
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft
File: A70723C87D2C27B95BE6227C631E7D85EF89D513.mft (raw, json)
Hash identifier: QYraiTaIe6WdfEvZRdM6FwsNffj4lx6J8EaIPxAQs6Q=
Subject key identifier: 96:27:DF:07:CF:88:C3:60:F2:BA:93:10:DB:29:1A:37:BE:49:C6:D8
Authority key identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13
Certificate issuer: /CN=A70723C87D2C27B95BE6227C631E7D85EF89D513
Certificate serial: 3B94FBCBAFDEF91A97D77674682EAB2D57CD2AD2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft
Manifest number: 0566
Signing time: Fri 17 Apr 2026 03:11:01 +0000
Manifest this update: Fri 17 Apr 2026 03:06:01 +0000
Manifest next update: Mon 20 Apr 2026 15:05:01 +0000
Files and hashes: 1: A70723C87D2C27B95BE6227C631E7D85EF89D513.crl (hash: 7mxYgtDukU07ZrCSJra0bM8hCrbl/HYe7qj5HKKCA7g=)
2: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: QAI5cYTeOrxvcausPsC1CnYV2kULdBh9ytAc4ZJZoM0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl
rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 15:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:94:fb:cb:af:de:f9:1a:97:d7:76:74:68:2e:ab:2d:57:cd:2a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A70723C87D2C27B95BE6227C631E7D85EF89D513
Validity
Not Before: Apr 17 03:06:01 2026 GMT
Not After : Apr 20 15:05:01 2026 GMT
Subject: CN=9627DF07CF88C360F2BA9310DB291A37BE49C6D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:03:29:6c:8b:da:94:2e:c9:1c:a2:7d:23:72:
b3:f0:7a:0d:0d:e1:d6:10:69:35:46:3f:8d:02:19:
98:9c:27:45:5f:1e:9d:26:7e:de:76:db:f5:44:21:
03:ba:17:bb:48:66:82:1a:4f:b6:39:31:83:fc:e0:
64:e5:8e:6d:a8:ff:09:2b:d0:bc:38:48:23:4b:6d:
1b:23:b1:bd:52:5f:c5:a3:59:18:9e:67:10:91:72:
97:30:5a:73:fd:97:32:06:07:6e:85:23:30:78:bc:
e2:84:e3:c1:47:98:61:d8:c3:7b:08:3f:8d:c4:4b:
cf:85:bf:c7:19:91:7b:cd:63:e4:97:37:42:cc:ca:
79:53:cf:f2:67:ac:0f:1a:f4:ec:00:4d:2f:00:f2:
06:1f:65:36:43:20:4a:be:c3:1d:11:44:5e:d0:d8:
e6:8b:9d:42:32:80:5b:16:12:64:cf:1a:f3:75:a6:
b4:37:08:64:9d:d2:7f:dd:37:21:eb:5f:e3:7a:dc:
6b:13:2a:45:5d:24:30:c3:47:a8:d2:68:6e:b3:e3:
61:04:fc:f5:4c:13:50:f9:c9:46:db:52:0d:cf:84:
5e:f8:af:e3:85:98:59:cf:dc:88:5f:c8:3f:49:da:
31:4c:de:04:51:fa:ab:1a:48:bd:9f:a3:1e:e2:e8:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:27:DF:07:CF:88:C3:60:F2:BA:93:10:DB:29:1A:37:BE:49:C6:D8
X509v3 Authority Key Identifier:
keyid:A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c4:cb:d3:d2:98:14:f1:60:88:8f:18:13:b9:99:b8:a3:39:
