
$ rpki-client -vvf repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft
File: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft (raw, json)
Hash identifier: qiiUMQl3vORnF6c/U+2co45e3hFO7CoTAPssEUj5jKo=
Subject key identifier: 58:0F:80:C2:51:29:93:DD:60:74:26:45:42:C5:8A:3B:00:34:6B:B6
Authority key identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39
Certificate issuer: /CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39
Certificate serial: 69A269C7BE874644A725CA9FBB849BE819845D61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft
Manifest number: 0258
Signing time: Tue 24 Mar 2026 14:30:53 +0000
Manifest this update: Tue 24 Mar 2026 14:25:53 +0000
Manifest next update: Fri 27 Mar 2026 19:35:53 +0000
Files and hashes: 1: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: Y9Gmd38S3GEr38X8sg4lpu4Cyhz7V9M44aocE3LKRAo=)
2: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl (hash: rDXqx8RmE4uRFwZvlubksgVgRKyklCODYWDPASpgNU4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl
rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 19:35:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:a2:69:c7:be:87:46:44:a7:25:ca:9f:bb:84:9b:e8:19:84:5d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39
Validity
Not Before: Mar 24 14:25:53 2026 GMT
Not After : Mar 27 19:35:53 2026 GMT
Subject: CN=580F80C2512993DD6074264542C58A3B00346BB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:54:fc:cf:47:89:dc:50:4d:6d:db:e4:8f:
39:64:f8:57:e7:ba:4b:d8:4c:33:bc:73:0a:c0:80:
e9:a7:c5:a2:d7:13:88:53:b5:73:1b:72:d1:17:7a:
b9:cd:2f:62:d4:5c:83:f2:57:62:51:34:eb:8f:eb:
8a:95:32:5d:cf:ac:a7:8f:ed:37:2b:e6:4e:b5:69:
6e:c3:cb:4c:a9:23:16:90:ce:db:7a:b1:3d:58:61:
e8:09:c4:b0:07:04:ec:31:4a:be:de:b2:b0:2f:c8:
06:0e:db:1a:e0:fd:97:8d:db:30:7b:85:66:3e:f5:
ae:9d:db:ef:7e:f1:68:01:32:0c:38:48:36:cc:c7:
c6:3f:40:42:b0:7a:01:ff:ef:e5:44:e6:2c:e8:b9:
57:7c:56:a0:31:a0:5b:43:6a:48:fe:06:51:1d:f6:
2c:80:e5:37:aa:0f:f7:88:5a:dd:00:cf:38:ef:32:
82:75:aa:f1:8c:e3:ed:ca:b2:48:1a:e4:6e:d4:f9:
79:79:c7:85:e2:63:81:1e:f2:a4:6f:1f:7c:62:82:
0d:9f:b6:13:94:90:95:15:d9:c1:81:86:9f:43:0d:
cc:03:f6:1d:00:19:f7:ca:1b:99:cf:e3:25:34:10:
50:ce:c0:75:f6:12:d6:f4:ce:65:06:3e:a0:f9:98:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0F:80:C2:51:29:93:DD:60:74:26:45:42:C5:8A:3B:00:34:6B:B6
X509v3 Authority Key Identifier:
keyid:AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b6:1f:ee:e7:5f:62:5d:b7:15:85:99:ea:12:00:9b:cc:02:
c4:f3:e0:ec:01:07:1d:67:95:6e:7b:5d:11:30:d9:c9:82:64:
7f:db:f2:06:e7:10:33:34:03:1f:b0:07:92:05:1b:1b:ca:d8:
63:4b:16:f7:00:e0:1b:82:d5:9d:d7:e8:8f:36:ca:96:bb:7e:
a3:d4:78:b3:a8:e8:26:89:09:59:e8:04:84:44:10:6f:11:90:
98:7d:36:18:d7:2e:fc:c3:67:f9:a7:96:83:47:fc:e5:18:a9:
4e:3d:6c:24:e1:29:15:97:99:5c:c8:a2:91:26:e7:e6:86:8d:
37:59:73:e3:2c:86:dd:4b:d6:0d:44:6b:a9:38:69:fb:3f:8c:
06:bc:cf:89:e8:c4:04:3f:1d:cf:62:ef:53:94:ab:35:c8:4a:
c7:fb:81:45:5c:9b:0e:f2:a6:04:97:52:91:60:2c:ae:8c:f2:
95:c5:d0:f0:d1:85:cb:28:4e:0b:cc:23:e4:3f:13:e9:61:ba:
89:b4:f1:db:22:ef:8d:cb:12:fd:7d:ff:09:ff:c0:30:29:63:
30:10:ae:2a:17:69:9e:39:a3:d0:36:6b:6e:d9:23:13:2a:e4:
76:36:18:57:2f:fc:b1:9f:bf:23:28:b2:66:f7:2a:e6:c6:95:
40:8a:6a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:43:00 2026 by rpki-client