
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft
File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json)
Hash identifier: CUIYOg14412rxhDJfhXDHSdctV4NoqGqgml72PFiK/M=
Subject key identifier: 82:9C:8F:C0:34:58:B2:73:09:4A:8E:03:9A:AD:52:E9:A7:80:89:B2
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 1FC675CB05A4AF3C3E56B38392871085D2D07FF3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft
Manifest number: 0374
Signing time: Sat 28 Feb 2026 05:11:28 +0000
Manifest this update: Sat 28 Feb 2026 05:06:28 +0000
Manifest next update: Tue 03 Mar 2026 13:24:28 +0000
Files and hashes: 1: AS147168.roa (hash: sXrlmN+ZCRiNZeyqUN67fyS1tNOgP0RFDODnmFAtcLI=)
2: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: wAAgDj0V0LlxFzZayyEtPZixW12dEbcdutmJH5eE8Ss=)
3: AS10217.roa (hash: AKpcdslpGED1vOq8rbDyvewGD3kNp+be//qHRk5p0rQ=)
4: AS45700.roa (hash: /1LWrRhqReIukWiX2P9+azoAV5YJhAiOPALAX0RMuXs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 13:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:c6:75:cb:05:a4:af:3c:3e:56:b3:83:92:87:10:85:d2:d0:7f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Feb 28 05:06:28 2026 GMT
Not After : Mar 3 13:24:28 2026 GMT
Subject: CN=829C8FC03458B273094A8E039AAD52E9A78089B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:f5:b7:79:73:9d:23:25:b2:33:66:d6:fd:
08:b3:dc:86:d1:00:03:86:f0:5b:da:22:77:a3:56:
0e:af:3e:7f:5b:c6:39:18:6d:05:37:3d:a8:81:a6:
56:5d:2f:3f:88:b6:e6:2a:f0:38:2c:e9:84:db:48:
32:6e:63:b8:3e:bf:9a:0f:39:a8:52:8e:a6:76:f5:
88:f0:b9:c9:1a:dc:e2:25:c9:c4:04:a9:90:be:7f:
8d:09:55:6e:00:2e:51:ee:46:5a:1e:44:a3:be:34:
9c:47:bd:d7:38:a0:16:f7:88:57:93:9a:b4:b9:d0:
3a:d1:c0:77:9a:01:a0:1d:ba:0a:18:bc:ea:aa:fe:
1a:b5:54:a9:6e:62:a6:ac:c5:63:17:b9:f2:f0:67:
0f:49:fc:d4:ca:50:16:aa:23:bd:88:65:77:60:0a:
5b:5b:1a:4f:67:0f:3b:25:91:59:09:b3:cb:fb:d3:
63:34:8d:f0:e8:8e:6f:17:83:ec:c2:03:64:03:5a:
e4:86:b1:f5:3f:e5:ec:b1:d8:89:48:05:8e:ab:9a:
c9:c0:fe:81:4f:3f:e1:25:bb:24:28:a4:b8:e7:2a:
fc:6a:09:2c:02:9f:4c:01:9c:8d:2e:07:72:f2:9e:
ab:c0:82:72:6b:40:29:f8:0a:d7:12:4f:90:12:5c:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9C:8F:C0:34:58:B2:73:09:4A:8E:03:9A:AD:52:E9:A7:80:89:B2
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9e:39:02:4d:1e:74:64:b7:e7:5c:39:ce:5e:c0:4f:93:38:
94:f8:9d:c4:07:47:1f:24:8d:c8:fb:7b:13:9a:8c:cc:19:43:
ca:18:fe:2d:82:21:a0:88:10:a6:ee:5b:ab:92:0d:6c:6b:b1:
a6:23:d7:c8:70:34:43:79:e4:e7:db:e4:89:ec:a9:57:10:e8:
c0:00:7f:85:83:b4:3a:b6:1a:40:42:36:94:b8:3a:a0:93:2f:
1b:5a:ac:cc:cb:f8:fc:c2:cf:c0:f7:ea:ce:63:d4:03:d0:71:
0d:56:80:f9:79:ba:fc:38:0a:83:ee:72:25:a2:bb:e9:8a:ef:
46:c2:69:16:28:68:46:25:ad:ad:8b:ab:7c:a2:cd:04:99:08:
6b:b9:d3:18:5f:52:22:46:3b:82:0e:1b:83:62:04:05:c1:8a:
0b:9b:ee:3c:0b:0f:b7:c1:1d:8e:e3:18:da:45:26:82:6d:9a:
83:6d:e4:f2:6e:dd:dd:0f:4a:38:c4:ef:5b:96:ef:07:31:68:
58:7e:ca:87:4a:d6:54:b6:ce:95:69:c9:40:d1:a8:8c:44:0f:
07:5a:40:7a:17:ae:76:fa:d8:5d:f0:de:bf:b4:72:93:1d:34:
a1:3a:ca:4f:30:9b:15:1b:db:92:77:b4:77:64:e1:4d:ef:68:
2a:f3:34:dc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUH8Z1ywWkrzw+VrODkocQhdLQf/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF
MkMzQjUxMjAeFw0yNjAyMjgwNTA2MjhaFw0yNjAzMDMxMzI0MjhaMDMxMTAvBgNV
BAMTKDgyOUM4RkMwMzQ1OEIyNzMwOTRBOEUwMzlBQUQ1MkU5QTc4MDg5QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSovW3eXOdIyWyM2bW/Qiz3IbR
AAOG8FvaInejVg6vPn9bxjkYbQU3PaiBplZdLz+ItuYq8Dgs6YTbSDJuY7g+v5oP
OahSjqZ29Yjwucka3OIlycQEqZC+f40JVW4ALlHuRloeRKO+NJxHvdc4oBb3iFeT
mrS50DrRwHeaAaAdugoYvOqq/hq1VKluYqasxWMXufLwZw9J/NTKUBaqI72IZXdg
CltbGk9nDzslkVkJs8v702M0jfDojm8Xg+zCA2QDWuSGsfU/5eyx2IlIBY6rmsnA
/oFPP+EluyQopLjnKvxqCSwCn0wBnI0uB3LynqvAgnJrQCn4CtcST5ASXNJPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgpyPwDRYsnMJSo4Dmq1S6aeAibIwHwYDVR0j
BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE
NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz
QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk
YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4
MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJueOQJNHnRkt+dcOc5ewE+TOJT4ncQHRx8k
jcj7exOajMwZQ8oY/i2CIaCIEKbuW6uSDWxrsaYj18hwNEN55Ofb5InsqVcQ6MAA
f4WDtDq2GkBCNpS4OqCTLxtarMzL+PzCz8D36s5j1APQcQ1WgPl5uvw4CoPuciWi
u+mK70bCaRYoaEYlra2Lq3yizQSZCGu50xhfUiJGO4IOG4NiBAXBigub7jwLD7fB
HY7jGNpFJoJtmoNt5PJu3d0PSjjE71uW7wcxaFh+yodK1lS2zpVpyUDRqIxEDwda
QHoXrnb62F3w3r+0cpMdNKE6yk8wmxUb25J3tHdk4U3vaCrzNNw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:57 2026 by rpki-client