
$ rpki-client -vvf repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft
File: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft (raw, json)
Hash identifier: 4SBJvKE1JKm8SgS7ry/O4wGAxcI0LQqVnQ/n80k3FRE=
Subject key identifier: 72:51:B0:18:0D:73:FB:59:42:56:7D:FD:A1:45:37:9E:39:5A:12:63
Authority key identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0
Certificate issuer: /CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0
Certificate serial: 65741B059FB6FD11D608E7120D28B23C4BFE68F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft
Manifest number: 0249
Signing time: Thu 19 Feb 2026 12:32:01 +0000
Manifest this update: Thu 19 Feb 2026 12:27:01 +0000
Manifest next update: Sun 22 Feb 2026 14:36:01 +0000
Files and hashes: 1: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: BdsS4s7jPHig7lZYR1kjJB8vTutisx05tJ8qnuC/vHI=)
2: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl (hash: S/dOoWxJ360XCau+xzbPOCfiY30+4m/kCmbhZmxFWvU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl
rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Feb 2026 14:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:74:1b:05:9f:b6:fd:11:d6:08:e7:12:0d:28:b2:3c:4b:fe:68:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0
Validity
Not Before: Feb 19 12:27:01 2026 GMT
Not After : Feb 22 14:36:01 2026 GMT
Subject: CN=7251B0180D73FB5942567DFDA145379E395A1263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:33:68:4a:ef:a2:33:f0:b7:4a:60:f2:41:
34:05:9f:5b:c1:30:b7:48:f1:a8:d2:81:91:3f:be:
b9:56:08:8d:f9:8b:18:14:15:f0:f9:c9:15:02:bf:
be:43:7d:c1:d0:92:de:8e:59:7b:97:70:f9:0a:2a:
ca:c8:b3:e9:db:c5:c9:24:f5:2d:c1:6e:21:ed:e7:
c8:1b:2d:e2:3b:cb:e1:31:1c:49:a4:b4:36:05:2e:
1f:2b:66:d6:39:b0:f3:b8:2f:9e:9e:41:c0:9e:4c:
17:84:e0:84:45:5e:90:e7:d0:98:ba:c9:64:a4:bb:
f0:e1:94:22:de:3e:57:80:58:a4:eb:59:6c:f3:73:
9f:b1:57:0d:07:3b:d7:a5:e1:b1:02:98:dd:5b:0c:
b9:83:0c:a2:ac:2b:8a:b1:de:4b:2b:f5:85:d0:e9:
bb:d0:a0:e3:f5:7d:4c:4c:65:d8:d3:c1:44:1c:e5:
68:61:59:f8:ff:57:31:02:7d:3a:9d:77:d0:2c:1c:
e3:26:7e:25:6d:70:df:ff:93:f6:17:95:b3:4c:2b:
9e:cd:f7:bf:c2:74:12:89:8d:d0:a3:30:cd:46:40:
db:6f:2e:f5:26:88:71:7e:eb:93:3a:9c:63:a4:44:
f5:56:da:94:fe:ed:40:73:cf:a3:86:26:ea:c6:64:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:51:B0:18:0D:73:FB:59:42:56:7D:FD:A1:45:37:9E:39:5A:12:63
X509v3 Authority Key Identifier:
keyid:D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:90:61:e6:c6:18:79:59:f7:ab:9c:95:57:b3:a4:26:a3:17:
4d:29:bb:a7:8a:d4:be:6f:2c:0d:22:c9:d1:f9:3f:46:b6:03:
ff:fc:2b:2e:cb:7f:c9:7d:fa:aa:cb:cf:1a:7c:b7:42:7c:d3:
ee:b9:21:26:a8:f4:85:74:9c:60:5d:cd:d8:50:a0:47:93:f4:
22:41:72:0e:26:42:63:a9:ca:e3:2a:30:bd:cc:fe:80:35:c1:
a3:7c:11:17:28:c0:6f:bf:bc:d2:c1:6d:6e:ea:54:e8:ef:e3:
b2:48:9f:9d:80:ba:1f:95:d8:e1:5b:01:bb:aa:dd:71:90:0d:
ab:ec:e5:0a:5a:d9:e6:57:1d:48:f8:1a:28:b3:f4:af:50:3f:
f1:ff:bb:c6:fa:f2:db:59:fc:e8:59:2f:96:31:5f:2c:66:e2:
7d:70:92:1c:f9:65:bc:0f:47:da:65:6d:57:ab:23:13:3c:dd:
2c:33:38:19:d6:c2:87:2c:04:8b:fa:38:6d:15:2e:5f:3c:9c:
6b:93:ec:ef:e3:4a:ce:32:eb:12:ab:d7:91:08:5c:57:46:d2:
ac:84:7d:d3:38:bb:6f:c1:c0:c6:5d:a4:83:d4:4e:a6:62:43:
a7:17:0d:b8:1c:8b:b4:62:81:76:61:59:01:7e:c0:67:b6:ee:
0c:cd:59:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:47:21 2026 by rpki-client