
$ rpki-client -vvf repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
File: A575236C1BE8E700EF4D54FB243030C7256654C6.mft (raw, json)
Hash identifier: X54b2zG3ZK3nFqyIwlehcZOdMmtKml4OpW6pTXazFJg=
Subject key identifier: F3:9D:8D:67:BA:AE:9D:C0:FC:98:B5:15:70:61:44:15:5E:87:AE:D9
Authority key identifier: A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6
Certificate issuer: /CN=A575236C1BE8E700EF4D54FB243030C7256654C6
Certificate serial: 2B24B4945E1229FEC282B81CBD8177BEBEA3966A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
Manifest number: 0138
Signing time: Sat 28 Feb 2026 18:11:27 +0000
Manifest this update: Sat 28 Feb 2026 18:06:27 +0000
Manifest next update: Wed 04 Mar 2026 02:14:27 +0000
Files and hashes: 1: A575236C1BE8E700EF4D54FB243030C7256654C6.crl (hash: +VhN5gkz5aHQwSbjxEvC3juVBfyDhAZCGRUkCVqnGek=)
2: 3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (hash: ZIzUt+4j3ybpxiWs7Q5/MtmcKRN4EENpYpP86/UWwr0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl
rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:24:b4:94:5e:12:29:fe:c2:82:b8:1c:bd:81:77:be:be:a3:96:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A575236C1BE8E700EF4D54FB243030C7256654C6
Validity
Not Before: Feb 28 18:06:27 2026 GMT
Not After : Mar 4 02:14:27 2026 GMT
Subject: CN=F39D8D67BAAE9DC0FC98B515706144155E87AED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:1e:85:3e:81:dd:9f:f2:77:f7:72:1c:44:
4e:cb:98:08:3c:09:88:0e:4b:c4:76:b6:5a:ac:2e:
89:13:f9:c2:80:bf:0b:96:ab:df:2b:50:93:c2:61:
f6:c1:b7:65:91:74:6e:c0:52:8c:f9:ab:45:69:79:
c8:c1:3e:4e:c7:69:e9:d7:8c:ba:d2:08:38:80:ce:
eb:f0:35:32:d4:2b:fe:4a:20:d9:02:cf:3e:4b:80:
ce:e8:4a:93:0c:6f:a8:75:2c:70:26:c7:2c:cb:93:
43:e5:23:5c:f3:66:c4:70:a1:cf:dc:f3:04:c9:ce:
b6:1e:d9:37:ce:75:17:91:eb:aa:c6:6d:71:fa:b3:
78:0d:e4:e9:fc:a4:22:0a:7a:16:3d:ee:31:4d:1c:
fb:78:3a:97:e0:c2:11:de:bb:d9:22:9c:32:e7:19:
61:ae:a5:d8:2c:95:75:1d:90:af:31:d6:b5:3f:b9:
fa:4a:bb:1c:84:f0:c5:cf:92:85:32:4a:d4:de:8c:
bb:96:10:e5:96:49:8a:7b:76:fd:43:32:ff:c2:8b:
a0:c4:a9:50:b3:e2:ef:4a:3e:4a:e6:86:25:5f:37:
e2:34:2a:bd:c2:0c:9d:61:a2:25:45:5f:00:a2:67:
57:9e:40:0d:d7:ad:4f:b6:16:fb:99:a5:d5:21:0f:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9D:8D:67:BA:AE:9D:C0:FC:98:B5:15:70:61:44:15:5E:87:AE:D9
X509v3 Authority Key Identifier:
keyid:A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fa:f5:78:70:d7:be:4b:89:69:72:95:58:ca:91:9e:10:8e:
