
$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft
File: 3C3C868A5674B425FAE567426BCB238E23AE20AC.mft (raw, json)
Hash identifier: RpygAqEY/nwzJuPRADviIuFJA435UJ1CzNMI87gnAb4=
Subject key identifier: B5:19:FE:8A:4C:08:B1:8A:FB:C8:DF:F3:38:D2:6B:17:57:B5:14:D9
Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC
Certificate issuer: /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC
Certificate serial: 52931B363AD4B4F05502B37C0FF8D0E2DC7AC05D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft
Manifest number: 0257
Signing time: Wed 18 Feb 2026 13:02:01 +0000
Manifest this update: Wed 18 Feb 2026 12:57:01 +0000
Manifest next update: Sat 21 Feb 2026 15:06:01 +0000
Files and hashes: 1: 3130332e3133352e312e302f32342d3234203d3e203338333230.roa (hash: jxUYJQpEaP8bPhyLYtacTJc3csgAE9Hd2kaadYQz8QA=)
2: 3130332e3133352e302e302f32342d3234203d3e203338333230.roa (hash: ldrGJsy+/TLnpHhOovohV+mReZwkU+jIEX++pOvvnkI=)
3: 3C3C868A5674B425FAE567426BCB238E23AE20AC.crl (hash: 8aFajXEeCfp7hX09bJUjeKynCNpPwiMNeuOEZOPJePM=)
4: 3130332e3133352e332e302f32342d3234203d3e20313338383237.roa (hash: 85V6qA8RHEszjBxF6yv2LBrZ9dlUnY8/+0ZLxd1aOzQ=)
5: 3130332e3133352e322e302f32342d3234203d3e203338333230.roa (hash: KZ/BrcpNlnq1GeOoeq+ujqu98XEmwwqQMF5ra78kfE0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl
rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Feb 2026 15:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:93:1b:36:3a:d4:b4:f0:55:02:b3:7c:0f:f8:d0:e2:dc:7a:c0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC
Validity
Not Before: Feb 18 12:57:01 2026 GMT
Not After : Feb 21 15:06:01 2026 GMT
Subject: CN=B519FE8A4C08B18AFBC8DFF338D26B1757B514D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:71:f9:5a:ab:1c:cb:68:c8:29:3f:26:fd:77:
36:9c:13:68:3c:b3:c3:5f:48:0d:fd:7f:d7:75:ce:
1c:89:d9:63:fd:c0:c9:02:96:6e:ad:da:79:37:5e:
10:b6:ac:5d:a1:ab:fd:b1:5c:74:8e:d4:e7:61:03:
8d:f0:33:d5:cc:62:99:82:d6:66:09:a8:22:7d:b8:
a1:29:ca:01:ee:bf:40:2c:b4:6b:a9:c6:55:6e:e0:
f5:bc:c3:80:fc:f8:fa:8d:59:86:4b:2f:b8:15:dd:
a7:c0:52:67:00:7b:32:a3:c1:92:68:8a:9e:4b:31:
2e:74:81:62:d0:b0:d5:38:d3:9c:84:f8:d4:0c:bf:
28:10:2b:6e:53:a3:a7:8f:2d:71:83:be:f3:fa:57:
12:5b:4d:e3:2e:5a:54:66:11:17:b1:95:38:b9:8f:
d1:cd:79:c9:92:8d:a4:c9:f6:9a:a0:93:15:08:5c:
8a:22:60:17:30:ea:94:49:36:c7:77:79:b9:78:43:
cc:c5:3e:2b:0c:84:89:c4:71:9d:6e:77:f8:9d:8f:
02:f6:2a:03:12:98:ab:f5:aa:43:fe:7a:8d:6d:e1:
23:b3:46:ca:91:ef:01:9c:78:ad:77:aa:cf:e7:e4:
67:de:25:10:4d:57:e0:f2:3b:dd:b6:73:79:3f:2f:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:FE:8A:4C:08:B1:8A:FB:C8:DF:F3:38:D2:6B:17:57:B5:14:D9
X509v3 Authority Key Identifier:
keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b7:3b:6f:ee:66:89:a4:74:48:a4:32:bd:58:a3:96:14:94:
2f:67:ba:20:f7:c5:64:b9:df:0a:96:a3:e7:b5:72:f4:b8:62:
88:6b:06:33:74:14:74:6b:dc:1b:8b:6f:aa:9c:14:31:b2:5e:
54:1d:95:f3:a2:8b:97:7f:c2:e7:35:27:97:a0:3a:f3:4f:cf:
e1:be:ef:ae:c0:b5:a1:b5:a7:83:91:95:94:87:1b:7f:1a:83:
86:40:5c:01:ed:58:87:19:53:f1:8d:cb:9e:14:a2:f0:8f:b5:
83:da:c3:eb:dd:93:22:2d:7b:cb:cf:06:14:c9:ae:3b:ff:cb:
92:80:1a:df:3d:4b:74:11:61:c3:48:56:21:cc:f2:c3:45:6a:
fb:e6:a4:fb:44:92:f7:03:2d:85:c8:c3:31:f0:d1:7a:2b:a1:
eb:88:9d:86:6f:9e:7e:bb:d5:d2:fd:47:52:ea:8f:a7:18:48:
8f:d2:a1:48:b9:24:33:9d:c3:a8:9c:f6:e6:0a:a7:6f:60:ab:
7c:4f:c2:0a:e1:47:b9:59:e2:9f:fc:f5:79:06:bc:70:61:18:
f6:2a:10:c2:93:22:e7:ae:84:b1:00:10:6f:79:e8:9b:ac:fa:
d0:04:8a:b8:64:25:7b:6c:4c:cf:df:16:a1:11:87:d8:60:dc:
d2:c7:81:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:47:19 2026 by rpki-client