
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
File: 9A52B6405ED406A7B17C4478D516DF3E37282980.mft (raw, json)
Hash identifier: dcFT5Q9xd0/Ia3aNv4VBVwlmptqScKkByKmLG7Kci5k=
Subject key identifier: 65:2D:21:AE:50:AC:09:DA:A5:19:EB:B4:77:71:DC:86:E2:A8:13:88
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial: 315E9B55AC14973E351D08C98CB25747531DA8F7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
Manifest number: 0309
Signing time: Fri 17 Apr 2026 07:31:07 +0000
Manifest this update: Fri 17 Apr 2026 07:26:07 +0000
Manifest next update: Mon 20 Apr 2026 18:21:07 +0000
Files and hashes: 1: 3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (hash: GdK5e+2mTVf/URP/rTUwoQaL49mkBCzHifQYtT6LZ9E=)
2: 323430303a343661303a33353a3a2f34382d3438203d3e20313437313337.roa (hash: Y3XYf27QnurhdV1CW67C5UxWbak1ZDu532ZjKsBxVtw=)
3: 323430303a343661303a313a3a2f34382d3438203d3e20313437313337.roa (hash: a4kar+hZC31dN5bmEcyjGudCJwDbez0xQdLphlBrsp8=)
4: 323430303a343661303a333a3a2f34382d3438203d3e20313437313337.roa (hash: YdSsGr4BjFrFET1Pgec0CyVOY3w0mCvZYunx96T/HRk=)
5: 323430303a343661303a363a3a2f34382d3438203d3e20313437313337.roa (hash: 0k545OOwyj9NvbehxX+QV0g5xQmQQnbTNP95f97h71M=)
6: 323430303a343661303a32383a3a2f34382d3438203d3e20313437313337.roa (hash: BASa57B0aeCvQjUkpH58uhcpVnA7zhpchwSCS5nsYmM=)
7: 323430303a343661303a31303a3a2f34382d3438203d3e20313437313337.roa (hash: h0oH/3iLu1unRW/jZRg6pYTlxoghvh0aIr1dQ6X1C3o=)
8: 323430303a343661303a33313a3a2f34382d3438203d3e20313437313337.roa (hash: 9MFeAvNjxRA9vbUf2UgXcthdxQ5XENOLt4Ao9GHoHp4=)
9: 323430303a343661303a33333a3a2f34382d3438203d3e20313437313337.roa (hash: s3Xjjbohn1CufgneBaEZY/bwLMOk5+UIxmZaor+mssg=)
10: 323430303a343661303a31393a3a2f34382d3438203d3e20313437313337.roa (hash: 5FcZQWvOh6pLwsoaD4YTIG17OJilGjN+93omVyyFOZM=)
11: 323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa (hash: kEXHj9pv5MWefZu6lpGXP15sPBFvi6JY6eKJO5xEqB4=)
12: 323430303a343661303a31333a3a2f34382d3438203d3e20313437313337.roa (hash: INC+aAdBEWi58gMud2WYkmc5AYB/cZKH3D/b7vcKvsA=)
13: 323430303a343661303a32333a3a2f34382d3438203d3e20313437313337.roa (hash: UeQqi6ZVFgPrGYMster+xne64h585Ow3H0IaK3UC2WM=)
14: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (hash: ShZcfvOuL7hhFcin6d6C9YZIwo2zOBT3B5csjg2tV64=)
15: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (hash: EvUm4cJBa4C1BImp9thQZ8BX3+SY4YqvKOUkSPQljL0=)
16: 323430303a343661303a32343a3a2f34382d3438203d3e20313437313337.roa (hash: eELtUE44s8kWXW53efaOQB87hQvYKnu+4QWMOO/ldiE=)
