
$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
File: 115880D133393FF2D96A5861679B5166AFDB1248.mft (raw, json)
Hash identifier: yzXpmylQZ3UT3fh+2saz9RRuEy9Lm5hypQRCd7x/i+8=
Subject key identifier: 61:85:3A:6D:29:6C:F0:C0:46:56:F1:04:D8:BD:90:54:B0:32:B9:00
Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48
Certificate issuer: /CN=115880D133393FF2D96A5861679B5166AFDB1248
Certificate serial: 28AC8AC210593726B0AA8C87575A41C5A117ACA0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
Manifest number: 01D4
Signing time: Mon 03 Nov 2025 06:02:14 +0000
Manifest this update: Mon 03 Nov 2025 05:57:14 +0000
Manifest next update: Thu 06 Nov 2025 13:55:14 +0000
Files and hashes: 1: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: 1qHo3owsIra2DLunWHCtcR/bz4Z6XiVGZF9DHU6ujCU=)
2: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: mM1uMrTnIIOB9qV95bnMry0CA1H0myomJNfLWIW9li4=)
3: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: ovzcVNQEy/mX6iGBONz7ezsyibr0pRiafYk0E6VSJek=)
4: 115880D133393FF2D96A5861679B5166AFDB1248.crl (hash: 7xLfNfLRihAibc975NJOVGJBKF4w4L3QhnmjsPExrss=)
5: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: PUB3O8b9f0V9upxUQ1vz/Akmef3nw9nhl+zmK2wYTN8=)
6: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: VvBdfRoXJdspZfeWpUDljLmbCHnzMGWW+ov3JCtu9WA=)
7: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: 7cjr2Mf8da23M7780NOwEQz2pNcc6LU8HdKHbP3bqXY=)
8: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: qOgMs8L+7L6hzGSgXrwuDdjZMuQgbmzasXiAjPj9OOI=)
9: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: dsbjoyKjKxL4iwUB8V3WadTuSmVRqe7mRaojqe/cx6g=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl
rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 13:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ac:8a:c2:10:59:37:26:b0:aa:8c:87:57:5a:41:c5:a1:17:ac:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248
Validity
Not Before: Nov 3 05:57:14 2025 GMT
Not After : Nov 6 13:55:14 2025 GMT
Subject: CN=61853A6D296CF0C04656F104D8BD9054B032B900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:8c:35:65:f5:5f:0d:d5:9e:c2:24:7c:36:
a4:55:d3:83:b1:2d:ad:c0:85:8e:41:1e:f1:e0:62:
3b:bf:cd:bd:eb:0e:bd:74:e4:c2:37:95:6d:c8:d6:
8d:fc:e4:64:36:4f:70:69:29:08:64:a8:ba:ca:28:
a4:c5:ad:dc:21:7b:ba:a6:56:0a:2b:5d:d5:ab:21:
c3:2b:bc:65:b8:be:fe:e3:3e:99:4a:5d:da:59:36:
77:d3:b9:74:84:8a:a6:98:eb:33:d7:9e:92:c5:16:
d0:60:e5:a8:52:5d:61:64:c7:47:d6:9c:95:a4:54:
ee:90:10:30:8b:17:6f:bb:59:99:36:f7:60:19:6b:
1a:6a:ce:e0:60:89:d1:69:f6:3c:32:09:7b:88:8f:
0f:68:b7:2b:97:8f:74:da:9f:11:da:27:a9:87:cc:
11:9a:49:47:31:e5:2b:d7:60:40:d3:95:ed:9f:f0:
84:45:ab:32:c6:d6:7b:38:24:3a:3a:17:f6:7e:21:
ae:ae:94:38:da:df:84:b6:da:d7:3c:24:d1:d3:3e:
25:04:1c:77:82:95:19:be:3b:5f:49:3b:22:d4:98:
