
$ rpki-client -vvf repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
File: ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft (raw, json)
Hash identifier: HUA89jRjIwH7s7EuG62mVndwzXapLf76PpfJ38Et53E=
Subject key identifier: 54:7B:C8:1E:5F:84:CD:A2:79:5C:10:0B:B8:73:70:2B:C1:B4:15:8F
Authority key identifier: AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3
Certificate issuer: /CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
Certificate serial: 62FF1770954E8C0B66F0B8BAA2D5B96B30921648
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
Manifest number: 0235
Signing time: Sat 28 Feb 2026 13:50:05 +0000
Manifest this update: Sat 28 Feb 2026 13:45:05 +0000
Manifest next update: Tue 03 Mar 2026 14:10:05 +0000
Files and hashes: 1: 3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (hash: 874x7Ob+P1gnAjnP1blHxACfVuuuGxnGAVUEWJIVT2g=)
2: ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl (hash: dijcZjV6/ZV/NzUGG92xc0tot6sZIGh3t8wNg6Ad5Xo=)
3: 3130332e3139312e3235352e302f32342d3234203d3e20313439393433.roa (hash: 0MTgOgopjubbvpZEDfvpwMMJjT0ePI0/y4zgrFp+eQo=)
4: 3130332e3139312e3235342e302f32342d3234203d3e20313439393433.roa (hash: OjZssXYKrVMWzUnHRz7s+7gvCsjaEtAJXH0INXsIRL8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl
rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 14:10:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ff:17:70:95:4e:8c:0b:66:f0:b8:ba:a2:d5:b9:6b:30:92:16:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
Validity
Not Before: Feb 28 13:45:05 2026 GMT
Not After : Mar 3 14:10:05 2026 GMT
Subject: CN=547BC81E5F84CDA2795C100BB873702BC1B4158F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a8:1b:11:f3:95:e8:ca:1f:f6:31:cc:ab:66:
62:66:ed:c6:9c:bd:96:06:bb:84:7e:94:72:f3:ed:
13:2e:52:46:42:ce:6a:44:40:9a:d4:9c:17:43:67:
8e:c9:99:2e:c3:2c:89:5b:63:1e:1a:32:f8:a1:5d:
3b:fe:12:64:af:b4:ef:62:9b:fb:e2:23:34:a5:d3:
15:dc:7c:e6:c7:d3:c4:d5:36:ce:bf:9d:50:6c:97:
2e:a0:6c:d8:64:7f:f5:44:10:8a:c5:10:f3:ec:91:
9f:0f:67:c6:bd:51:16:7c:93:59:c2:14:5c:8a:ce:
d2:be:b2:10:75:5b:a7:7a:4b:6a:24:58:89:0e:f3:
be:ba:73:6e:24:1d:74:6e:74:4b:44:9d:1f:47:50:
73:4c:4e:4d:f4:c1:21:8c:ac:c5:95:c4:27:0b:06:
f8:0b:2e:b3:f9:db:be:61:ec:f2:1c:7f:6c:cd:40:
b4:4f:24:4a:92:bd:4f:c7:d1:db:26:de:da:85:a3:
37:98:3c:3d:1f:30:1a:ee:27:a4:33:f2:2c:12:0f:
52:eb:da:b2:73:59:90:3c:d5:68:6f:e9:93:4d:78:
77:55:a0:12:84:21:52:f7:fa:5a:d9:8e:ba:ef:ab:
c4:85:32:3c:62:00:84:57:6f:2f:a4:3f:ab:97:64:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7B:C8:1E:5F:84:CD:A2:79:5C:10:0B:B8:73:70:2B:C1:B4:15:8F
