
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft
File: AD5F121BCE742FD0358AE347D984F209BC381871.mft (raw, json)
Hash identifier: FDY1M1sQVmTkQ9VKOoTb25WznBKHczym7dmc9vBFMv8=
Subject key identifier: 42:F8:E5:2A:43:DD:7E:AC:27:AF:41:E0:65:8A:BC:7D:30:30:5D:18
Authority key identifier: AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71
Certificate issuer: /CN=AD5F121BCE742FD0358AE347D984F209BC381871
Certificate serial: 08FD23A009338DBFAF5A01D04A1F4817999BAB9F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft
Manifest number: 036E
Signing time: Thu 16 Apr 2026 02:11:39 +0000
Manifest this update: Thu 16 Apr 2026 02:06:39 +0000
Manifest next update: Sun 19 Apr 2026 11:35:39 +0000
Files and hashes: 1: AD5F121BCE742FD0358AE347D984F209BC381871.crl (hash: rtUh4Zz7ra0MdN4q2bT678y0GsiLtFb3w6o043KPP20=)
2: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: RMi8wIknD/gpfFnF26an+gZf/7MdAT/Qz50WllzD+8A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl
rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 11:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:fd:23:a0:09:33:8d:bf:af:5a:01:d0:4a:1f:48:17:99:9b:ab:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD5F121BCE742FD0358AE347D984F209BC381871
Validity
Not Before: Apr 16 02:06:39 2026 GMT
Not After : Apr 19 11:35:39 2026 GMT
Subject: CN=42F8E52A43DD7EAC27AF41E0658ABC7D30305D18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1c:ca:51:e9:66:1a:da:14:0a:03:51:46:32:
fe:63:d2:49:2d:26:e8:0e:20:ee:eb:4e:d3:eb:38:
9a:f8:7e:f3:0f:e6:33:6c:b8:23:3b:86:20:df:ef:
19:54:32:99:47:9b:87:cc:f8:40:57:04:fb:d9:06:
fa:2f:35:9b:2e:f3:e2:dc:4c:7b:41:8d:46:e1:78:
9e:0d:b7:65:7b:9a:e1:49:45:8e:45:03:a5:96:99:
c1:7a:b7:79:e9:49:70:09:ce:a6:cd:8f:90:c0:f0:
69:5b:0f:20:56:57:cb:ad:6e:56:8f:76:23:ff:11:
3a:66:88:ec:7a:22:c2:71:a3:48:38:fd:3a:88:59:
9d:e0:76:a1:4d:8c:07:16:2e:b8:67:09:38:32:d6:
07:4f:0d:aa:87:c1:e1:d1:ae:77:23:eb:35:ca:0c:
45:50:4c:35:4e:6c:a0:2b:36:df:38:44:5f:0e:e5:
97:4d:11:4c:13:4d:9c:0b:c8:4f:b4:55:91:d3:93:
ac:3a:0e:8c:d5:e4:f5:fc:be:45:b5:35:62:8a:6c:
e0:ba:2a:d9:90:b0:c0:34:99:74:b0:19:41:c7:e2:
91:93:08:b5:a4:e4:a4:4c:c4:ba:f6:83:d0:40:5b:
2f:e2:03:78:ea:9e:c6:e6:c4:30:02:07:16:85:5b:
70:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F8:E5:2A:43:DD:7E:AC:27:AF:41:E0:65:8A:BC:7D:30:30:5D:18
X509v3 Authority Key Identifier:
keyid:AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:33:03:a6:a2:e8:4d:25:c6:91:83:f2:f5:68:71:db:43:83:
1b:1b:1f:e9:97:6d:a9:63:62:2b:7b:da:ec:56:17:64:6a:52:
38:65:a2:23:30:11:01:e3:1b:61:28:18:94:4b:66:a1:21:e5:
b9:db:2c:dc:3d:92:c0:98:d3:f3:bc:a7:91:ab:6a:f4:c2:57:
80:5a:82:95:7f:46:bc:83:0e:89:e0:9f:fc:ac:2a:26:84:89:
e8:e5:3d:8e:fe:4a:20:6a:5e:40:e4:64:18:dc:fb:4d:78:bb:
2d:7f:e2:66:35:47:15:9a:be:ce:09:78:ac:c2:8d:de:e2:75:
3f:12:cb:ea:36:30:60:37:48:f8:ff:44:2b:8c:d5:b6:d5:43:
67:a3:0d:39:ec:cc:7a:1b:8a:f1:7d:dc:29:0a:a0:05:cd:49:
53:9b:98:1d:92:89:1a:c3:d9:d0:13:3b:fc:59:1b:f9:27:e8:
f4:e5:01:2d:04:d1:08:20:e6:04:66:75:4c:51:20:39:03:c9:
e2:e6:c0:07:c5:68:6e:0d:7a:fa:69:e2:a3:0b:5b:f9:52:97:
fd:b8:e5:ac:3e:b9:c4:8d:3d:4f:75:32:3a:64:09:33:bb:fc:
ac:1c:50:a5:bf:1f:66:92:90:ab:34:d0:09:1e:3e:db:2d:c8:
a8:48:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:46:39 2026 by rpki-client