
$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
File: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft (raw, json)
Hash identifier: /I3/LrbNk8f45ERc+O5+ZpehIF7wbPbo3PmQ6tiyslE=
Subject key identifier: 4D:04:59:60:B9:08:F9:AA:A2:55:B4:BE:68:B3:3F:96:33:2D:8B:33
Authority key identifier: B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56
Certificate issuer: /CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56
Certificate serial: 171D29ACC30EEA390C4B3254100C83ED119BA8E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
Manifest number: 0133
Signing time: Thu 16 Apr 2026 16:51:29 +0000
Manifest this update: Thu 16 Apr 2026 16:46:29 +0000
Manifest next update: Sun 19 Apr 2026 20:51:29 +0000
Files and hashes: 1: 3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (hash: FnFVRscbNixdyogFa4jXZEgDwaSIltQcnlbwAR1rTuA=)
2: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl (hash: UcHsASc8XX82KmQRIz6CWsr9eScwHzeTBzS9GxXFbsE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl
rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 20:51:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:1d:29:ac:c3:0e:ea:39:0c:4b:32:54:10:0c:83:ed:11:9b:a8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56
Validity
Not Before: Apr 16 16:46:29 2026 GMT
Not After : Apr 19 20:51:29 2026 GMT
Subject: CN=4D045960B908F9AAA255B4BE68B33F96332D8B33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:f9:8c:97:e0:27:7c:dc:f1:a3:0a:7c:0c:
f0:67:3b:e2:bd:4a:7a:20:cf:31:a1:5c:7c:e8:d4:
71:59:ca:ed:ee:f7:62:07:c8:a4:1e:09:5c:3c:2d:
af:dd:f9:8c:96:92:93:a3:13:9c:f5:6e:07:11:21:
24:f6:3b:b0:7a:88:5b:a8:90:a3:d5:53:03:3d:ab:
49:d1:3c:8a:ed:34:5a:0e:d8:3c:34:d9:97:eb:8e:
78:aa:73:c8:91:9f:28:57:95:ce:cb:6c:ad:4a:ed:
66:2e:d8:4a:d6:48:f4:e8:8e:d8:57:69:73:d9:36:
55:68:51:eb:2a:86:3d:75:87:02:aa:7e:13:46:45:
27:02:cc:33:84:e0:3f:05:92:00:58:38:09:19:22:
c4:ad:f4:60:21:d5:3e:22:8a:9d:0b:18:aa:b3:45:
f3:7e:9a:e2:6c:16:4e:53:7c:ca:e6:cd:09:73:6e:
0c:38:1b:9a:30:03:48:b8:ae:20:45:81:03:b2:22:
bd:61:16:6d:26:29:c1:e4:d4:3f:b4:ee:f6:8d:91:
23:6a:5f:9f:d4:53:fe:cd:47:5f:d8:38:75:73:02:
b2:b6:c4:09:40:1e:2d:48:a7:5b:34:d4:7a:89:1c:
49:34:52:c0:c4:87:4c:29:7a:6d:8a:a0:e8:28:c8:
23:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:04:59:60:B9:08:F9:AA:A2:55:B4:BE:68:B3:3F:96:33:2D:8B:33
X509v3 Authority Key Identifier:
keyid:B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8c:3c:61:9f:7a:2b:32:7f:07:98:ad:be:b4:9c:fd:3a:22:
19:a8:dc:0b:4d:51:75:01:a4:c9:64:e9:da:a5:e2:a4:42:76:
3a:bc:a7:20:47:4b:db:56:e5:09:34:f6:32:fa:ab:10:01:0c:
7b:3d:87:b1:db:99:64:3a:ca:6a:c9:f0:41:1d:88:96:fb:60:
39:82:ab:e9:81:b2:d6:f7:ac:75:b0:ff:8d:66:e0:fa:4e:b9:
1d:3e:16:a0:2f:16:7b:74:bb:d6:76:03:27:c9:2e:66:7e:9c:
10:d8:e9:1b:f4:bc:24:53:c7:94:af:18:58:ab:56:0a:dd:6c:
f2:9e:af:d0:33:e5:89:c5:7c:67:ea:92:a1:53:e9:ad:90:0c:
08:57:17:e3:ad:05:37:24:02:1b:a7:e6:d5:68:fe:39:ba:b4:
c0:af:60:61:47:0f:f2:14:86:a9:48:94:a6:f8:66:01:4c:b1:
d2:c6:f1:bd:96:c9:25:24:8a:ba:c9:a0:31:8c:e5:7b:b7:16:
06:33:c7:dc:fd:3e:53:d5:b0:c9:ed:e9:79:9e:bf:5b:17:0d:
d5:b7:1a:d3:91:52:66:8c:e4:69:f1:68:bc:fc:08:ed:9d:05:
6f:55:2a:e9:81:5e:e8:f6:61:6a:11:77:4d:fb:54:a2:6e:9f:
59:05:e4:cd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFx0prMMO6jkMSzJUEAyD7RGbqOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2
NDkxNEM1NjAeFw0yNjA0MTYxNjQ2MjlaFw0yNjA0MTkyMDUxMjlaMDMxMTAvBgNV
BAMTKDREMDQ1OTYwQjkwOEY5QUFBMjU1QjRCRTY4QjMzRjk2MzMyRDhCMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGk/mMl+AnfNzxowp8DPBnO+K9
SnogzzGhXHzo1HFZyu3u92IHyKQeCVw8La/d+YyWkpOjE5z1bgcRIST2O7B6iFuo
kKPVUwM9q0nRPIrtNFoO2Dw02Zfrjniqc8iRnyhXlc7LbK1K7WYu2ErWSPTojthX
aXPZNlVoUesqhj11hwKqfhNGRScCzDOE4D8FkgBYOAkZIsSt9GAh1T4iip0LGKqz
RfN+muJsFk5TfMrmzQlzbgw4G5owA0i4riBFgQOyIr1hFm0mKcHk1D+07vaNkSNq
X5/UU/7NR1/YOHVzArK2xAlAHi1Ip1s01HqJHEk0UsDEh0wpem2KoOgoyCOZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUTQRZYLkI+aqiVbS+aLM/ljMtizMwHwYDVR0j
BBgwFoAUtyU15OuLMcZ5TE3zH/U+TmSRTFYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NmZhOTU4NC02Zjk3LTQwNDEtOWM4ZC04YjM5NTllNGY5YjMvMC9CNzI1MzVFNEVC
OEIzMUM2Nzk0QzRERjMxRkY1M0U0RTY0OTE0QzU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2NDkx
NEM1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZmYTk1ODQtNmY5Ny00MDQxLTlj
OGQtOGIzOTU5ZTRmOWIzLzAvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNF
NEU2NDkxNEM1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJWMPGGfeisyfweYrb60nP06Ihmo3AtNUXUB
pMlk6dql4qRCdjq8pyBHS9tW5Qk09jL6qxABDHs9h7HbmWQ6ymrJ8EEdiJb7YDmC
q+mBstb3rHWw/41m4PpOuR0+FqAvFnt0u9Z2AyfJLmZ+nBDY6Rv0vCRTx5SvGFir
VgrdbPKer9Az5YnFfGfqkqFT6a2QDAhXF+OtBTckAhun5tVo/jm6tMCvYGFHD/IU
hqlIlKb4ZgFMsdLG8b2WySUkirrJoDGM5Xu3FgYzx9z9PlPVsMnt6Xmev1sXDdW3
GtORUmaM5GnxaLz8CO2dBW9VKumBXuj2YWoRd037VKJun1kF5M0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:19:02 2026 by rpki-client