
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
File: A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json)
Hash identifier: SGRumqrLSRI8nv4St2B+JVEfFRTpg9FwX7ry0xBArxI=
Subject key identifier: 58:9D:6E:0C:04:46:81:4C:80:1A:1D:14:2C:AC:C9:87:0F:66:39:0E
Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26
Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
Certificate serial: 134AAB375EBECFE1184E0860D8FF15756D06BBFF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
Manifest number: 0565
Signing time: Fri 17 Apr 2026 05:42:38 +0000
Manifest this update: Fri 17 Apr 2026 05:37:38 +0000
Manifest next update: Mon 20 Apr 2026 16:52:38 +0000
Files and hashes: 1: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: lIpuwQni1CJCCy7a6RQeBOueUSsNd+BwETQKPZ3/nzw=)
2: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: tX6Mt41Lt5RYoUY+9wImIpfCAav8W7GcroPv+hkaGRo=)
3: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: N5WXqZ6Jw+zSS8rnedVuQEefp7BbCpCEzbN4PssNcrU=)
4: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: oiQrxAKU3WAq8WQAa4AsG/VSgBXo6JykRbhPhmfaGc4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl
rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 16:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:4a:ab:37:5e:be:cf:e1:18:4e:08:60:d8:ff:15:75:6d:06:bb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
Validity
Not Before: Apr 17 05:37:38 2026 GMT
Not After : Apr 20 16:52:38 2026 GMT
Subject: CN=589D6E0C0446814C801A1D142CACC9870F66390E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:3e:78:c2:d8:2d:b1:c6:d5:c5:64:5f:7f:
a0:e4:74:c7:49:7e:4f:36:49:2d:e8:82:9c:fc:47:
5e:e3:d4:12:38:ef:00:35:df:e5:55:a7:d1:94:b8:
43:69:d4:63:36:15:0b:ae:34:cb:c1:e8:cb:4a:ba:
d8:b3:b1:4b:41:ff:78:7f:88:da:8b:59:1b:56:28:
9b:3b:49:6f:85:25:9b:3b:5a:08:60:17:e9:d3:87:
a6:fa:58:e7:89:6a:0c:93:e9:cd:43:a3:67:a3:51:
31:b6:f1:2c:eb:78:43:c2:9d:b2:c2:98:be:57:e6:
c1:be:ba:e6:11:96:5d:7b:46:a5:79:59:6c:d2:c6:
53:e5:0c:59:eb:ad:6d:c9:5b:ee:2c:05:d8:01:c0:
27:24:f1:63:1d:d3:70:71:cb:0c:14:9e:ee:9d:d1:
e2:18:17:db:17:f1:63:db:f5:e6:d0:c7:e9:3c:1d:
e8:39:f8:b7:b4:f5:4e:40:0c:38:56:3b:51:67:08:
26:4c:13:c6:d3:0f:f5:c3:2e:df:9f:1b:e2:f6:38:
5b:5a:8b:87:6e:e0:89:0c:a8:e5:05:81:4e:cf:b7:
a8:ca:8b:d1:c8:18:0c:cb:63:35:b0:e1:1c:52:ab:
10:3a:78:bb:29:38:33:0d:a6:d3:25:b3:84:1c:26:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9D:6E:0C:04:46:81:4C:80:1A:1D:14:2C:AC:C9:87:0F:66:39:0E
X509v3 Authority Key Identifier:
keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d5:48:66:93:b0:0d:3c:c5:f3:b4:93:95:87:8c:9d:a7:b5:
f9:f2:e3:5b:23:86:91:0a:4f:16:1f:a3:d7:84:1f:c9:ac:ed:
d9:42:89:c8:e7:73:bc:1e:d5:d4:26:98:5b:85:8a:34:77:9b:
27:eb:b5:53:c6:11:81:83:38:18:1a:62:c0:c4:21:d4:f4:f5:
64:d5:a4:a9:bd:52:64:61:6a:64:4c:06:07:6a:ee:d1:3d:df:
7c:80:65:01:74:dc:5d:60:8b:bf:5d:38:00:08:21:66:ad:f5:
a0:24:28:f2:23:1c:22:e3:5e:36:14:c0:0b:db:84:18:7e:a5:
33:cc:21:90:9b:76:b1:f1:e5:ef:cb:8e:25:3c:31:0f:f0:26:
6d:99:3b:62:c4:a1:e1:a7:06:b5:7e:b6:74:e4:d8:f5:af:b3:
d6:76:2e:8e:de:c3:84:09:cc:2d:58:aa:e3:52:80:97:91:39:
75:ab:2c:6a:8a:8b:28:1d:48:b1:d4:f4:54:78:c1:c5:06:7c:
e5:24:3e:13:eb:c3:02:fc:ac:93:85:d5:f9:b7:fd:d1:b7:56:
f2:f0:74:58:92:64:8b:6b:95:1b:a1:b1:fe:b7:c9:eb:e4:b6:
0e:60:32:bc:21:84:3e:d1:a5:c5:9f:e7:a1:b0:40:ae:10:c3:
78:74:06:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:21 2026 by rpki-client