
$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
File: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft (raw, json)
Hash identifier: yqykQNZm1IygZ4hjlxsfvLKsKjKL7GYLXFnlO1D68G0=
Subject key identifier: A7:62:75:AC:D2:9C:BD:0A:DC:24:2B:C8:5E:C4:2A:35:65:8E:09:FA
Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
Certificate issuer: /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Certificate serial: 7015770F966B47F323E48240DC228F37ACDB7F7C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
Manifest number: 0569
Signing time: Thu 16 Apr 2026 21:02:25 +0000
Manifest this update: Thu 16 Apr 2026 20:57:25 +0000
Manifest next update: Mon 20 Apr 2026 08:27:25 +0000
Files and hashes: 1: 389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl (hash: zUFCFNDiZui25+6bzYjfSdk4xlmJaBaRfXBCDt95lZc=)
2: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: ShEOWvu/KCYTTrKo5vrKeCwlexfHyDbC4uTV8yZtzEM=)
3: 3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (hash: LfUE4rPNFz/aR5lxsCZpCHmmGGAgXk5P43w+IeyGgRE=)
4: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: TuOuwC+HTY3+zsq30NoK3C4u4uR9Kt6tuzw+MAyTb4o=)
5: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: wlegEJoNWqrWT2tySFrwLRqLsXDXFl0OFT0Nuvvp7LI=)
6: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: lX37Ym1HtH8/+BNNZ7vVVvmLTRPAVgTV6qXoJU01xNo=)
7: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: nLub1P+aFMPWReFe8FfiX+yqIND5D1X2l5ebLcrAixg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl
rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 08:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:15:77:0f:96:6b:47:f3:23:e4:82:40:dc:22:8f:37:ac:db:7f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Validity
Not Before: Apr 16 20:57:25 2026 GMT
Not After : Apr 20 08:27:25 2026 GMT
Subject: CN=A76275ACD29CBD0ADC242BC85EC42A35658E09FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:97:34:d1:7c:bb:6e:f6:2d:1f:ca:2b:7c:
aa:5a:99:fb:a7:99:83:5d:83:6c:98:aa:30:3c:19:
62:de:1d:4f:42:39:ed:24:51:b0:44:bd:66:68:0d:
e1:6f:c8:b6:7d:19:86:79:eb:aa:88:11:c7:a3:42:
00:e3:91:7a:95:3b:db:ed:30:8b:2e:88:37:9f:71:
01:f0:7c:53:43:df:56:65:a9:8c:fe:c2:2f:dd:4d:
82:27:d1:5f:26:d0:42:c7:d8:38:b3:66:1a:e6:7d:
23:23:c4:74:38:20:9c:eb:af:ec:df:59:e7:25:a1:
3e:33:69:1c:3c:5d:59:2f:83:45:08:fb:a5:e8:0e:
b0:d7:3f:2a:93:83:8e:84:47:30:19:34:6b:91:a5:
2c:62:eb:70:8d:fb:14:08:d1:02:9f:cd:4a:21:68:
ff:b6:a8:b7:c8:fe:2f:16:8d:2f:60:9e:1f:67:11:
15:67:58:40:b4:12:78:2f:7e:59:68:18:dc:0b:ba:
5a:04:f0:1b:54:7f:da:77:06:9f:44:6e:c4:d6:ba:
2a:a6:c7:96:ff:2d:23:a6:c5:80:d6:25:0f:5c:38:
ad:28:cb:5a:f4:44:6e:c4:81:7a:f4:41:22:64:c3:
