
$ rpki-client -vvf repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft
File: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft (raw, json)
Hash identifier: ukEzsOYRnojAv/AL25hCacMSrzEE9u1VeTRvRqNbS3k=
Subject key identifier: 75:A8:16:BC:DC:29:05:6E:0B:9B:F6:AA:E3:1D:C7:7F:03:87:66:52
Authority key identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39
Certificate issuer: /CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39
Certificate serial: 425A49B836B197A1793E2D32056004396AB3388E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft
Manifest number: 0262
Signing time: Thu 16 Apr 2026 03:40:53 +0000
Manifest this update: Thu 16 Apr 2026 03:35:53 +0000
Manifest next update: Sun 19 Apr 2026 11:31:53 +0000
Files and hashes: 1: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: Y9Gmd38S3GEr38X8sg4lpu4Cyhz7V9M44aocE3LKRAo=)
2: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl (hash: L1WRLESO/JgI4i882tFHkon0MTRNvsU+AEoyMO2qhHQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl
rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 11:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:5a:49:b8:36:b1:97:a1:79:3e:2d:32:05:60:04:39:6a:b3:38:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39
Validity
Not Before: Apr 16 03:35:53 2026 GMT
Not After : Apr 19 11:31:53 2026 GMT
Subject: CN=75A816BCDC29056E0B9BF6AAE31DC77F03876652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:6f:5a:d0:77:cd:98:f4:7e:51:26:c4:84:
b4:77:b2:24:bb:de:a2:62:09:51:37:71:0a:80:63:
be:d9:a0:3f:c3:79:b5:e6:a1:2e:3b:f1:a4:48:10:
dd:57:02:f5:2f:3d:7b:30:1c:90:21:ab:1d:88:0e:
99:77:79:bb:83:cb:17:cb:52:7c:04:39:58:0c:dc:
de:29:41:11:99:6b:0d:dd:bc:21:86:a0:6d:fc:96:
02:54:f5:78:cf:5f:d9:e1:d4:3e:16:9b:91:72:38:
10:bf:98:ef:23:98:b4:03:f6:35:d8:4b:23:4f:d1:
1d:c0:d6:e7:51:26:59:af:41:8f:79:f6:f6:44:04:
83:9b:ea:71:b1:d7:4d:76:a1:1d:e5:a9:be:40:ce:
0c:2d:63:5a:3e:d4:4d:c4:88:40:71:6b:0b:f1:fe:
ca:85:4f:ce:c7:61:ec:be:a4:d5:ba:30:4b:d1:c4:
d0:9b:23:94:b8:c8:5a:e7:98:b0:8d:8b:90:37:92:
4a:05:b3:36:ce:52:13:71:0c:fb:fa:01:09:a5:e8:
5a:24:bf:4f:ff:48:f7:c1:a1:90:08:84:91:7f:5c:
f3:0b:ad:86:a8:e3:da:e9:18:7b:fc:c7:a1:e7:d0:
fc:aa:85:39:d8:fc:a1:ed:09:52:3b:cd:dd:e5:7f:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A8:16:BC:DC:29:05:6E:0B:9B:F6:AA:E3:1D:C7:7F:03:87:66:52
X509v3 Authority Key Identifier:
keyid:AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:83:cd:e5:5e:c4:24:56:21:71:c1:97:e0:86:9b:9e:bb:98:
2b:bd:d6:a4:08:fe:a4:b4:e3:ca:75:6d:fa:88:74:7f:d9:5a:
16:d5:8e:9b:bb:5e:46:13:5f:1b:01:95:3b:20:b1:ff:6f:15:
10:d2:a6:55:19:a9:4e:bf:3b:d2:05:23:66:a0:f4:e2:d9:c8:
3f:d5:17:14:42:67:23:6e:4c:c9:6c:b8:b8:0b:b9:fe:01:93:
76:79:3d:c3:d1:f4:bf:d0:54:66:e6:d5:2a:71:3c:c8:79:6e:
45:19:07:fa:3a:51:17:9a:6a:04:df:a1:89:b4:13:c4:1b:76:
17:40:81:86:72:c6:ff:63:33:b1:84:03:e6:9a:39:66:4a:86:
c6:10:43:32:0e:ba:c0:d2:8a:c8:fa:f7:44:e8:89:13:22:d6:
bd:db:0e:a1:09:f8:d9:78:85:30:4f:3e:8a:8a:a4:72:c4:8d:
27:8b:b2:b7:d6:b5:0f:76:2f:fd:f6:7b:62:4f:9f:75:f5:3d:
e5:de:53:a5:ac:c2:f0:61:98:42:d0:7f:79:97:c1:95:e8:91:
1e:c6:53:d3:22:d5:32:3a:8c:38:5b:a5:48:46:1a:16:77:0e:
a3:95:2a:39:2d:d2:8e:2a:f9:84:9c:64:9e:96:bb:0d:36:b9:
15:04:3c:13
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQlpJuDaxl6F5Pi0yBWAEOWqzOI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVF
RTA2NEIzOTAeFw0yNjA0MTYwMzM1NTNaFw0yNjA0MTkxMTMxNTNaMDMxMTAvBgNV
BAMTKDc1QTgxNkJDREMyOTA1NkUwQjlCRjZBQUUzMURDNzdGMDM4NzY2NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE229a0HfNmPR+USbEhLR3siS7
3qJiCVE3cQqAY77ZoD/DebXmoS478aRIEN1XAvUvPXswHJAhqx2IDpl3ebuDyxfL
UnwEOVgM3N4pQRGZaw3dvCGGoG38lgJU9XjPX9nh1D4Wm5FyOBC/mO8jmLQD9jXY
SyNP0R3A1udRJlmvQY959vZEBIOb6nGx1012oR3lqb5AzgwtY1o+1E3EiEBxawvx
/sqFT87HYey+pNW6MEvRxNCbI5S4yFrnmLCNi5A3kkoFszbOUhNxDPv6AQml6Fok
v0//SPfBoZAIhJF/XPMLrYao49rpGHv8x6Hn0PyqhTnY/KHtCVI7zd3lfz2FAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdagWvNwpBW4Lm/aq4x3HfwOHZlIwHwYDVR0j
BBgwFoAUrQYH6G6j+DNnS7CvGl6n1e4GSzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MzMyN2ZmZC0xZTJlLTRjNTItOTcxNy02NWY4NWU2MzU5ZTUvMC9BRDA2MDdFODZF
QTNGODMzNjc0QkIwQUYxQTVFQTdENUVFMDY0QjM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVFRTA2
NEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3
MTctNjVmODVlNjM1OWU1LzAvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3
RDVFRTA2NEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGODzeVexCRWIXHBl+CGm567mCu91qQI/qS0
48p1bfqIdH/ZWhbVjpu7XkYTXxsBlTsgsf9vFRDSplUZqU6/O9IFI2ag9OLZyD/V
FxRCZyNuTMlsuLgLuf4Bk3Z5PcPR9L/QVGbm1SpxPMh5bkUZB/o6UReaagTfoYm0
E8QbdhdAgYZyxv9jM7GEA+aaOWZKhsYQQzIOusDSisj690ToiRMi1r3bDqEJ+Nl4
hTBPPoqKpHLEjSeLsrfWtQ92L/32e2JPn3X1PeXeU6WswvBhmELQf3mXwZXokR7G
U9Mi1TI6jDhbpUhGGhZ3DqOVKjkt0o4q+YScZJ6Wuw02uRUEPBM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:10 2026 by rpki-client