ef:95:23:a9:13:6a:82:a9:1c:22:2f:7f:9a:b9:98:90:66:35:
a6:68:16:d0:53:e1:25:2f:2f:39:e1:42:a1:63:0d:0c:58:7b:
fe:63:ab:7c:ea:8f:9d:f8:78:5b:da:e5:6f:e0:2d:e2:be:08:
07:91:72:53:fd:78:4b:a5:e1:ec:ca:c5:98:63:82:9f:9a:c1:
e1:b5:24:85:f9:88:ad:11:a7:aa:21:bb:79:42:80:93:3d:79:
b1:dd:d6:49:99:36:49:4b:21:0d:72:89:df:de:52:b8:f8:ac:
6b:3e:10:35:06:5c:00:cc:58:ba:dc:6f:c9:37:30:21:40:96:
5c:df:4b:a7:48:2d:7e:fd:ba:1b:d1:f0:da:f4:d6:7b:35:e6:
13:08:58:f1:79:68:13:8b:e0:ac:c0:0d:db:7f:af:30:c6:bd:
86:0f:f9:d4:6d:1a:3d:05:50:4d:69:6b:c3:0a:3b:bc:df:50:
80:6a:ef:be:49:a6:ce:bb:6c:2b:40:68:d5:ae:5d:ec:f3:b3:
ed:fb:15:b2:33:e9:52:9f:c6:93:6b:e6:4b:ec:2a:50:a7:64:
74:45:c7:77:9e:a2:2f:6b:fa:86:f0:85:c5:74:95:7e:dc:92:
64:e9:51:13
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKyS0lF4SKf7CgrgcvYF3vr6jlmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcy
NTY2NTRDNjAeFw0yNjAyMjgxODA2MjdaFw0yNjAzMDQwMjE0MjdaMDMxMTAvBgNV
BAMTKEYzOUQ4RDY3QkFBRTlEQzBGQzk4QjUxNTcwNjE0NDE1NUU4N0FFRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABR6FPoHdn/J393IcRE7LmAg8
CYgOS8R2tlqsLokT+cKAvwuWq98rUJPCYfbBt2WRdG7AUoz5q0VpecjBPk7HaenX
jLrSCDiAzuvwNTLUK/5KINkCzz5LgM7oSpMMb6h1LHAmxyzLk0PlI1zzZsRwoc/c
8wTJzrYe2TfOdReR66rGbXH6s3gN5On8pCIKehY97jFNHPt4OpfgwhHeu9kinDLn
GWGupdgslXUdkK8x1rU/ufpKuxyE8MXPkoUyStTejLuWEOWWSYp7dv1DMv/Ci6DE
qVCz4u9KPkrmhiVfN+I0Kr3CDJ1hoiVFXwCiZ1eeQA3XrU+2FvuZpdUhD3PvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU852NZ7quncD8mLUVcGFEFV6HrtkwHwYDVR0j
BBgwFoAUpXUjbBvo5wDvTVT7JDAwxyVmVMYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDY5YzNlMy03YjU5LTQ0OTAtODRjZi1mZWYxNTg1YWM3NWIvMC9BNTc1MjM2QzFC
RThFNzAwRUY0RDU0RkIyNDMwMzBDNzI1NjY1NEM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcyNTY2
NTRDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ2OWMzZTMtN2I1OS00NDkwLTg0
Y2YtZmVmMTU4NWFjNzViLzAvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMw
QzcyNTY2NTRDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAF369Xhw175LiWlylVjKkZ4Qju+VI6kTaoKp
HCIvf5q5mJBmNaZoFtBT4SUvLznhQqFjDQxYe/5jq3zqj534eFva5W/gLeK+CAeR
clP9eEul4ezKxZhjgp+aweG1JIX5iK0Rp6ohu3lCgJM9ebHd1kmZNklLIQ1yid/e
Urj4rGs+EDUGXADMWLrcb8k3MCFAllzfS6dILX79uhvR8Nr01ns15hMIWPF5aBOL
4KzADdt/rzDGvYYP+dRtGj0FUE1pa8MKO7zfUIBq775Jps67bCtAaNWuXezzs+37
FbIz6VKfxpNr5kvsKlCnZHRFx3eeoi9r+obwhcV0lX7ckmTpURM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:58:13 2026 by rpki-client