17: 323430303a343661303a393a3a2f34382d3438203d3e20313437313337.roa (hash: UbfbQp2UJcWdUXOg3yUdX64d8tTRpxRLmsAiq/gQPtk=)
18: 323430303a343661303a31373a3a2f34382d3438203d3e20313437313337.roa (hash: MQTEtT0TR1f+0V0bndDRXrcOI9gxT90XmU11iLCfrjk=)
19: 323430303a343661303a353a3a2f34382d3438203d3e20313437313337.roa (hash: kS9+afwSiaTp9TelPiQ0ILiNOqNp/k8Ib68mizaidfE=)
20: 323430303a343661303a32313a3a2f34382d3438203d3e20313437313337.roa (hash: +gPgp8QYiU/daLpgrvM/5BELV5q0+mYrJuLKheezSV0=)
21: 323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa (hash: bH0QRBT1yTn/wCvKxau4plk6nMYBKS98USNjhSr5VTI=)
22: 323430303a343661303a3a2f34382d3438203d3e20313437313337.roa (hash: uA6xDa7IvgkDp22R6G6BTJTUnQ6z5ZPc+c5h8RXJlMc=)
23: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (hash: omGcwmDsT8BYpBScz5Bq8p8wjIAMhQE4SKahvN0WhGg=)
24: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (hash: LHnVdcZ5/YfYWNz9EwzLlVaYYhGPyvyomANm7mqWzO0=)
25: 323430303a343661303a32393a3a2f34382d3438203d3e20313437313337.roa (hash: IEucjhXv8bAa5eR/7We292E0AjQSxt/nxsHzEY0hsao=)
26: 323430303a343661303a33343a3a2f34382d3438203d3e20313437313337.roa (hash: WrWbmsZZrPD4tCYkM+PlD88T9/eqy1PkC98c/wYNVkI=)
27: 3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (hash: uhlzYip1Vr9wq1FIVgoBLWnymsgGUspFrO9lWq8rb2g=)
28: 323430303a343661303a323a3a2f34382d3438203d3e20313437313337.roa (hash: 23/idCqUx8EPa7QGFdtUC3If9YW7mCjrP46bOrSKS5Q=)
29: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (hash: z2k28a+6ZI3VAF075Ex5TSmy7XYBAGjTmBdcFap9YJg=)
30: 323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa (hash: OgrUIPRU4hlKsLPwGuGpe/ivo5VWBIS7QYpm7Sxho2I=)
31: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (hash: Cwh07TkFHSVxFptsS9+W0W6emaGKqX4GCK/GVTdPowA=)
32: 323430303a343661303a31353a3a2f34382d3438203d3e20313437313337.roa (hash: 6i3UMACzodtWNujjB7HjZ1wIY9Wkv8kYqdabcGyF3UA=)
33: 323430303a343661303a32323a3a2f34382d3438203d3e20313437313337.roa (hash: KAxv+bcTcqGpScOTMbFMveWIpWOPxpJEwT7ajRyz6mM=)
34: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (hash: pifjJjTcE6PeDdv2QBGHsCyyOypnfnj2TzyiuJpYoi0=)
35: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (hash: r39b6mOH1IwysZ4h0sWe8of8Eqz81JxpSEnLBmKsOQg=)
36: 323430303a343661303a383a3a2f34382d3438203d3e20313437313337.roa (hash: xUscykaPjchZwH98C+3nSOKZLZaGqcecZKinfhX00i4=)
37: 9A52B6405ED406A7B17C4478D516DF3E37282980.crl (hash: LNdu9Km2LnZBkTCK7I37mnLN7Lgkvnw3eAXPjrp/9ko=)
38: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (hash: /1QktFWDIeefEIAnyvr9/LERn3oGXVO571BF9/xslaI=)
