
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft
File: 722D23AD0F959CE5CBFF927C152517F07060D195.mft (raw, json)
Hash identifier: 0ARffUQy0DUXaPuX9gA4iBQRxxOeIUvjlAWYBP54Yjc=
Subject key identifier: 94:33:7F:EA:4B:DE:A5:AB:9B:FF:64:E0:EB:0B:43:10:31:7A:73:FC
Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95
Certificate issuer: /CN=722D23AD0F959CE5CBFF927C152517F07060D195
Certificate serial: 45837CD8547B68F726872DD68C359B03F485E4D5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft
Manifest number: 0213
Signing time: Sun 01 Mar 2026 02:52:01 +0000
Manifest this update: Sun 01 Mar 2026 02:47:01 +0000
Manifest next update: Wed 04 Mar 2026 09:29:01 +0000
Files and hashes: 1: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: SmM4mYg5qX3DKk4SmFEHZwLHzjGeZ9J+aWfv6Lp7DCw=)
2: 722D23AD0F959CE5CBFF927C152517F07060D195.crl (hash: HXVJIVtSuAEcUTqgc4yb01yPE7UYuv6qPy6YgEpTG/Y=)
3: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: QaDcdq6N8G60VfVfn8Gce8C1GvuuPHrjO/8cVZCTT78=)
4: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: IgvUit+JVnRvJOkjIYlvNPAALXRaIVBYKC5WzTyMkfQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl
rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 09:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:83:7c:d8:54:7b:68:f7:26:87:2d:d6:8c:35:9b:03:f4:85:e4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195
Validity
Not Before: Mar 1 02:47:01 2026 GMT
Not After : Mar 4 09:29:01 2026 GMT
Subject: CN=94337FEA4BDEA5AB9BFF64E0EB0B4310317A73FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:b1:08:dd:51:c5:a7:ba:00:c9:e3:f1:ad:
df:69:d3:a2:c2:25:20:e5:71:f3:7e:9b:b5:48:d2:
ee:1b:df:d0:25:52:93:b0:58:83:d1:16:c3:cf:16:
58:12:94:de:d1:dd:05:a0:73:48:5f:7a:d5:0f:ed:
0a:d9:46:a8:1a:51:4f:38:41:74:7c:cb:ca:d2:34:
3c:8e:92:d8:d2:89:86:0c:65:06:88:d0:db:17:e4:
7f:dc:11:d4:c9:7e:6b:94:1d:ab:05:f0:4c:dd:71:
95:13:ca:84:ec:45:30:62:50:33:dd:d9:3a:72:32:
90:75:cd:bc:e1:4d:7f:e9:06:9b:6f:f4:97:58:9e:
33:b5:d5:78:27:34:74:2f:38:5c:77:f3:22:34:10:
cc:2d:6c:f0:4a:ed:3b:06:22:8a:85:56:d6:a8:c4:
92:33:5b:52:cf:1e:7c:98:69:5a:24:8f:ff:5a:d7:
88:4a:ea:75:9e:60:55:24:dc:3c:8e:61:ab:79:50:
6f:5b:ea:77:cf:48:d7:a5:f6:94:1f:29:83:13:b8:
0a:14:38:99:dd:cd:b7:9a:12:ca:20:07:15:da:68:
b2:24:7d:88:df:26:1d:96:05:7a:e4:61:4e:74:a6:
15:3b:d4:81:5b:52:5b:28:d0:56:61:eb:a4:f4:5a:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:33:7F:EA:4B:DE:A5:AB:9B:FF:64:E0:EB:0B:43:10:31:7A:73:FC
X509v3 Authority Key Identifier:
keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4c:28:1f:ec:89:fa:b7:e4:f4:ac:15:0f:a0:f6:3b:bc:08:
ce:b0:40:d7:81:dc:43:98:8e:b3:df:33:9d:b8:f9:74:aa:4c:
b8:4b:49:b0:f9:92:8d:90:4b:41:4a:5f:ee:f2:d3:3f:d7:a7:
4d:f2:35:37:35:7e:b7:db:37:a2:3b:f5:34:6a:d2:03:56:8d:
8b:0c:43:df:84:3c:e0:a7:39:a6:aa:4b:c1:47:85:ff:84:dd:
8e:fd:2a:d6:15:af:e5:39:d6:5a:14:fd:05:ae:e1:b1:57:92:
ee:9c:59:95:da:d4:3a:47:48:49:63:7d:9c:83:02:ff:85:1e:
44:d7:23:b2:22:84:18:f3:52:45:1a:2a:74:b2:6e:58:e4:b0:
50:75:4a:8d:9b:a4:ab:be:ac:92:4c:cd:c3:6a:86:5d:ff:d5:
5c:48:37:2e:92:41:01:6e:e1:03:fb:78:f8:ec:61:fd:80:85:
d6:cf:3e:b2:12:67:04:72:e3:ec:f5:ae:44:a3:27:37:f3:c6:
7c:42:cc:e7:11:6e:2c:4b:79:1a:77:15:88:24:0e:b2:80:3e:
e2:8d:80:9b:23:1b:f6:48:a5:d5:c6:20:53:1a:67:3a:5f:23:
33:d1:dd:df:92:36:46:74:2f:37:c7:f9:33:e2:5d:31:73:27:
a6:f9:1a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:06 2026 by rpki-client