
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft
File: 722D23AD0F959CE5CBFF927C152517F07060D195.mft (raw, json)
Hash identifier: CAsRwWOWadoc58g7ev/DxhefVE2FUpREuFkO6pIkUoE=
Subject key identifier: 98:1E:0C:65:91:04:01:A7:95:EE:B9:28:3E:11:27:F0:5D:D6:B0:5A
Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95
Certificate issuer: /CN=722D23AD0F959CE5CBFF927C152517F07060D195
Certificate serial: 087D290020F1E14C97A00564716E1877FBE3147F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft
Manifest number: 0227
Signing time: Thu 16 Apr 2026 00:02:00 +0000
Manifest this update: Wed 15 Apr 2026 23:57:00 +0000
Manifest next update: Sun 19 Apr 2026 11:19:00 +0000
Files and hashes: 1: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: SmM4mYg5qX3DKk4SmFEHZwLHzjGeZ9J+aWfv6Lp7DCw=)
2: 722D23AD0F959CE5CBFF927C152517F07060D195.crl (hash: 4bTyGW6b0kr9F6cPC8WvAWhjHHTCtsFOScW9xptt9/0=)
3: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: IgvUit+JVnRvJOkjIYlvNPAALXRaIVBYKC5WzTyMkfQ=)
4: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: QaDcdq6N8G60VfVfn8Gce8C1GvuuPHrjO/8cVZCTT78=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl
rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 11:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:7d:29:00:20:f1:e1:4c:97:a0:05:64:71:6e:18:77:fb:e3:14:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195
Validity
Not Before: Apr 15 23:57:00 2026 GMT
Not After : Apr 19 11:19:00 2026 GMT
Subject: CN=981E0C65910401A795EEB9283E1127F05DD6B05A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:e3:c8:78:a2:0a:28:2a:63:73:85:70:b6:
39:81:20:dd:b2:3d:01:a1:df:94:0f:05:5d:fd:94:
ca:e2:7a:ba:47:33:0a:e4:56:58:55:47:f7:0f:a6:
e3:53:31:bf:9d:1e:13:8e:58:69:48:cd:e5:31:4e:
e0:9d:4f:bb:77:e7:06:08:0f:6a:a9:bb:a1:b7:1f:
9f:d4:a6:98:0c:8f:1d:3b:1e:a8:ff:d0:63:b0:3a:
08:c6:53:e4:0c:50:71:fa:41:11:02:94:71:c6:49:
14:3f:a6:1d:6e:49:2a:b9:5b:7c:30:91:61:09:78:
e7:21:74:3b:34:0e:e4:22:34:1a:47:df:d6:c6:2a:
52:56:dc:0f:8a:ec:b1:71:2b:88:e2:5c:0c:56:18:
23:ce:51:92:7c:75:13:48:14:42:9f:21:2f:70:98:
e8:ce:fe:88:2f:cd:e3:02:83:02:3b:61:ed:67:b5:
65:72:8d:1e:6e:f7:ec:cb:3e:23:6b:b4:00:eb:2d:
1c:d7:18:80:61:71:57:8f:ab:3b:83:c7:d4:db:9a:
c3:93:13:ce:60:b3:0a:da:4b:3c:03:df:4e:21:15:
69:e5:3a:ce:8a:71:39:c6:b7:06:67:c0:f7:08:54:
0e:1e:03:c7:df:ab:6e:d5:b4:ac:5a:b5:78:ee:50:
78:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1E:0C:65:91:04:01:A7:95:EE:B9:28:3E:11:27:F0:5D:D6:B0:5A
X509v3 Authority Key Identifier:
keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:88:aa:84:84:cb:96:fa:2b:b3:84:b0:66:fa:6a:9b:c6:4f:
68:0c:bb:2c:86:0a:93:19:c1:dc:aa:93:94:af:45:8a:04:f3:
5b:97:42:31:fd:c5:6e:8b:62:62:b6:6c:9b:2d:1b:b5:fd:73:
21:8e:8d:d7:a8:61:f7:f8:83:5f:1d:a1:a4:cf:b6:2c:99:6a:
eb:b5:d0:8c:84:3f:f6:79:ca:7f:55:d9:2a:ff:c5:44:e5:fd:
54:83:c8:24:e3:ab:d9:25:d4:a1:98:20:8a:67:0d:d2:55:e3:
42:be:1f:48:82:d4:63:0f:f8:11:2f:4a:fc:19:87:ab:2c:6c:
9b:ce:da:eb:ce:4d:95:f8:42:16:6d:5c:c0:71:d6:94:83:21:
55:33:78:19:e8:06:f8:d3:db:5a:ef:d4:7c:45:52:b4:d7:b2:
62:f6:67:14:31:0c:1d:ea:14:21:e2:1a:2e:02:25:ab:3f:11:
9a:1c:f8:c3:c0:c6:be:52:ab:3c:6d:9b:14:0b:6d:a3:2b:2c:
4a:a7:3c:7f:f8:92:30:3e:0c:1a:50:f4:40:29:53:ae:43:53:
73:d3:18:37:70:6d:d1:0b:9f:f9:b3:4e:bc:9e:41:00:eb:53:
21:f4:f7:fb:2a:66:9c:d9:4d:21:95:e4:18:1e:a1:ec:c6:72:
66:e2:28:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:13:16 2026 by rpki-client