
$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft
File: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft (raw, json)
Hash identifier: u4FBopJPhZtTitH6nSK+sq9qxfhS0WuCSS6fs4azMus=
Subject key identifier: B7:BD:C8:5C:E0:00:52:79:CB:0B:DB:4B:AD:19:EA:49:B1:2A:96:A7
Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3
Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3
Certificate serial: 4A3985D9E676A1125142A475843041153A85E317
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft
Manifest number: 0244
Signing time: Fri 27 Feb 2026 21:53:33 +0000
Manifest this update: Fri 27 Feb 2026 21:48:33 +0000
Manifest next update: Tue 03 Mar 2026 02:37:33 +0000
Files and hashes: 1: 3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa (hash: h3F9Llj9O7Xku7uQRgTprbQZ0BqnZP4nbNoiUb3SuDY=)
2: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: 3msI/ygFttmp4PXSnBx54sTyPLJ5YCmXmK79NjZs9sY=)
3: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl (hash: Cyu5N1ZebL+dp/c+QiEyDQBIAOx2KS5KZMiUlHPvpSw=)
4: 3130332e32302e3130382e302f32342d3234203d3e20313534323137.roa (hash: YevEYsnpyXjpiEIMiyxhrulrrR0dSrjcBVrRlWG52Uk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl
rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 02:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:39:85:d9:e6:76:a1:12:51:42:a4:75:84:30:41:15:3a:85:e3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3
Validity
Not Before: Feb 27 21:48:33 2026 GMT
Not After : Mar 3 02:37:33 2026 GMT
Subject: CN=B7BDC85CE0005279CB0BDB4BAD19EA49B12A96A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:c5:bf:42:ca:2a:0f:c2:d5:a6:fc:1e:6a:
5a:0a:91:31:de:9c:bb:e9:0d:3d:14:16:14:11:7e:
53:b0:31:a8:24:e2:e0:e2:92:d2:00:1a:3c:b1:2d:
e9:08:53:99:0b:dd:c6:2a:d5:2d:40:c6:29:ad:02:
a5:a6:5c:9d:34:2b:15:ce:bd:3e:ea:4a:66:ef:1e:
f1:bc:30:8f:25:63:4b:65:33:e3:3d:20:66:98:20:
7e:b6:de:ed:ee:5d:d5:97:0d:15:30:a1:8d:3f:9d:
76:4d:48:56:33:33:99:ac:d7:d1:5a:0e:05:1b:4e:
32:e6:81:b5:1c:26:27:15:20:37:9a:ca:f1:a4:91:
8f:26:3e:ef:da:2c:2a:d5:a4:8a:cd:2d:85:12:ac:
c8:06:e6:40:5a:6a:b8:e9:d0:cb:6a:37:d3:4e:7d:
83:4d:f9:4f:48:58:a5:04:1d:f2:90:7d:95:a0:02:
5d:d5:0b:47:5d:22:5d:4c:c3:b4:49:a6:ac:6d:bf:
29:02:1f:fd:94:0c:1f:14:5e:60:11:23:dc:90:7b:
87:5c:48:d4:60:92:29:38:7d:23:6c:bc:7c:3d:02:
9d:da:c8:9f:72:0e:5c:4c:27:62:5c:1b:51:bf:4b:
35:fe:e0:94:43:24:c7:09:13:4e:55:97:b9:c4:a7:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BD:C8:5C:E0:00:52:79:CB:0B:DB:4B:AD:19:EA:49:B1:2A:96:A7