X509v3 Authority Key Identifier:
keyid:AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:54:85:9f:ed:64:c6:1a:39:f4:f1:22:c4:a0:b4:2e:16:ac:
a8:4b:11:5b:53:26:09:85:57:d5:ad:3a:90:9c:4d:09:53:15:
a3:91:23:49:cb:78:a2:c4:79:6e:69:9e:a1:cd:37:cd:ba:d0:
43:d6:3b:0d:75:9b:cb:27:81:7b:cc:43:6f:f9:c5:db:35:4c:
c7:da:b0:ba:73:e5:e8:2f:b1:e0:af:b5:5d:2b:5c:25:f0:61:
4e:77:c2:74:09:db:22:23:e4:a4:b0:f1:15:e1:af:77:62:09:
66:6a:3d:7d:7f:50:c8:3b:2e:9e:b1:86:86:93:7f:20:3c:69:
99:ab:d9:9e:aa:e8:23:7b:f0:97:8c:84:01:ea:4e:95:0b:1c:
14:51:6c:63:81:ef:1e:48:b2:d4:df:d9:6d:0f:6f:57:e5:77:
35:d4:cf:f3:80:d0:e5:eb:92:be:b7:68:e2:b7:c2:97:7a:d9:
d9:a0:af:34:e5:e0:e2:e2:ef:18:38:2f:7f:a1:21:77:59:c8:
64:f3:7b:86:02:6b:2e:02:50:72:04:d7:d9:e7:1e:b7:de:94:
f6:0c:26:e2:19:74:41:2d:5d:79:75:68:ec:6d:15:99:ca:17:
61:65:d5:c7:0a:12:54:d5:33:d4:b7:98:ee:80:b5:09:4b:f8:
27:d1:6a:ea
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYv8XcJVOjAtm8Li6otW5azCSFkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0RUVF
MDY2RUZGMzAeFw0yNjAyMjgxMzQ1MDVaFw0yNjAzMDMxNDEwMDVaMDMxMTAvBgNV
BAMTKDU0N0JDODFFNUY4NENEQTI3OTVDMTAwQkI4NzM3MDJCQzFCNDE1OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhqBsR85Xoyh/2McyrZmJm7cac
vZYGu4R+lHLz7RMuUkZCzmpEQJrUnBdDZ47JmS7DLIlbYx4aMvihXTv+EmSvtO9i
m/viIzSl0xXcfObH08TVNs6/nVBsly6gbNhkf/VEEIrFEPPskZ8PZ8a9URZ8k1nC
FFyKztK+shB1W6d6S2okWIkO8766c24kHXRudEtEnR9HUHNMTk30wSGMrMWVxCcL
BvgLLrP5275h7PIcf2zNQLRPJEqSvU/H0dsm3tqFozeYPD0fMBruJ6Qz8iwSD1Lr
2rJzWZA81Whv6ZNNeHdVoBKEIVL3+lrZjrrvq8SFMjxiAIRXby+kP6uXZB7FAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVHvIHl+EzaJ5XBALuHNwK8G0FY8wHwYDVR0j
BBgwFoAUreDUYkhZpNZC2MB/0Ae07uBm7/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MDk4ZjkyNC05ZjJlLTQ5OWItODEwMS0wMmY3NTA2OTMyYmYvMC9BREUwRDQ2MjQ4
NTlBNEQ2NDJEOEMwN0ZEMDA3QjRFRUUwNjZFRkYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0RUVFMDY2
RUZGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA5OGY5MjQtOWYyZS00OTliLTgx
MDEtMDJmNzUwNjkzMmJmLzAvQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0
RUVFMDY2RUZGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFZUhZ/tZMYaOfTxIsSgtC4WrKhLEVtTJgmF
V9WtOpCcTQlTFaORI0nLeKLEeW5pnqHNN8260EPWOw11m8sngXvMQ2/5xds1TMfa
sLpz5egvseCvtV0rXCXwYU53wnQJ2yIj5KSw8RXhr3diCWZqPX1/UMg7Lp6xhoaT
fyA8aZmr2Z6q6CN78JeMhAHqTpULHBRRbGOB7x5IstTf2W0Pb1fldzXUz/OA0OXr
kr63aOK3wpd62dmgrzTl4OLi7xg4L3+hIXdZyGTze4YCay4CUHIE19nnHrfelPYM
JuIZdEEtXXl1aOxtFZnKF2Fl1ccKElTVM9S3mO6AtQlL+CfRauo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:19 2026 by rpki-client