
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
File: F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft (raw, json)
Hash identifier: WK2XKgD/0e2u7TjT1UMYhi6q7cyKG5A+Y6MtdCvAyDY=
Subject key identifier: DC:23:7A:75:1D:CA:1A:F2:6F:36:E7:F6:A8:19:2F:AE:35:19:8D:82
Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33
Certificate issuer: /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
Certificate serial: 30BB6C38EFD1A973FC632F3C7F09D4A476008FE7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
Manifest number: 0567
Signing time: Wed 15 Apr 2026 22:02:19 +0000
Manifest this update: Wed 15 Apr 2026 21:57:19 +0000
Manifest next update: Sun 19 Apr 2026 03:47:19 +0000
Files and hashes: 1: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: WCf4k80HtpWJXreA4Q6XD5iDNEeVQ9AU8BVWi8IEoSM=)
2: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: ykBCC6a4TUa9u53qD+3M0qE2NkGoJtCXa3OdoYw7FhA=)
3: F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl (hash: 1g0Eo6jY8Yh46NzkTgJc4RviV4rSbTadFIqKDv9SA9k=)
4: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: 4LpQRgrp7oBVnTYb85mIa1GKQ4oBc22IhdekLi1TA6c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl
rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 03:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:bb:6c:38:ef:d1:a9:73:fc:63:2f:3c:7f:09:d4:a4:76:00:8f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
Validity
Not Before: Apr 15 21:57:19 2026 GMT
Not After : Apr 19 03:47:19 2026 GMT
Subject: CN=DC237A751DCA1AF26F36E7F6A8192FAE35198D82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:a5:de:04:40:bf:d5:ec:ae:43:4d:cf:c3:
7e:c2:02:74:79:8d:57:df:35:1f:ef:41:87:6f:16:
38:69:33:b2:84:c7:b3:02:35:b2:b4:15:27:56:84:
e2:f1:48:92:ad:22:3c:1d:f4:ec:84:f1:c4:55:91:
c3:e7:7f:1c:d2:a6:3f:8d:a8:dd:5b:cc:eb:49:ef:
8a:a1:ed:b6:52:32:46:dc:42:74:45:05:19:c0:df:
b5:55:e3:2f:d9:13:95:08:65:01:8b:0e:17:c3:63:
b7:f8:91:b6:40:3e:7f:e9:f1:90:7d:20:84:33:3a:
80:6c:b3:52:ff:50:ab:b4:0c:14:3a:d0:05:36:f9:
f1:af:78:4f:2b:c5:ce:91:9b:c4:67:a6:c6:b9:ae:
74:95:1b:14:78:1b:81:c3:60:47:cc:93:24:54:c5:
a4:ac:67:c4:bd:67:a0:96:56:05:49:c0:a6:2c:39:
54:66:e2:c0:a3:1e:ad:c5:99:1f:1f:9f:3b:f8:25:
a1:9f:9e:89:09:7b:0a:f0:02:52:c1:24:72:89:ff:
91:3e:9b:c2:25:a4:ec:06:df:59:13:5e:fe:dd:1d:
72:f0:de:d5:1a:d3:b3:ed:6e:4c:9e:cd:bd:b1:4b:
93:cc:e0:1a:65:a0:f3:ec:8e:f2:a4:8e:97:7b:3e:
c6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:23:7A:75:1D:CA:1A:F2:6F:36:E7:F6:A8:19:2F:AE:35:19:8D:82
X509v3 Authority Key Identifier:
keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:51:c5:a1:a4:d7:f4:a1:c3:98:fd:be:39:58:71:53:ef:7b:
17:47:69:02:c7:4e:ec:e2:09:22:60:ab:99:b2:59:b8:7c:1a:
99:d1:fa:04:99:4b:be:06:59:fb:be:a4:3a:0c:2b:e7:05:20:
29:c3:39:99:25:a3:23:78:39:e1:e8:e1:b0:f5:ea:a8:72:02:
91:cb:43:60:75:05:1b:20:91:ff:2a:f5:5b:6f:f8:5c:52:07:
23:35:ce:3f:fc:ce:a2:8c:0c:d8:5f:a9:88:6f:03:18:5f:a2:
3d:4d:17:62:db:2f:ec:d2:4e:a0:16:56:98:52:70:a7:e4:f7:
40:33:58:06:bf:0d:6e:5c:41:fa:cc:b5:a7:a7:db:64:11:43:
72:e3:70:86:a0:01:91:f2:c7:9e:a7:50:c8:f7:7b:9d:4f:fd:
90:ec:9d:ba:45:45:02:3e:e2:d4:d3:c2:b9:eb:1e:8b:d4:79:
a3:06:f9:d9:5f:0a:d8:97:e8:7b:f0:1e:2c:e8:49:c0:88:d1:
b2:46:77:83:6d:70:e5:c5:92:96:0d:0a:61:af:d7:6e:3d:c5:
5e:1b:ce:57:8a:1b:db:72:af:6c:cc:b0:5f:9f:35:e5:2e:cc:
03:f5:7b:c4:b8:a6:9c:54:63:32:93:3d:3b:19:34:4e:77:96:
c6:ee:3e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:22:05 2026 by rpki-client