1b:1b:22:3f:00:08:7b:cf:36:88:14:28:49:0d:53:f8:3c:b7:
08:b6:db:73:9f:6a:9d:b1:e6:96:5a:dc:cf:e9:44:37:7b:67:
d3:76:a7:b7:2f:8d:7e:89:86:f2:01:28:a5:eb:ed:1d:42:63:
8c:ed:c8:59:e0:5f:90:a5:e8:2a:30:d0:d0:05:af:ff:e9:0d:
4a:6b:4e:bd:98:05:0c:88:9d:c5:17:f4:40:55:74:6b:3a:d3:
21:2c:2d:30:a4:27:4a:57:cf:b1:75:89:65:03:d7:e8:ae:cb:
de:4e:aa:1c:60:15:1c:c1:f2:c6:7e:e6:af:36:a2:d3:1d:06:
55:65:da:fe:00:37:d1:96:12:0f:46:a7:07:f2:f8:6f:7d:e1:
18:f3:22:87:72:ff:b3:f8:f7:c3:46:a6:8a:01:f9:e7:e9:b3:
d9:17:a0:3a:8b:f7:76:1d:4f:b9:ae:17:c8:98:2a:bd:b7:4b:
7b:0f:cb:8f:24:71:90:d7:42:57:cb:35:42:fd:cf:eb:77:6f:
b2:fc:0c:37:9b:2c:f2:37:f9:25:69:88:1c:70:7b:eb:76:d5:
8d:a1:b6:36:5e:71:a9:fe:65:b7:c7:2c:fa:f3:b6:7e:77:02:
54:35:82:75
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUO5T7y6/e+RqX13Z0aC6rLVfNKtIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVF
Rjg5RDUxMzAeFw0yNjA0MTcwMzA2MDFaFw0yNjA0MjAxNTA1MDFaMDMxMTAvBgNV
BAMTKDk2MjdERjA3Q0Y4OEMzNjBGMkJBOTMxMERCMjkxQTM3QkU0OUM2RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcAylsi9qULskcon0jcrPweg0N
4dYQaTVGP40CGZicJ0VfHp0mft522/VEIQO6F7tIZoIaT7Y5MYP84GTljm2o/wkr
0Lw4SCNLbRsjsb1SX8WjWRieZxCRcpcwWnP9lzIGB26FIzB4vOKE48FHmGHYw3sI
P43ES8+Fv8cZkXvNY+SXN0LMynlTz/JnrA8a9OwATS8A8gYfZTZDIEq+wx0RRF7Q
2OaLnUIygFsWEmTPGvN1prQ3CGSd0n/dNyHrX+N63GsTKkVdJDDDR6jSaG6z42EE
/PVME1D5yUbbUg3PhF74r+OFmFnP3IhfyD9J2jFM3gRR+qsaSL2fox7i6CbnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUliffB8+Iw2DyupMQ2ykaN75JxtgwHwYDVR0j
BBgwFoAUpwcjyH0sJ7lb5iJ8Yx59he+J1RMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
YjcwOTA0NC01NzE4LTRmMWQtYTZkMC04NzY2ZWE3M2VhZjQvMC9BNzA3MjNDODdE
MkMyN0I5NUJFNjIyN0M2MzFFN0Q4NUVGODlENTEzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVFRjg5
RDUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MDkwNDQtNTcxOC00ZjFkLWE2
ZDAtODc2NmVhNzNlYWY0LzAvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdE
ODVFRjg5RDUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAITEy9PSmBTxYIiPGBO5mbijORsbIj8ACHvP
NogUKEkNU/g8twi223Ofap2x5pZa3M/pRDd7Z9N2p7cvjX6JhvIBKKXr7R1CY4zt
yFngX5Cl6Cow0NAFr//pDUprTr2YBQyIncUX9EBVdGs60yEsLTCkJ0pXz7F1iWUD
1+iuy95OqhxgFRzB8sZ+5q82otMdBlVl2v4AN9GWEg9Gpwfy+G994RjzIody/7P4
98NGpooB+efps9kXoDqL93YdT7muF8iYKr23S3sPy48kcZDXQlfLNUL9z+t3b7L8
DDebLPI3+SVpiBxwe+t21Y2htjZecan+ZbfHLPrztn53AlQ1gnU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:37 2026 by rpki-client