
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft
File: F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft (raw, json)
Hash identifier: 9WRBHenolcvEJTJa6UwZLBsTtSvUenWFiBg6lhsYJOs=
Subject key identifier: BF:DD:7D:1E:AA:AA:7D:53:16:B6:1D:F0:C0:23:5B:E9:72:35:8A:EF
Authority key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98
Certificate issuer: /CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
Certificate serial: 36D074BC4496E8055DFADF40BFDDB68A105F2414
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft
Manifest number: 0572
Signing time: Thu 16 Apr 2026 20:40:00 +0000
Manifest this update: Thu 16 Apr 2026 20:35:00 +0000
Manifest next update: Mon 20 Apr 2026 03:25:00 +0000
Files and hashes: 1: F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl (hash: 3D41kxCtYjd4B120kdKgchLpnjMe7WZjPEKfc+dHljY=)
2: 3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (hash: k7qVJVZQGCQ79Jzq19kExP8cLdh6zejdLWbLVIVWa38=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl
rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 03:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d0:74:bc:44:96:e8:05:5d:fa:df:40:bf:dd:b6:8a:10:5f:24:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
Validity
Not Before: Apr 16 20:35:00 2026 GMT
Not After : Apr 20 03:25:00 2026 GMT
Subject: CN=BFDD7D1EAAAA7D5316B61DF0C0235BE972358AEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:25:2a:99:90:49:d4:b9:39:ee:f6:6a:de:
65:dd:51:c9:aa:3e:ef:f8:16:38:48:6c:25:df:90:
e1:c5:d0:2b:af:aa:7e:aa:ac:ee:f6:dc:9b:8e:be:
4d:c5:a1:b8:9f:45:42:e5:cb:d2:24:58:70:0e:96:
18:e2:82:bd:d7:f2:80:ca:31:34:f2:2c:b0:26:90:
ea:81:99:b0:43:62:98:9b:f4:66:94:9c:3d:11:bc:
0e:c6:88:9d:61:5c:24:37:d4:63:cd:c0:07:10:42:
82:f6:61:d1:db:64:0f:62:5a:a6:50:10:2b:58:ca:
88:cf:66:82:b1:0e:d2:e0:b1:80:cd:51:7e:29:2d:
a8:92:2e:29:0e:79:75:a3:4a:2c:e7:b2:8f:03:4c:
ef:ec:fb:9f:0b:99:be:94:f0:23:7d:c5:06:12:95:
37:5a:70:2a:c4:81:4f:b4:94:88:16:12:0a:4e:71:
32:f8:de:81:c5:a0:04:61:33:20:39:97:cd:c3:40:
ee:00:db:59:3e:93:19:0a:c2:b2:32:a4:42:13:56:
4d:f9:36:97:70:ce:23:4d:60:77:2d:1a:f9:30:03:
ad:83:bb:05:3e:e0:8a:9d:b3:57:80:13:fc:de:c8:
28:2a:04:78:11:27:ec:31:1e:44:d0:81:f8:51:5c:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DD:7D:1E:AA:AA:7D:53:16:B6:1D:F0:C0:23:5B:E9:72:35:8A:EF
X509v3 Authority Key Identifier:
keyid:F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3b:cd:bd:cd:5d:fa:e6:7f:76:03:b6:13:ad:86:6c:07:b9:
5f:ff:0c:4a:8b:b3:51:35:4b:1d:9b:c2:07:84:ea:2b:38:30:
7d:1c:35:1e:78:44:f9:d9:1d:17:a1:b1:cc:c3:2f:b7:0a:c8:
a4:b5:a8:4d:d6:8b:f7:06:a9:a2:a4:50:46:d8:8e:b9:bd:c5:
e6:8f:0b:7f:a2:57:8b:64:4b:80:5f:56:49:7e:c0:f3:49:f9:
09:e6:bb:81:ae:ba:5a:ee:56:99:ae:42:a9:9c:66:ef:b0:a5:
47:81:58:39:d0:28:0e:c8:09:60:ae:b6:79:30:c5:11:89:23:
c5:7b:ad:ca:29:1c:d0:5f:59:d8:bd:d6:98:d8:5b:60:24:68:
6a:b3:5f:e0:e4:25:cb:9f:9c:46:7c:42:d0:7c:d1:00:5e:54:
78:09:9e:72:7f:1d:70:86:7a:ff:bc:c7:52:d9:51:da:44:40:
22:96:34:68:c6:e3:cc:48:eb:10:3d:eb:d7:9c:91:f4:5f:6c:
f0:90:c6:6b:25:6a:0e:48:65:7a:34:94:36:2e:1d:d3:3c:75:
5e:9c:03:08:03:14:22:c3:e9:f7:71:b7:ab:6a:d3:4c:9c:33:
8f:11:e6:2d:c0:3b:24:48:dd:44:d0:b9:84:28:52:c5:b0:2d:
6e:50:c7:68
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNtB0vESW6AVd+t9Av922ihBfJBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2ODQy
NkU4QkE5ODAeFw0yNjA0MTYyMDM1MDBaFw0yNjA0MjAwMzI1MDBaMDMxMTAvBgNV
BAMTKEJGREQ3RDFFQUFBQTdENTMxNkI2MURGMEMwMjM1QkU5NzIzNThBRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHryUqmZBJ1Lk57vZq3mXdUcmq
Pu/4FjhIbCXfkOHF0Cuvqn6qrO723JuOvk3FobifRULly9IkWHAOlhjigr3X8oDK
MTTyLLAmkOqBmbBDYpib9GaUnD0RvA7GiJ1hXCQ31GPNwAcQQoL2YdHbZA9iWqZQ
ECtYyojPZoKxDtLgsYDNUX4pLaiSLikOeXWjSiznso8DTO/s+58Lmb6U8CN9xQYS
lTdacCrEgU+0lIgWEgpOcTL43oHFoARhMyA5l83DQO4A21k+kxkKwrIypEITVk35
NpdwziNNYHctGvkwA62DuwU+4Iqds1eAE/zeyCgqBHgRJ+wxHkTQgfhRXHrNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUv919HqqqfVMWth3wwCNb6XI1iu8wHwYDVR0j
BBgwFoAU9UNirStrGRy303tU3NJGhCboupgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YzBiMzllMi02ODdiLTQ2MTQtODA5Zi03MzY3MmVhMjEyY2YvMC9GNTQzNjJBRDJC
NkIxOTFDQjdEMzdCNTREQ0QyNDY4NDI2RThCQTk4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2ODQyNkU4
QkE5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMwYjM5ZTItNjg3Yi00NjE0LTgw
OWYtNzM2NzJlYTIxMmNmLzAvRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2
ODQyNkU4QkE5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJI7zb3NXfrmf3YDthOthmwHuV//DEqLs1E1
Sx2bwgeE6is4MH0cNR54RPnZHRehsczDL7cKyKS1qE3Wi/cGqaKkUEbYjrm9xeaP
C3+iV4tkS4BfVkl+wPNJ+Qnmu4GuulruVpmuQqmcZu+wpUeBWDnQKA7ICWCutnkw
xRGJI8V7rcopHNBfWdi91pjYW2AkaGqzX+DkJcufnEZ8QtB80QBeVHgJnnJ/HXCG
ev+8x1LZUdpEQCKWNGjG48xI6xA969eckfRfbPCQxmslag5IZXo0lDYuHdM8dV6c
AwgDFCLD6fdxt6tq00ycM48R5i3AOyRI3UTQuYQoUsWwLW5Qx2g=
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:28:12 2026 by rpki-client