3e:78:81:85:ac:b2:d1:15:97:74:1e:1c:3b:b2:fd:
a3:b0:14:e4:fa:69:51:95:6a:39:77:12:3b:bc:de:
80:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:85:3A:6D:29:6C:F0:C0:46:56:F1:04:D8:BD:90:54:B0:32:B9:00
X509v3 Authority Key Identifier:
keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b8:53:c5:40:58:39:bb:dd:a2:6e:cd:6c:5c:48:63:34:7d:
53:ed:1e:cd:62:02:0d:c5:fa:81:e9:e0:4d:4e:55:92:61:d0:
b4:0d:3a:9d:5c:45:58:6d:7c:cb:d2:3f:18:32:1c:8d:e0:8b:
98:9d:fb:e5:c6:b5:9f:38:57:fc:e6:3f:88:44:5e:85:97:3a:
a0:75:af:03:df:7b:c1:09:35:00:5f:bc:63:b6:39:a7:a8:df:
23:4b:f5:7e:c4:5e:d0:7a:b9:4c:8a:f6:f6:08:50:8a:24:20:
25:85:6e:25:f9:b9:f8:ee:ec:b0:bb:06:b6:de:11:25:3d:ee:
5f:f5:b6:7f:7d:ec:99:02:fc:17:a0:47:e9:6b:79:79:d5:93:
1c:5b:cf:df:35:0d:18:e3:5f:40:6a:be:97:a0:96:b3:bb:5a:
c2:db:37:d8:ac:94:60:86:ba:40:6a:ea:b0:a6:38:9e:6d:8c:
78:39:6d:b9:07:60:96:25:5a:8d:d6:57:27:57:ae:24:e9:15:
6c:2e:b9:b1:ee:63:1b:ad:be:44:a3:a1:c8:e7:ab:04:37:c2:
db:b0:60:c5:e7:cf:2f:8d:25:08:8f:c4:d5:70:77:54:41:60:
70:41:b9:8f:98:4d:e0:ff:02:6c:73:3b:72:12:8c:45:be:70:
7e:63:8d:7a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKKyKwhBZNyawqoyHV1pBxaEXrKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZB
RkRCMTI0ODAeFw0yNTExMDMwNTU3MTRaFw0yNTExMDYxMzU1MTRaMDMxMTAvBgNV
BAMTKDYxODUzQTZEMjk2Q0YwQzA0NjU2RjEwNEQ4QkQ5MDU0QjAzMkI5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUYw1ZfVfDdWewiR8NqRV04Ox
La3AhY5BHvHgYju/zb3rDr105MI3lW3I1o385GQ2T3BpKQhkqLrKKKTFrdwhe7qm
VgorXdWrIcMrvGW4vv7jPplKXdpZNnfTuXSEiqaY6zPXnpLFFtBg5ahSXWFkx0fW
nJWkVO6QEDCLF2+7WZk292AZaxpqzuBgidFp9jwyCXuIjw9otyuXj3TanxHaJ6mH
zBGaSUcx5SvXYEDTle2f8IRFqzLG1ns4JDo6F/Z+Ia6ulDja34S22tc8JNHTPiUE
HHeClRm+O19JOyLUmD54gYWsstEVl3QeHDuy/aOwFOT6aVGVajl3Eju83oCpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYYU6bSls8MBGVvEE2L2QVLAyuQAwHwYDVR0j
BBgwFoAUEViA0TM5P/LZalhhZ5tRZq/bEkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MTU2ODAxZi1hNjdiLTQzZGQtOGY2Mi1iN2IwZDYwMzE3YWYvMC8xMTU4ODBEMTMz
MzkzRkYyRDk2QTU4NjE2NzlCNTE2NkFGREIxMjQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZBRkRC
MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE1NjgwMWYtYTY3Yi00M2RkLThm
NjItYjdiMGQ2MDMxN2FmLzAvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUx
NjZBRkRCMTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB64U8VAWDm73aJuzWxcSGM0fVPtHs1iAg3F
+oHp4E1OVZJh0LQNOp1cRVhtfMvSPxgyHI3gi5id++XGtZ84V/zmP4hEXoWXOqB1
rwPfe8EJNQBfvGO2Oaeo3yNL9X7EXtB6uUyK9vYIUIokICWFbiX5ufju7LC7Brbe
ESU97l/1tn997JkC/BegR+lreXnVkxxbz981DRjjX0BqvpeglrO7WsLbN9islGCG
ukBq6rCmOJ5tjHg5bbkHYJYlWo3WVydXriTpFWwuubHuYxutvkSjocjnqwQ3wtuw
YMXnzy+NJQiPxNVwd1RBYHBBuY+YTeD/AmxzO3ISjEW+cH5jjXo=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:23:56 2025 by rpki-client