
$ rpki-client -vvf repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft
File: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft (raw, json)
Hash identifier: Z2dZcK5AYsiXfg56ICSfkf9+SE+gZhq8SPxmsutvaTw=
Subject key identifier: 44:6D:68:94:9E:65:E7:2D:BB:D4:A0:20:B1:6B:90:E6:B0:3D:4C:12
Authority key identifier: F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D
Certificate issuer: /CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D
Certificate serial: 7638ABD4EF63543A71181838B1D2C13B7657EAEB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft
Manifest number: 01C7
Signing time: Sat 28 Feb 2026 03:22:18 +0000
Manifest this update: Sat 28 Feb 2026 03:17:18 +0000
Manifest next update: Tue 03 Mar 2026 10:50:18 +0000
Files and hashes: 1: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: CjoIHvi7yqXvHMVwjtTCYFagfhfgPFy7R0tpEnYKeXM=)
2: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl (hash: lk5YVyxtBEjVcVv7ePJAl9+Je8pNfX9fvMklWfY9rvA=)
3: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: pEHLezsTnYguADx1cbYPTZbHF6Ez4ndRML5zjv7PktU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl
rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 10:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:38:ab:d4:ef:63:54:3a:71:18:18:38:b1:d2:c1:3b:76:57:ea:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D
Validity
Not Before: Feb 28 03:17:18 2026 GMT
Not After : Mar 3 10:50:18 2026 GMT
Subject: CN=446D68949E65E72DBBD4A020B16B90E6B03D4C12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:99:15:9f:42:80:9a:5c:6f:f5:da:f3:6f:6f:
8a:8a:52:8c:4a:f3:17:aa:e4:2d:a5:2e:ed:8c:10:
b0:3b:ae:2d:a3:8e:ec:2a:c1:31:54:35:02:c8:56:
c2:17:38:d7:1e:a9:fb:de:31:4c:26:5c:70:98:c1:
cc:20:3c:24:27:aa:f1:56:0a:cf:a3:f7:50:8c:cf:
7a:18:3d:31:5e:99:40:0e:41:d9:8b:ab:64:1b:0e:
12:7d:ea:0f:ec:e2:06:f4:d9:66:05:94:36:90:74:
65:8d:7f:03:7a:37:47:60:0f:fa:1b:f8:88:e6:15:
5b:5b:82:6a:ce:8c:67:a1:21:0b:34:43:30:7e:60:
21:32:de:cb:6a:de:ed:0d:aa:4a:16:b8:5a:42:90:
b1:4c:90:3d:b2:6d:60:f3:2a:3f:6f:23:4a:ce:69:
a5:83:a6:d4:81:ee:24:95:96:b6:11:3a:83:5f:bc:
1e:de:06:b4:a7:d8:70:0d:5b:d5:05:2d:7c:a9:1b:
19:e5:73:0b:bf:06:03:1c:36:da:2a:91:0f:2f:0d:
f9:28:f0:4f:e4:39:37:4c:cb:f3:5e:d4:a5:4a:5f:
20:e5:91:7d:06:40:f6:3d:c5:5d:a2:6b:53:21:f0:
cc:4a:47:f3:26:49:cb:d2:3c:7b:7b:e2:f6:e0:b7:
8e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6D:68:94:9E:65:E7:2D:BB:D4:A0:20:B1:6B:90:E6:B0:3D:4C:12
X509v3 Authority Key Identifier:
keyid:F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e3:a6:e5:65:bb:0c:32:c7:68:11:19:68:b7:48:7b:69:f3:
24:90:10:54:86:e5:19:ed:c6:83:f5:81:19:12:2c:6a:db:a5:
d9:4c:a3:8c:bd:d6:13:23:b7:2b:6d:13:66:cb:b9:62:94:ac:
ae:e9:4e:5a:c6:cc:42:24:92:2c:58:bf:08:38:6b:c9:6b:33:
66:a5:51:04:29:cd:60:ee:8f:07:40:a6:16:e6:38:41:b0:23:
a7:7e:b5:e0:db:67:56:9c:21:72:39:39:eb:7e:c3:09:f8:2f:
3b:3c:99:15:3c:14:a6:4c:a9:88:8a:4d:d4:b4:59:2c:b2:58:
21:ec:80:3f:9f:ec:c0:39:53:56:f8:cf:f7:5e:6c:2e:1d:a0:
30:d6:c5:4c:53:36:4f:c3:89:f2:ab:9b:37:d5:98:3a:93:72:
26:41:0f:f9:cf:c5:89:20:cc:8f:f3:79:fb:b1:ab:04:2a:c6:
0b:50:cf:a9:ac:23:af:9e:11:bb:1e:a0:f0:a9:9a:56:48:4f:
eb:89:e6:06:ea:2a:dd:58:14:76:43:b3:c8:fb:04:8b:04:5e:
bf:ca:d9:1f:d4:89:2c:8c:4f:06:72:63:2d:86:ff:a9:0a:b7:
68:c3:46:79:16:5a:43:6d:6f:8a:09:9c:6f:89:ff:b5:fd:d4:
b8:94:23:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:17 2026 by rpki-client