10:8c:44:b3:d8:c9:e6:5d:c7:d1:6f:1e:
97:c7:34:5f:a8:a8:6e:1a:07:af:ea:85:b1:b3:bb:
e9:2f:e4:c1:12:ac:3e:2e:38:d7:1b:2f:74:37:d8:
e5:63:29:5c:1c:ed:8b:e9:a9:ca:bf:80:06:a1:c5:
d2:0e:03:9d:a4:87:d7:68:3d:51:3e:c8:39:73:8a:
2b:fb:25:8c:a4:c5:8b:33:5b:39:7c:2f:12:61:7f:
69:65:f9:98:df:e6:18:0f:23:9c:98:1f:f5:2d:58:
b1:4e:5e:99:18:ea:48:73:ed:76:f0:e2:63:c6:19:
7b:6e:a2:b5:64:26:68:78:53:1c:8b:dc:1e:37:f6:
b3:b3:0c:c4:c3:d0:14:3c:c3:2e:17:14:ee:3d:d3:
2b:20:7d:98:9b:dd:58:eb:c5:31:19:04:cf:d1:36:
d2:ac:97:c6:c3:86:98:20:79:73:5a:0a:2f:cd:b5:
99:01:fe:0c:d7:73:b5:ce:65:5c:b6:2d:5e:eb:32:
98:cd:35:87:05:d4:53:c8:3b:ac:70:d1:4e:2e:88:
61:fa:0d:dc:a7:68:30:bb:3e:fc:cb:67:5f:35:98:
25:6f:aa:3e:fb:0e:8b:db:97:3d:12:39:09:63:ca:
b2:66:79:2a:92:58:a0:47:ac:5d:e1:ba:98:38:0b:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CF:4C:BF:D2:83:4C:E2:A1:96:A2:8F:DC:FE:97:94:4B:BC:44:61
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e1:f1:37:4a:2a:30:ed:f1:e4:9d:65:4b:68:87:b3:92:16:
82:cd:b8:8b:06:47:60:44:28:35:38:18:a3:82:bb:b6:a3:ce:
a3:d0:16:d8:85:ae:ba:89:29:15:94:c7:f4:72:02:dd:89:a6:
18:fd:95:26:a0:5f:5e:c6:e1:e4:b2:80:2e:ad:26:d5:f4:f7:
3b:7f:55:ee:6d:25:0f:09:80:e2:8d:1f:90:7a:4d:c1:fa:1b:
9d:a6:cb:2b:94:cc:6c:97:66:71:12:b2:9e:16:2c:bc:a7:a9:
e3:69:93:28:65:91:e8:bc:7e:b7:5e:1e:80:71:68:86:3a:c3:
18:13:3e:53:57:c3:73:81:7d:5c:4c:15:6b:b0:06:9d:63:2e:
cc:26:09:55:d4:7c:24:04:40:42:52:4e:bb:d8:84:87:bb:9f:
4a:b9:d8:0e:f8:cd:a0:8e:ee:54:6e:3f:b4:62:c3:ce:5d:e2:
03:b4:85:dc:7f:94:17:e3:c6:2a:bc:78:5a:ee:a3:4f:de:b9:
4a:45:12:fc:cb:7a:ef:f6:1c:4b:d2:01:43:be:7d:cf:93:20:
57:72:3c:f3:bc:bc:e8:01:e0:23:9f:82:d6:bd:47:c4:e1:9a:
8d:b5:c6:93:88:0f:60:f0:d4:13:db:78:0b:6c:b8:bb:f0:f9:
64:61:08:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:52:42 2026 by rpki-client