10:e3:6a:1c:a0:99:e2:13:5c:61:27:b7:d7:85:66:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:62:75:AC:D2:9C:BD:0A:DC:24:2B:C8:5E:C4:2A:35:65:8E:09:FA
X509v3 Authority Key Identifier:
keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f0:f3:8f:75:a0:e7:11:9b:e2:83:53:1b:e0:c4:a2:16:78:
fb:02:f8:7c:ec:ed:08:f1:a8:4d:f5:8a:c5:94:25:3c:95:79:
ae:94:5b:0c:ae:b8:39:08:b5:7a:6f:22:4a:27:10:37:01:4c:
d7:85:11:de:6d:4d:61:41:28:fc:1c:49:4c:e0:fb:d7:e8:04:
34:40:71:7a:72:ac:52:99:b2:b1:82:9f:00:9b:a0:ed:86:82:
31:73:f8:93:b8:8f:58:ce:d4:04:d0:56:bc:c5:c2:31:bc:14:
0a:9e:98:40:9f:2d:26:0f:7c:15:d5:0f:ce:bf:2e:2b:24:04:
88:8e:95:3b:9e:bb:20:f3:7b:57:cc:8c:df:07:88:7a:f0:ce:
5a:23:b9:cb:8e:d6:cc:0e:ae:82:52:37:06:a1:49:c5:1a:b2:
d9:03:45:96:c3:22:da:c9:b8:6f:b0:52:bf:1c:f5:58:c6:9f:
83:35:49:28:3c:91:81:64:bb:7e:1b:af:84:50:9f:f4:9e:ff:
51:7c:ce:02:44:60:89:6c:87:7b:ed:52:1c:e0:bc:2f:70:27:
32:f6:2b:ba:c7:b5:06:49:6d:6a:ec:08:fb:99:d5:22:6c:b1:
21:6f:75:6d:ca:63:6b:01:a9:10:e0:30:3a:5c:ed:e1:a4:6f:
f5:c6:20:b9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcBV3D5ZrR/Mj5IJA3CKPN6zbf3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQw
MTI1MkE1QzAeFw0yNjA0MTYyMDU3MjVaFw0yNjA0MjAwODI3MjVaMDMxMTAvBgNV
BAMTKEE3NjI3NUFDRDI5Q0JEMEFEQzI0MkJDODVFQzQyQTM1NjU4RTA5RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5Jc00Xy7bvYtH8orfKpamfun
mYNdg2yYqjA8GWLeHU9COe0kUbBEvWZoDeFvyLZ9GYZ566qIEcejQgDjkXqVO9vt
MIsuiDefcQHwfFND31ZlqYz+wi/dTYIn0V8m0ELH2DizZhrmfSMjxHQ4IJzrr+zf
WecloT4zaRw8XVkvg0UI+6XoDrDXPyqTg46ERzAZNGuRpSxi63CN+xQI0QKfzUoh
aP+2qLfI/i8WjS9gnh9nERVnWEC0EngvflloGNwLuloE8BtUf9p3Bp9EbsTWuiqm
x5b/LSOmxYDWJQ9cOK0oy1r0RG7EgXr0QSJkwxDjahygmeITXGEnt9eFZolXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUp2J1rNKcvQrcJCvIXsQqNWWOCfowHwYDVR0j
BBgwFoAUOJ58E89jRK65MAHNTFrHlAElKlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MjAzMmJjOS02MDVhLTQyNTMtYTRjZC02MmYxMjQxMjZlYWMvMC8zODlFN0MxM0NG
NjM0NEFFQjkzMDAxQ0Q0QzVBQzc5NDAxMjUyQTVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQwMTI1
MkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIwMzJiYzktNjA1YS00MjUzLWE0
Y2QtNjJmMTI0MTI2ZWFjLzAvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3
OTQwMTI1MkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ3w8491oOcRm+KDUxvgxKIWePsC+Hzs7Qjx
qE31isWUJTyVea6UWwyuuDkItXpvIkonEDcBTNeFEd5tTWFBKPwcSUzg+9foBDRA
cXpyrFKZsrGCnwCboO2GgjFz+JO4j1jO1ATQVrzFwjG8FAqemECfLSYPfBXVD86/
LiskBIiOlTueuyDze1fMjN8HiHrwzlojucuO1swOroJSNwahScUastkDRZbDItrJ
uG+wUr8c9VjGn4M1SSg8kYFku34br4RQn/Se/1F8zgJEYIlsh3vtUhzgvC9wJzL2
K7rHtQZJbWrsCPuZ1SJssSFvdW3KY2sBqRDgMDpc7eGkb/XGILk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:10 2026 by rpki-client