
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
File: F38DFF094E16843854EAC1403C69FD7F77809D02.mft (raw, json)
Hash identifier: pxeIJBHxzLJqlNuDHQDKYS+nazde3al9k3Rl8RPA60U=
Subject key identifier: 2A:E4:2E:95:35:1D:07:95:D7:9C:F6:22:54:A2:C8:C4:62:56:75:40
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial: 0D17AA10A854FC86990219E88FFCA53974D472B4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
Manifest number: 0588
Signing time: Wed 15 Apr 2026 14:31:49 +0000
Manifest this update: Wed 15 Apr 2026 14:26:49 +0000
Manifest next update: Sat 18 Apr 2026 21:10:49 +0000
Files and hashes: 1: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: hceiRn1k+oO/x+5WpC4OSWhZbFgi/4V0uwvwpTc+nOA=)
2: F38DFF094E16843854EAC1403C69FD7F77809D02.crl (hash: BFfeDCyc4LBLdWkrcqo4RWc7BFT2qfGKl5nUBMZN8uA=)
3: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: OK+88Ri2S1j7t5uyTgwV5tm/HaBgeRc4OL38vU7TJFc=)
4: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: h8u7SrJg5ku6Yo95VNwdkXmyCuJqQtraeAvM3Te6q9c=)
5: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: HilnfBfyMvNFPQVFJ8bMdWO7V80Cp99wsDpOjOBytPM=)
6: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: pTD6ntCSNPwtG4NHQ69qWa7mmsEOdj99qhIPIzZeDUQ=)
7: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: nP5ghc/w9D/B5ENDC9cSkfzoaC33TZbwzsOf4OkDm5Q=)
8: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: +ULriNL1i1nU37Wxup/0FyWzsRtKq1c09nU9dI4qvF4=)
9: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: +0TglIi2p7jwKSstfwGK7HxpA9aZK4fp6xgZ4tfuSJ0=)
10: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: 5smgeJbhaO6g1/D8vxJXxrAUN8TIT7sSh2lLWbL38WY=)
11: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: ivkwwboxp97krml3NHZ+/mc1/AhS1A0qIb6B1JYBu0M=)
12: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: flGSxQD++NqarnKtTxSlBovOQhcEWH2Yg3wz5JBQPvM=)
13: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: wK8oxn2N67S1lQBDAIk3IqEYA0FuTaT4t8uoS7Qxu2Y=)
14: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: yp7YYUGfEi7m0LLSnf3xhw/IgYSZYGNpCN1qo/q9Vug=)
15: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: 9c49vJ806rinKU2yZDXFYCFMBIoAnvTzCxv8zv5wDgg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 21:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:17:aa:10:a8:54:fc:86:99:02:19:e8:8f:fc:a5:39:74:d4:72:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Validity
Not Before: Apr 15 14:26:49 2026 GMT
Not After : Apr 18 21:10:49 2026 GMT
Subject: CN=2AE42E95351D0795D79CF62254A2C8C462567540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:d6:a3:ab:58:8f:56:07:1a:03:ee:b5:22:
76:4e:cb:7e:fc:3f:b6:6c:a3:30:50:45:8d:b7:b6:
f8:8e:10:89:49:3b:be:ae:c0:08:93:0d:54:3d:48:
76:0b:3b:02:83:1e:07:9f:7f:d1:dd:3f:83:6f:aa:
c7:7a:a4:cc:4d:25:56:f6:97:b1:d9:8e:07:15:a1:
0a:34:78:aa:ce:a7:44:84:1d:3f:6f:60:3b:8d:f9:
fa:30:93:87:0e:61:a1:2d:84:fe:35:15:30:99:87:
75:a1:4e:6c:21:05:ae:23:68:26:e6:33:cc:dc:7a:
1a:57:e1:4f:e0:15:d5:bc:db:8d:eb:5c:3b:c3:a5:
fe:60:82:c9:ae:a7:1c:58:68:0c:ce:07:9f:04:ee:
8c:2d:33:e6:17:59:5f:71:cc:3e:e9:3d:e2:ed:c2:
c7:23:4f:31:aa:20:fd:24:c5:7d:8a:83:c2:29:b9:
b3:ea:62:0b:64:f1:c8:bc:13:d0:4f:c7:17:2d:4e:
a0:02:e4:04:02:a2:db:76:e9:46:46:e5:10:51:7e:
e8:e5:ca:e5:cc:30:55:c2:a5:fd:a6:a4:df:bd:fc:
c1:cf:e2:77:8d:54:71:8e:27:5f:80:45:2d:51:c5:
d5:ff:36:7c:47:05:80:80:a3:71:4a:b7:52:5a:38:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E4:2E:95:35:1D:07:95:D7:9C:F6:22:54:A2:C8:C4:62:56:75:40
X509v3 Authority Key Identifier:
keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a5:55:7e:2e:32:23:d3:19:9e:19:4e:a1:99:6e:80:9e:f2:
90:58:a9:d1:d5:85:c0:bb:61:90:c8:89:89:8e:0b:b7:e3:db:
98:4b:9b:e2:9b:56:fe:25:2b:ab:42:1b:df:62:fc:4a:94:1d:
27:e1:00:7a:71:72:36:a9:c4:c2:4d:b5:31:1c:f0:df:e5:66:
58:7f:98:c5:c0:a0:e8:a2:76:ac:18:cb:54:48:20:60:bb:b6:
f3:eb:88:1e:06:e7:e4:69:fd:4f:6c:c9:cd:a9:cf:62:7f:48:
2b:0e:cb:57:24:3a:64:cf:df:3b:8f:80:ad:b6:4d:cb:19:a7:
37:2d:5e:75:1a:0d:bb:87:b5:46:69:35:ed:e7:1a:1d:05:61:
f7:41:e6:55:ea:43:ed:67:b3:70:cf:72:e7:68:17:f1:08:44:
a0:38:5d:ab:e7:c5:00:10:59:8b:3c:38:4d:a2:b8:75:bc:40:
09:b3:48:4a:84:be:08:be:67:8f:b8:8d:49:b7:b9:a8:99:63:
8c:5e:06:16:d2:de:64:84:13:81:17:e7:53:0c:e4:a3:c9:6e:
d6:9a:7c:7f:4f:6f:a9:58:c6:f2:72:12:70:11:d3:c8:b0:f0:
2b:d1:a8:b2:ed:a2:49:fe:fa:55:ef:9b:bf:51:5b:e4:24:1d:
8e:b9:43:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:27:35 2026 by rpki-client