
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json)
Hash identifier: 5Kxn5+fcYplFtElIEuG/iOr2wDuDjkdsVhmIxKB+22Y=
Subject key identifier: 9C:8D:01:FF:BE:E8:6A:D7:BC:0B:24:5B:71:02:4D:35:8A:19:7A:39
Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Certificate serial: 2B660F1326321C89F86ABA7327E63FD2E6FFEC83
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
Manifest number: 057A
Signing time: Thu 16 Apr 2026 03:30:41 +0000
Manifest this update: Thu 16 Apr 2026 03:25:41 +0000
Manifest next update: Sun 19 Apr 2026 15:12:41 +0000
Files and hashes: 1: 3135312e3135382e3233392e302f32342d3234203d3e20313534353238.roa (hash: wpGsP5+dmtc+mo9jkkLJhvYfdaoWqGz7+ZwQ9EIWJrQ=)
2: F8EA79769F4F98F7D5A723816314CD216D8F01AA.cer (hash: jWRcOEtjjDvspoWa+pEhrBdCuOMVZJEcsnEKE1D68Hs=)
3: 3135312e3135382e3137362e302f32342d3234203d3e20313534353039.roa (hash: sij2ghOb/bHaf6sAnwpAnK7H2xX31zIFc2+5Lb2x4RM=)
4: 3135312e3135382e34322e302f32332d3234203d3e20313534343935.roa (hash: HOZT2Ynqka+xtNavl4KWOoX/MgQf9aLmuSZguGcd2u4=)
5: 3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa (hash: IT9x0P/3RDDAHWuOeI/lOb1Fh67e62i5Nd9Bu80+ylI=)
6: 3135312e3135382e3233362e302f32332d3234203d3e20313534353233.roa (hash: 52qrDnM09tRZ9PTF92Y51pJWQ24eofPJfXULRl1uZ6c=)
7: 24D5D46277BE98F80EC6AF901FD4322AA2FAB208.cer (hash: t0TI2xUV9CSJIC6Ugf/2mUDyvpKoJrWf1xg05ApUJ+s=)
8: 3135312e3135382e3138362e302f32342d3234203d3e20313338393930.roa (hash: FbCxZ9NqNkRJEcyQ+Z9e28f1jgxdu0y84ManyawEjFs=)
9: 3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa (hash: snY8hCWpMQz3894nERSOV1ZUgmPo7DqaG6a4ucnpn8M=)
10: 3135312e3135382e3230342e302f32332d3234203d3e20313534353232.roa (hash: DjXkhi3atbqk0A2teZVs4TmRpsS8LWjuJgAMaAjN4zY=)
11: 3135312e3135382e3233342e302f32342d3234203d3e20313534353230.roa (hash: /mPQp0zRLRixv4ruZ9YF3ierQjYd2QtemmGEIe6D21s=)
12: 38322e3135382e3132382e302f31392d3234203d3e2039333431.roa (hash: kXLN0HaZu/PhLPiFi30mit71JHQuO6u1X5gZIB305jg=)
13: 3135312e3135382e35362e302f32332d3234203d3e20313432323538.roa (hash: eQeLFKLBPCDpd3UM2/Z4NimaOA9d7w4AVtrEMyVO6ds=)
14: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: PchIqZldw1J9Vjr9WlbCInj0QjGhWSmYvlli4MS7OMA=)
15: 3135312e3135382e3133322e302f32332d3234203d3e20313334373238.roa (hash: 5lVjSKtWrmhtWPL47yMhwEDIaCukaKyrxLX70Wi5Smo=)
16: 71541EF74561083EF5B89C20FF0ECD5E565A4C9E.cer (hash: ObDrybQUH8zeG+nFpwuAiHUomqzj63etXRwpS8XT+5U=)
17: 3135312e3135382e3230332e302f32342d3234203d3e20313336373833.roa (hash: NPFmuPD5p1q4xsC0OUpbrvvz76wi/OaRGYsWFjn+/80=)
