
$ rpki-client -vvf repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
File: 722FE79638E6D14E4794815122247CBEC27B8505.mft (raw, json)
Hash identifier: xCpXmoKBLVJKhhyJqlXb6kHz0lDnH93oqZC1x6D9R78=
Subject key identifier: 3C:3A:14:40:2D:A5:CC:24:BE:F8:36:0A:C2:4C:46:A0:FD:BD:40:15
Authority key identifier: 72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
Certificate issuer: /CN=722FE79638E6D14E4794815122247CBEC27B8505
Certificate serial: 5C1F779619FD36CE3A14D89BD29955DEF8F4FD91
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
Manifest number: 0409
Signing time: Mon 02 Mar 2026 12:20:49 +0000
Manifest this update: Mon 02 Mar 2026 12:15:49 +0000
Manifest next update: Thu 05 Mar 2026 21:06:49 +0000
Files and hashes: 1: 3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (hash: sCzn25/m0je6VeQbbVeLyb+BPsHQc3CBvZyRKt6D7A8=)
2: 3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa (hash: gxjALHEbHW92GdGOTxNMADVK9qRHCqtwF9yiaiRIXlQ=)
3: 722FE79638E6D14E4794815122247CBEC27B8505.crl (hash: P/7F6TCRTS+IFgvQBlhQOXufHf0KHy36ZIGGkS5jji4=)
4: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (hash: LCaSxIc71iZBDh0yi4LjrBXL1wqAIM0xU5o5V+eH4Rg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl
rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:1f:77:96:19:fd:36:ce:3a:14:d8:9b:d2:99:55:de:f8:f4:fd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722FE79638E6D14E4794815122247CBEC27B8505
Validity
Not Before: Mar 2 12:15:49 2026 GMT
Not After : Mar 5 21:06:49 2026 GMT
Subject: CN=3C3A14402DA5CC24BEF8360AC24C46A0FDBD4015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0b:47:3f:5b:c9:11:fc:bb:e4:de:d5:5f:f6:
d0:1e:26:67:56:d1:8d:91:9a:72:1c:c0:e1:f8:7c:
2f:b5:16:5b:b3:f2:c9:8f:3a:1e:d8:b6:61:be:59:
0a:45:5a:e8:25:71:b5:1f:61:04:30:e1:0b:80:64:
a1:6b:0c:94:90:65:da:23:56:d9:94:6a:54:f1:49:
1b:c2:11:7d:e6:fa:cf:cc:6c:30:bd:8b:36:70:7c:
6a:ab:88:39:40:fe:17:a6:50:6b:4c:3c:4b:f6:ce:
a5:41:bb:70:d1:70:fc:67:c2:dd:7f:f8:12:1c:c4:
0a:e4:54:a9:60:86:d9:bf:32:a1:ea:29:4c:6e:62:
f2:2c:95:9f:37:99:a3:86:87:10:41:d8:f1:ce:93:
d8:cf:99:e6:08:28:fb:4a:2c:f9:a5:e8:f6:36:04:
16:11:95:ce:ea:62:3e:a7:56:2b:1d:8c:9c:72:b5:
86:37:a0:c3:bb:40:df:e4:a1:79:96:37:12:dc:4e:
f4:92:97:a0:06:0a:a3:ba:eb:96:67:ff:ea:2f:a2:
8d:6e:a9:82:34:00:1e:69:b3:e7:51:68:b8:28:68:
81:5e:55:76:93:28:df:c5:2d:05:aa:09:0d:15:fc:
7c:2a:27:17:7b:26:5b:4b:94:e2:08:ab:de:51:c5:
9b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3A:14:40:2D:A5:CC:24:BE:F8:36:0A:C2:4C:46:A0:FD:BD:40:15
X509v3 Authority Key Identifier:
keyid:72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:83:d3:61:1a:99:d3:4d:a9:dd:49:49:e4:32:4d:98:7f:c9:
0f:8e:06:19:13:a7:d5:c9:27:7a:b0:cd:4c:44:8e:43:ec:52:
4e:44:b5:3e:68:7c:72:e4:d3:eb:5f:63:16:8a:ac:05:71:aa:
50:f0:91:20:6f:fd:3f:6a:74:14:9f:e4:e6:12:b1:d2:23:4a:
80:d4:c4:bb:31:cc:fb:43:3f:21:c4:10:70:92:35:38:f7:97:
c5:ba:04:69:fb:72:8f:2c:74:40:22:70:a7:6f:5d:04:52:a7:
07:cc:a4:20:e8:30:22:13:fb:65:97:35:95:8f:94:8a:7b:2b:
d3:8b:e4:c3:5b:be:0a:ac:13:19:92:30:4b:60:29:6b:d7:ee:
ef:ac:41:bd:94:42:00:20:b5:f0:44:e6:fb:96:e8:c9:c8:ec:
76:0f:48:4d:46:3c:de:49:07:b6:73:81:c2:33:a9:d5:4f:e3:
ab:e8:55:eb:57:c8:02:5c:de:77:da:77:7c:43:e1:7f:f3:1c:
48:24:b3:ee:3e:32:ed:c6:80:97:f9:18:d3:24:2d:5a:3f:90:
9f:a1:4f:9e:35:be:14:39:54:7d:61:b3:3c:33:da:22:02:94:
10:b1:22:77:15:7c:22:eb:a4:e6:5e:52:8c:d6:a7:52:dc:f6:
50:f0:15:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:31:36 2026 by rpki-client