X509v3 Authority Key Identifier:
keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ba:42:d1:eb:f5:d9:5f:20:de:a1:92:f7:50:8b:d6:9a:6c:
84:ad:67:fe:45:33:83:fe:fd:1d:97:5b:84:29:85:95:a9:ba:
10:30:e5:8d:91:43:f0:4a:3c:65:e3:7c:29:15:b4:32:d0:09:
6d:ea:b2:bd:ec:57:f8:73:75:12:9d:ef:e0:c2:25:6c:6c:a2:
df:b1:06:cd:79:8a:b4:22:f7:5d:aa:c8:f0:6a:ff:ba:ea:14:
1d:f1:5e:0d:fc:e3:6f:9e:8b:ab:3d:35:88:50:c7:c9:9d:c4:
8f:dd:e3:fa:c3:43:8e:2b:57:f6:01:6f:91:10:12:3c:9f:7a:
e6:91:43:28:d8:e1:d5:40:36:60:cf:f9:c6:04:77:0d:bd:bb:
df:ac:58:bf:53:1a:19:59:93:fc:1e:09:40:6d:97:e3:2c:c9:
b1:19:e5:7f:77:e8:04:7d:eb:96:aa:7c:77:94:bd:ee:12:16:
da:d1:77:04:8f:33:7e:db:c9:10:17:b0:93:2f:54:2f:9e:bf:
86:23:da:f2:71:a0:2f:e7:84:92:43:4d:1e:90:d0:0c:a8:05:
89:55:2e:46:1e:6d:60:f3:7b:d2:2b:13:6d:96:45:28:26:74:
20:ad:e3:8f:51:74:a5:a9:36:d0:24:05:e6:6d:14:a8:3a:29:
c8:db:e5:5e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSjmF2eZ2oRJRQqR1hDBBFTqF4xcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1
MDMyMzFCMzAeFw0yNjAyMjcyMTQ4MzNaFw0yNjAzMDMwMjM3MzNaMDMxMTAvBgNV
BAMTKEI3QkRDODVDRTAwMDUyNzlDQjBCREI0QkFEMTlFQTQ5QjEyQTk2QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJacW/QsoqD8LVpvwealoKkTHe
nLvpDT0UFhQRflOwMagk4uDiktIAGjyxLekIU5kL3cYq1S1AximtAqWmXJ00KxXO
vT7qSmbvHvG8MI8lY0tlM+M9IGaYIH623u3uXdWXDRUwoY0/nXZNSFYzM5ms19Fa
DgUbTjLmgbUcJicVIDeayvGkkY8mPu/aLCrVpIrNLYUSrMgG5kBaarjp0MtqN9NO
fYNN+U9IWKUEHfKQfZWgAl3VC0ddIl1Mw7RJpqxtvykCH/2UDB8UXmARI9yQe4dc
SNRgkik4fSNsvHw9Ap3ayJ9yDlxMJ2JcG1G/SzX+4JRDJMcJE05Vl7nEp9zlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUt73IXOAAUnnLC9tLrRnqSbEqlqcwHwYDVR0j
BBgwFoAUeiFvI9iiKPu49WPsFd92/VAyMbMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
Y2M2YmQ3My1mOWJkLTRmNWEtOWM1OS1mYmVhMWJkODM0NzMvMC83QTIxNkYyM0Q4
QTIyOEZCQjhGNTYzRUMxNURGNzZGRDUwMzIzMUIzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1MDMy
MzFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj
NTktZmJlYTFiZDgzNDczLzAvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2
RkQ1MDMyMzFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGC6QtHr9dlfIN6hkvdQi9aabIStZ/5FM4P+
/R2XW4QphZWpuhAw5Y2RQ/BKPGXjfCkVtDLQCW3qsr3sV/hzdRKd7+DCJWxsot+x
Bs15irQi912qyPBq/7rqFB3xXg3842+ei6s9NYhQx8mdxI/d4/rDQ44rV/YBb5EQ
EjyfeuaRQyjY4dVANmDP+cYEdw29u9+sWL9TGhlZk/weCUBtl+MsybEZ5X936AR9
65aqfHeUve4SFtrRdwSPM37byRAXsJMvVC+ev4Yj2vJxoC/nhJJDTR6Q0AyoBYlV
LkYebWDze9IrE22WRSgmdCCt449RdKWpNtAkBeZtFKg6Kcjb5V4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:22 2026 by rpki-client