39: 323430303a343661303a31343a3a2f34382d3438203d3e20313437313337.roa (hash: ZlLb/8ABoTMshaPAOuB5oc8hOwpCTBM9+ckE++m8QHc=)
40: 323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa (hash: iK23Ih7KgC4OjnO9UHJglzhRasd3vRLpYeuOhNGE5hk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 18:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5e:9b:55:ac:14:97:3e:35:1d:08:c9:8c:b2:57:47:53:1d:a8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Validity
Not Before: Apr 17 07:26:07 2026 GMT
Not After : Apr 20 18:21:07 2026 GMT
Subject: CN=652D21AE50AC09DAA519EBB47771DC86E2A81388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:18:76:07:7e:61:26:d2:b5:67:1e:75:ad:
69:57:f9:77:08:bb:0b:8c:9f:aa:af:aa:9b:60:9f:
29:9e:93:3f:2c:e6:94:02:5a:17:74:24:a3:c4:d5:
21:97:75:85:d2:20:b9:3d:a9:ac:fe:27:df:fa:d1:
fd:e9:ac:a5:92:b9:86:dc:45:86:e8:21:73:ea:da:
e1:6d:80:28:5a:9e:21:cd:a4:9f:25:f6:a8:4e:c3:
82:dc:f9:85:e5:fd:65:ca:ca:ca:80:e6:f0:4b:d4:
9b:e1:8d:b5:b1:17:0d:c4:27:ba:6a:fc:0d:ba:0c:
86:2d:46:d5:a3:8f:a9:44:55:ea:c5:3c:fd:32:6d:
7f:16:a1:4a:88:c1:ee:82:20:5b:71:b9:c4:8f:ce:
df:d1:a0:94:70:d0:94:fd:ec:80:88:0d:ab:9b:da:
b0:e3:8f:05:8f:d6:03:d2:c2:b7:f7:a6:8d:0f:aa:
22:1d:ef:74:45:dd:47:f5:d9:b9:22:4e:e7:10:58:
58:9c:23:ed:d4:bc:ca:77:77:6c:0d:e8:3e:61:a2:
d6:27:25:fc:82:6f:8e:c8:ef:08:e8:25:06:4e:02:
91:18:fd:8b:86:a3:b5:9b:fd:dc:10:d1:c2:3c:d9:
27:ad:93:d7:cf:14:1b:8a:2b:76:3e:7b:6b:90:b2:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2D:21:AE:50:AC:09:DA:A5:19:EB:B4:77:71:DC:86:E2:A8:13:88
X509v3 Authority Key Identifier:
keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fd:cb:de:10:1a:17:ea:fd:70:12:eb:90:29:91:6c:a8:97:
65:55:c0:ef:06:da:7e:f6:7e:4d:8d:8e:fb:d9:2d:4d:72:77:
55:67:4d:14:97:24:70:3f:09:b7:9e:b1:5c:ba:2e:cc:dc:92:
93:98:22:83:80:63:96:ab:6d:7b:a3:cd:b4:a7:e3:66:c1:98:
e2:1e:e8:a8:52:c2:8e:ed:a8:be:1e:96:b8:d5:06:45:00:21:
39:c7:df:79:73:3a:f1:3b:99:d5:d0:50:6b:64:eb:39:de:46:
dc:c8:90:df:5a:72:8f:ea:56:6b:65:13:47:5c:93:bf:e2:ee:
23:2e:86:68:80:1e:d9:b6:8d:9f:ff:3f:39:a4:8f:a2:9c:6e:
6c:44:20:2b:24:b8:ef:f6:5f:43:7a:c9:02:b9:b3:68:f0:2e:
bc:1e:19:63:a7:a4:ba:30:f7:34:7b:0a:ca:13:ac:47:3c:2d:
e6:24:6f:c6:a8:ed:16:66:9d:f8:fe:c9:88:a3:24:45:d7:c4:
fe:68:16:b6:af:63:c9:00:c0:66:e0:98:ab:a7:1e:5f:71:14:
6f:92:f3:8d:16:ff:25:68:c0:b7:e7:28:86:18:07:ee:b9:8f:
c7:7c:14:95:d9:f7:9f:fa:20:a3:f0:ec:ef:22:d2:83:2e:8c:
a1:9f:93:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:48 2026 by rpki-client