18: 3135312e3135382e342e302f32332d3234203d3e20313432313938.roa (hash: AFjW+EEHhzoA6cLg/0TGjATfpii/CqiAmCZUF80TZ90=)
19: 3135312e3135382e3135302e302f32332d3234203d3e20313430333034.roa (hash: nKoJx+ps7nbi7qjScdwuergOeJAMrw6Ipvaj9iQKbkE=)
20: 1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer (hash: fewpVNLy6/HRvoDNDTlZwpVW2bZGk39++Q7XR4HP7Tk=)
21: 3135312e3135382e3138372e302f32342d3234203d3e20313432353434.roa (hash: L/WdMdCAwsC0GOHs4/vQ2hYemSSZju15ZjyEZqkYmxU=)
22: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: 5GheOB3UnfwRWeCo8/5o8Y/Ft2slsbsMBmf5vac32Sw=)
23: 3135312e3135382e33362e302f32332d3234203d3e20313432323330.roa (hash: JlCq+CeQI0IRGssW+fbcqNZoEnvUp/ZiGtyW7tWM+TY=)
24: 3135312e3135382e3130362e302f32332d3234203d3e20313534343934.roa (hash: AZthBup3GN43JmRthTYHXFQog/yv2zTfPqeXiB57+AA=)
25: 3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa (hash: TL6kftFt7vP2GTuixxW6r7zs8Ky4SmBEeLPTG5yr9A0=)
26: 3135312e3135382e3234302e302f32332d3234203d3e20313534353237.roa (hash: dM4L9Ic4RBC7usWTGbce/eZBXoOgJht8T0TuRtZKZGg=)
27: 3135312e3135382e31302e302f32332d3234203d3e20313331303735.roa (hash: cqvatD7Cg6pNEzgIw2WwWbtZBJHhttbVP+mmzWaLbBQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 15:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:66:0f:13:26:32:1c:89:f8:6a:ba:73:27:e6:3f:d2:e6:ff:ec:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Validity
Not Before: Apr 16 03:25:41 2026 GMT
Not After : Apr 19 15:12:41 2026 GMT
Subject: CN=9C8D01FFBEE86AD7BC0B245B71024D358A197A39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:65:66:fc:5e:87:b0:59:1b:56:3c:b1:e5:
84:ee:a3:53:20:53:bb:85:5a:87:b0:e8:af:e6:54:
9e:30:74:69:a8:5f:88:4b:39:83:ac:91:54:d6:ad:
ba:df:9b:f5:b4:c7:db:ad:06:5a:55:9d:f9:6a:9d:
aa:41:30:8f:26:e6:e1:c9:12:fc:77:c5:ec:34:2a:
61:90:c5:b6:15:e4:6c:8a:35:e2:ad:3a:f5:2a:a4:
32:95:56:ba:0f:b4:ec:60:cb:b4:4c:d7:91:89:c1:
7a:a9:62:6d:13:06:b1:c7:07:d1:4f:06:c1:0e:87:
ea:97:73:84:01:ae:64:ae:b2:b8:55:29:c8:af:3d:
21:8e:10:cf:fd:6b:84:53:56:c0:85:45:bd:58:50:
f6:5e:bc:c3:0d:8d:8f:4d:33:45:68:cb:c9:86:e2:
ea:67:82:58:93:93:92:4c:59:2d:49:ce:5e:e2:d9:
86:4a:7e:70:a4:fa:68:4b:ee:d7:2d:f4:1e:a2:50:
ac:14:81:9c:dd:03:92:bb:75:63:9c:9d:2a:43:0b:
ea:28:9c:5a:8a:3c:eb:cf:b1:f2:eb:e9:69:3f:e3:
c3:da:ad:57:f3:41:14:09:22:f8:91:6e:9b:86:b0:
20:36:6d:28:f2:b3:a3:48:ce:d8:ad:a6:a5:d0:9e:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8D:01:FF:BE:E8:6A:D7:BC:0B:24:5B:71:02:4D:35:8A:19:7A:39
