
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
File: F490341241E1B1C7D170AB872CA39A68309B3F3B.mft (raw, json)
Hash identifier: ZVD9521Eyu9gumMqegLMmnnryvS0V+978zYwRSEWOJ8=
Subject key identifier: 1C:E0:8B:C6:1D:40:73:D8:57:E0:A4:A1:B0:EE:5B:6F:8F:31:72:F1
Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
Certificate issuer: /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Certificate serial: 1EC5F440C398368C3829E4372C033E86C5F3E09A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
Manifest number: 0573
Signing time: Sat 28 Feb 2026 10:11:17 +0000
Manifest this update: Sat 28 Feb 2026 10:06:17 +0000
Manifest next update: Tue 03 Mar 2026 19:49:17 +0000
Files and hashes: 1: 3138322e3235352e302e302f32322d3232203d3e203436303439.roa (hash: 760KemyA/8CG6teBonQBDvPWQiZb2MFgnxH7YjBubLE=)
2: F490341241E1B1C7D170AB872CA39A68309B3F3B.crl (hash: wRwg/+BBnKqUOzk9hiYM/H/5M+1SgFRKgFO2dXdXJhg=)
3: 3138322e3235352e322e302f32342d3234203d3e203436303439.roa (hash: s6t8B9Yb32gbmphUa2yAhVP1WuavRJY2Ru8LFunH5f8=)
4: 3138322e3235352e312e302f32342d3234203d3e203436303439.roa (hash: /whKyexdqjSOrcGqLso5j6gTdy//noyVQBpRBCINN/I=)
5: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (hash: I1A638CYsM8J+ynZCPmsBPN7YoHXf4XqHlMcOkLKF2I=)
6: 3138322e3235352e352e302f32342d3234203d3e203436303439.roa (hash: q1fJNMSMrTdPYX6ezkyT1Xn0IDgEntngG/ryVwe3mo8=)
7: 3138322e3235352e362e302f32342d3234203d3e203436303439.roa (hash: QRYn8WtwsQRs+x1TkdeVU1UH0/rjpzX3BZt6CYg28oE=)
8: 3138322e3235352e372e302f32342d3234203d3e203436303439.roa (hash: ZOn1duEgq0Mggi6JeNyv0wxbJd/1uQH8PSmUAhWuNpM=)
9: 3138322e3235352e332e302f32342d3234203d3e203436303439.roa (hash: 916QQrsogPaFL20AzlqFBpH82vUOjVu3r9uBPeIXCrE=)
10: 3138322e3235352e342e302f32342d3234203d3e203436303439.roa (hash: RKttGS5PwJEjpYkkwnYXSXMh2rGPID7tZySIx4z8fXc=)
11: 3138322e3235352e342e302f32322d3232203d3e203436303439.roa (hash: WTHU/5ITLWOOuxdsynAF/KxIVTWen6H2gEJyk6lWAdc=)
12: 3138322e3235352e302e302f32342d3234203d3e203436303439.roa (hash: CAyWkxyi9LMtsrHYjfAG2boS5jHeuAANIsKyYBMp0r8=)
13: 323030313a6466303a62353a3a2f34382d3438203d3e203436303439.roa (hash: 2VAQFfeqQhEyAnMrmaTI9sSR0U2G484A8xe93rrxtaE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 19:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c5:f4:40:c3:98:36:8c:38:29:e4:37:2c:03:3e:86:c5:f3:e0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B
Validity
Not Before: Feb 28 10:06:17 2026 GMT
Not After : Mar 3 19:49:17 2026 GMT
Subject: CN=1CE08BC61D4073D857E0A4A1B0EE5B6F8F3172F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:23:74:34:0d:15:39:ce:72:c0:f8:a6:77:
ac:7e:e1:80:ec:a0:7b:d0:cb:7d:7c:17:56:21:30:
e7:fd:89:c0:a2:76:c3:25:96:47:5d:d1:45:d9:2b:
8e:86:47:6c:00:b7:61:a1:b1:3d:d6:31:11:70:bf:
c6:c5:d3:e9:96:9f:ce:dd:8f:f4:5f:56:6d:86:11:
84:89:fc:ad:82:22:31:45:8a:ab:11:85:59:f6:cb:
cd:a1:19:36:67:28:9a:c7:79:84:4c:79:50:b6:1d:
94:36:ad:25:69:18:3c:92:e9:ee:58:78:74:49:5b:
36:97:80:e8:23:9e:bd:d2:2d:b7:fe:94:a6:8e:72:
08:60:30:5c:f3:c3:2d:53:06:11:d0:43:be:83:aa:
84:09:7e:10:ea:8f:83:54:3b:18:fb:36:51:79:25:
19:72:37:4e:4a:13:7d:a9:f8:2a:04:91:96:fc:ef:
a1:f7:cf:b8:1d:d3:fc:45:c0:ff:31:fc:12:3e:f4:
fa:9c:51:6c:4e:fd:8e:83:eb:30:dd:3b:d2:26:cc:
2f:eb:64:a1:db:84:18:c9:7d:32:a3:87:10:b4:9c:
86:2c:3a:14:4d:d7:48:d8:f4:06:df:e2:2e:56:8e:
36:a7:10:e2:55:d5:5c:d3:47:5c:73:81:3b:94:d1:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E0:8B:C6:1D:40:73:D8:57:E0:A4:A1:B0:EE:5B:6F:8F:31:72:F1
X509v3 Authority Key Identifier:
keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e7:84:73:d6:5f:c2:8a:27:75:ce:8f:8d:26:b4:cb:3c:43:
7e:83:88:62:c2:8a:a5:d5:15:27:cb:f7:21:5e:65:4e:38:04:
e3:f2:12:78:05:ba:58:fb:99:c9:20:51:b2:d1:b7:31:7d:c0:
aa:d1:be:12:87:64:a4:1f:66:fd:0c:5a:be:6a:4f:bc:5a:dd:
87:14:9d:8d:65:6a:28:35:64:2c:a9:e3:fc:28:b7:a1:22:b7:
61:62:46:3d:fb:ac:31:d6:df:2a:8f:cd:0b:07:af:53:25:5c:
70:80:64:71:2b:2a:1f:84:41:a9:56:29:e1:bf:df:3d:95:64:
85:a1:19:06:91:2f:f1:3d:63:2a:42:fc:1d:ae:a2:df:95:b3:
6d:37:2b:06:33:bb:e2:66:ca:de:4a:e4:0e:ca:f8:8d:41:98:
b6:9d:a5:93:94:48:ca:b4:68:2c:32:34:f7:dc:00:c7:ac:5c:
46:39:04:c7:6a:a7:26:05:7e:d4:5f:c6:95:c3:41:b8:c4:fd:
bf:72:d1:21:87:55:bd:c4:89:82:d7:76:a7:2c:e8:cf:95:2c:
bb:75:f1:6f:d3:f3:23:9f:af:80:85:ff:65:a1:a9:80:72:51:
0f:f8:83:31:7d:7c:0e:9d:51:5d:23:c7:d1:ea:62:77:ef:cd:
d5:d7:dc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:45 2026 by rpki-client