
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
File: 735D87BA86773AC70137CF53116358A1F3B19766.mft (raw, json)
Hash identifier: 9ARhvGO0nwP5nNo9MIb+7MaR+4zJ9ICbutRGPIiz8uQ=
Subject key identifier: 8F:38:91:A1:D5:87:B0:4E:91:58:A8:3A:BF:2D:0F:4D:C0:89:25:24
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Certificate issuer: /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial: 07F2531ED4B6F7924ED7A89C3F0949B91A5BA5A6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
Manifest number: 0250
Signing time: Mon 03 Nov 2025 03:42:05 +0000
Manifest this update: Mon 03 Nov 2025 03:37:05 +0000
Manifest next update: Thu 06 Nov 2025 04:35:05 +0000
Files and hashes: 1: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (hash: Vj9b7eOBgij03V9LOKkEMCElDrFIB3RU0Drnp1lzskU=)
2: 3130332e3233342e3132302e302f32322d3234203d3e203138303034.roa (hash: MNca57frzbraXQ+A5sffHCuXC7kbkp16cgNgxDCrZrE=)
3: 323430373a613630303a3a2f33322d3338203d3e203138303034.roa (hash: SoFui+6+9U4okutKDEEDEO8cNoDM72pJozwIgVHrak0=)
4: 3131352e3137382e3232342e302f31392d3234203d3e203138303034.roa (hash: cuW15q9SnbE27U2Jg8nnNYvxOwHbFyEv1g42R3Sx4E0=)
5: 735D87BA86773AC70137CF53116358A1F3B19766.crl (hash: CpaV7G626Orv5mU5tHiCSHMutnQk/d80BInc49niep4=)
6: 3131342e37392e302e302f31382d3234203d3e203138303034.roa (hash: hML4QQ0UsZ/MNuzlhXm7ZxAfBsEoo8p/TG6zTdeHPYA=)
7: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (hash: MYkgPF54ZFrZUvgyAUVZduFZA6VqGujX+c3smzb0mEg=)
8: 3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (hash: bNf7w52cmLw3GYp+mMaw3papmg1ZcgmFTgd1v4VSUIU=)
9: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (hash: cA/F4dRQqVseyocCpcE2agAw/XVimr3HwwnooMdskYo=)
10: 3130332e332e3230382e302f32322d3234203d3e203138303034.roa (hash: ixUeVPdiiujjqdz2cxBs4b9W1yytwj3hYRmTEjubFdc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 04:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f2:53:1e:d4:b6:f7:92:4e:d7:a8:9c:3f:09:49:b9:1a:5b:a5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
Validity
Not Before: Nov 3 03:37:05 2025 GMT
Not After : Nov 6 04:35:05 2025 GMT
Subject: CN=8F3891A1D587B04E9158A83ABF2D0F4DC0892524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:14:ca:b5:5c:07:e8:7e:3e:7b:00:97:d7:
6d:1f:1b:5c:c9:b7:bf:27:56:e7:8d:5c:ed:97:cf:
c5:1e:93:81:3d:d8:93:a8:c1:4c:14:54:18:36:7d:
bd:eb:75:58:87:0b:a3:c2:00:28:b5:55:e0:94:6c:
af:e4:14:5b:8e:24:75:04:91:43:de:d2:a3:d7:5c:
df:00:a6:21:a9:65:42:de:f5:df:3e:be:39:ec:42:
ac:8d:ba:d9:34:2a:f4:33:5d:88:b1:2c:85:bd:0e:
33:96:5a:3b:cd:17:3e:e2:19:75:2e:f0:0e:e2:d4:
bd:9f:92:41:f0:fc:5a:7c:ab:75:14:78:6b:30:84:
26:f0:7a:07:8f:8b:3f:10:ba:e7:0a:63:1b:57:e9:
ad:d2:3b:46:e7:1a:94:a1:4e:85:8a:28:ae:fd:bc:
b7:c4:8e:21:85:9d:01:e6:ef:c1:6b:67:03:f1:4b:
72:78:fb:e3:97:92:28:f2:36:43:01:aa:0e:d1:10:
59:63:7a:1a:a9:be:90:d0:52:14:c8:4d:b0:ba:ce:
23:b2:d6:b3:80:8a:8d:27:e5:1f:4c:57:c2:65:f8:
42:f1:3e:df:3d:eb:02:cc:d7:a1:a0:ec:ca:b2:3f:
34:45:82:aa:df:8d:75:73:67:61:04:9f:48:70:eb:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:38:91:A1:D5:87:B0:4E:91:58:A8:3A:BF:2D:0F:4D:C0:89:25:24
X509v3 Authority Key Identifier:
keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:03:ee:23:10:74:03:32:66:6b:20:98:8e:0d:d2:a2:13:f3:
40:9d:10:3c:7d:65:45:d2:a9:d0:98:2a:e4:ae:6f:30:41:da:
04:32:37:34:0d:6a:e1:a4:5b:dd:a4:a0:af:0d:5c:5f:4d:80:
87:f5:28:27:06:49:39:76:85:df:51:42:27:e7:17:2d:6e:ba:
bf:e0:a0:30:3c:c7:38:81:34:e4:df:a2:f4:68:dc:79:86:7f:
d1:c9:78:02:e8:b9:39:3d:19:08:0d:40:84:d8:25:20:83:a8:
cb:ca:34:91:ed:4b:89:fb:09:6f:c4:30:72:d7:65:3f:2b:08:
9a:5f:6c:87:e9:82:07:78:a6:5b:0d:d2:10:6e:63:0d:cc:8f:
e2:28:0b:c2:f0:41:d9:be:d1:6b:11:a4:b7:ef:dd:0c:fd:79:
d2:ce:ce:be:60:90:f3:d7:f8:63:84:e8:32:7b:35:f4:30:61:
8e:10:ed:ed:e9:8c:12:3e:5b:76:97:99:5d:84:1d:27:13:eb:
5a:37:36:df:4d:23:6a:6c:e5:45:51:bb:ce:47:c6:e5:58:56:
9b:26:c3:75:65:0c:48:cd:cb:9a:2d:3d:b6:e0:32:32:05:aa:
48:16:d8:cf:ed:6b:38:e9:74:56:a0:f2:c9:55:47:93:77:f2:
f0:ca:23:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:03:43 2025 by rpki-client