X509v3 Authority Key Identifier:
keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f1:3c:54:0f:88:b8:3c:ef:e6:07:1f:b6:20:ae:35:bd:d0:
1f:b8:51:a9:06:24:97:9a:bb:22:84:82:cf:37:e0:f6:93:8f:
12:b5:0b:32:75:96:72:6a:1d:8b:ca:01:0c:03:58:75:fb:a5:
86:1b:ef:5f:21:ab:6d:09:f8:3f:df:b3:ac:f4:a7:59:89:17:
bd:8d:87:18:22:cc:e5:9a:65:6c:a1:df:c1:b0:ed:cd:ed:34:
2d:fd:d1:75:54:bf:65:9d:8e:eb:e8:20:4d:9d:62:3a:e8:0d:
9f:1e:88:35:81:9e:73:09:ee:ab:b3:31:3d:23:ca:64:1c:50:
38:1e:bd:d5:da:61:f0:8a:c3:49:69:e8:38:e2:c3:f6:e1:2c:
3a:55:bc:b2:31:7a:f3:50:36:49:b7:19:99:4d:12:ad:b4:23:
f4:2b:1d:dd:ac:bc:8a:de:7f:bf:a3:9f:de:07:0d:4b:d8:25:
bb:cd:14:f3:99:3e:1f:9f:5d:fe:8b:98:62:c0:c4:a3:60:f7:
88:f7:78:ca:83:2d:69:2b:54:3f:53:f9:1f:98:5a:28:bf:fa:
64:2a:c7:28:53:c2:2e:dd:bf:e5:a2:ba:33:c2:71:51:fd:50:
c3:f3:2d:1b:89:d6:e2:7a:7b:03:23:50:5e:09:55:d9:b1:41:
0f:cc:74:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUK2YPEyYyHIn4arpzJ+Y/0ub/7IMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB
QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI2MDQxNjAzMjU0MVoX
DTI2MDQxOTE1MTI0MVowMzExMC8GA1UEAxMoOUM4RDAxRkZCRUU4NkFEN0JDMEIy
NDVCNzEwMjREMzU4QTE5N0EzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALtJZWb8XoewWRtWPLHlhO6jUyBTu4Vah7Dor+ZUnjB0aahfiEs5g6yRVNat
ut+b9bTH260GWlWd+WqdqkEwjybm4ckS/HfF7DQqYZDFthXkbIo14q069SqkMpVW
ug+07GDLtEzXkYnBeqlibRMGsccH0U8GwQ6H6pdzhAGuZK6yuFUpyK89IY4Qz/1r
hFNWwIVFvVhQ9l68ww2Nj00zRWjLyYbi6meCWJOTkkxZLUnOXuLZhkp+cKT6aEvu
1y30HqJQrBSBnN0Dkrt1Y5ydKkML6iicWoo868+x8uvpaT/jw9qtV/NBFAki+JFu
m4awIDZtKPKzo0jO2K2mpdCe8nkCAwEAAaOCAgkwggIFMB0GA1UdDgQWBBScjQH/
vuhq17wLJFtxAk01ihl6OTAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ
ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB
NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy
QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n
ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB
QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/E8VA+I
uDzv5gcftiCuNb3QH7hRqQYkl5q7IoSCzzfg9pOPErULMnWWcmodi8oBDANYdful
hhvvXyGrbQn4P9+zrPSnWYkXvY2HGCLM5ZplbKHfwbDtze00Lf3RdVS/ZZ2O6+gg
TZ1iOugNnx6INYGecwnuq7MxPSPKZBxQOB691dph8IrDSWnoOOLD9uEsOlW8sjF6
81A2SbcZmU0SrbQj9Csd3ay8it5/v6Of3gcNS9glu80U85k+H59d/ouYYsDEo2D3
iPd4yoMtaStUP1P5H5haKL/6ZCrHKFPCLt2/5aK6M8JxUf1Qw/MtG4nW4np7AyNQ
XglV2bFBD8x0Sg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:00:56 2026 by rpki-client