
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft
File: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft (raw, json)
Hash identifier: K8ICduS8lz1fe/zKcFmS2nun8Kl8lQnjUOzQjKOIYOo=
Subject key identifier: 0E:9D:6B:EE:65:DA:B8:1A:0D:7B:1E:F4:9B:F1:B7:D3:CD:72:3E:54
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial: 25712B409B574CC8EBBB13906C221957155649AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft
Manifest number: 0572
Signing time: Tue 17 Feb 2026 22:31:21 +0000
Manifest this update: Tue 17 Feb 2026 22:26:21 +0000
Manifest next update: Sat 21 Feb 2026 09:49:21 +0000
Files and hashes: 1: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: ioskptQxOnwUzRvlUOwTLhn2ti6yWbMMGvP/wH2z3Mo=)
2: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: KzgLs/LHXiYp6dca8nzIUvPjUz6brhBBX/CAtP5nMik=)
3: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl (hash: mKjNg3pOfUvnNehLatxuWU5G1An4sexc6vA3VIM45V0=)
4: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: nnj0KLDw9ngWzorUbdMHyDWYfETgXpzXO3uTEwZi24Q=)
5: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: 2g+NXNHiM0B7rPdW5gGiKA7VbkoVsAcew6mjSoTkRN4=)
6: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 6KFCBq0GeLMij9zX0LHtO8AChuye1d1F56fk0H8ZhzU=)
7: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: e4sjRhvp6mUHQQONhwMETVFyiY5/bOpZffIZ6/yt038=)
8: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: V9Mppv9SlbFw56ep+HO54EeH/ulvHDySp4xMGMMMAGE=)
9: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: 8rLhPZ1kO1OPhZMtRSj4vbuT69WDh/TKZCdll2MOUmQ=)
10: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: 6ji1OwtEeZ5gDOUwTpL/nrhK0wgzay4u+O8JbfpMxKk=)
11: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: V3630RXZfBbv0izTqUqFayseBZlNQ8xYG082iWZg+6Q=)
12: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: +/NKATGB5uQMThm7QeKGnVHTe5xcp8ImXTgyPu6itTk=)
13: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: /WT3CcLt/Wqy1totp1szjJmd03e3/iGONHlBm57jO1k=)
14: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: b9Rswz6WqKP1CD5vZ2CgK/WpMe7q+ItG8/U5zV32DeE=)
15: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: Wyb0UWY/xry3f5h6Pv1OX1FeBIM6n1lp2HY/CxbmmFM=)
16: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: mm2pBp9XNAO/aA6cLfKsVFgLvpIqWU1n8jnigUN46c4=)
17: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: bZIz402y8HeI28WEFFpDnjFVUP7vZBGPQIM5w8kbN1g=)
18: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: bw8Hpu0FONj3uQaL/ySP1D3C1YAb9B5NcNozVjL3dTY=)
19: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: Ou1QMOVVtAAa367JCP3byx/XbB4/rWHxtoD7UtBXQ9o=)
20: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: WYMvSvVQ7LmzdzI/Y9IjmjwPnuhAowKHbIWl+8CxoTM=)
21: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: Vj2lcWZTEwWf2AmX1t9dPjT0UD/5pkYVDIvaHli/TFM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Feb 2026 09:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:71:2b:40:9b:57:4c:c8:eb:bb:13:90:6c:22:19:57:15:56:49:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Validity
Not Before: Feb 17 22:26:21 2026 GMT
Not After : Feb 21 09:49:21 2026 GMT
Subject: CN=0E9D6BEE65DAB81A0D7B1EF49BF1B7D3CD723E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:2b:f9:2b:0e:7f:5e:8b:c7:8c:4f:97:e8:
48:93:9d:f6:76:f3:60:43:32:eb:f4:e4:0d:f1:a4:
35:39:17:9a:ae:ce:3b:2c:b7:c8:5a:24:f7:2e:b5:
86:9e:50:7f:a7:ab:93:95:b2:6b:80:a4:26:39:a0:
91:a4:68:c6:62:3e:5e:60:f8:e7:6c:dc:90:d5:8f:
fb:c6:a5:1f:5e:85:b1:a4:06:19:7e:1f:d8:ab:a5:
a7:c4:d8:00:78:d6:30:00:e0:5e:7d:12:3c:21:be:
cd:93:c9:a1:42:97:8c:ae:af:74:b2:dc:2b:d9:9a:
d3:c2:c8:0a:7d:9b:a2:eb:2c:48:7a:de:2e:7f:b0:
ff:43:75:40:67:6a:39:a9:c0:87:95:f3:c4:9f:8f:
1b:dd:66:b6:9d:9e:60:6a:73:12:5e:57:3f:86:36:
a7:fd:6d:48:97:16:77:96:d4:2f:6e:4e:e6:b8:76:
f8:04:22:41:2e:3e:b8:5d:3a:b7:b7:f4:0f:48:e1:
05:3b:12:d8:95:80:fb:ee:bc:dc:85:52:d0:36:50:
1b:4f:d7:9f:28:2a:0c:17:16:d0:07:29:ea:95:5b:
c0:0a:bc:b3:6d:3a:eb:36:8e:16:e1:77:5d:c4:0f:
ba:a9:df:94:62:1a:6f:e7:f4:36:84:96:a0:6a:3c:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9D:6B:EE:65:DA:B8:1A:0D:7B:1E:F4:9B:F1:B7:D3:CD:72:3E:54
X509v3 Authority Key Identifier:
keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0a:ac:88:c4:da:f5:fb:f2:8b:ed:ec:f5:66:61:d6:d2:63:
1f:a3:a0:d9:87:5f:d3:d2:6e:65:74:ce:86:37:66:d0:c2:b8:
2f:18:bb:bb:58:70:03:80:24:ce:da:d0:71:3a:29:20:7e:a9:
11:55:60:b8:07:e1:6f:ea:b9:5e:24:ba:b3:27:8a:db:13:40:
1c:55:51:af:89:55:d0:fa:8f:05:a1:74:0b:13:6a:b5:e4:c1:
2a:92:6a:af:70:02:97:f8:95:2c:8b:a5:80:c3:ca:3b:4b:08:
29:6f:68:59:68:34:6a:fa:3f:f1:98:66:7f:36:e7:94:fb:6e:
d3:df:9f:06:9a:f6:28:af:2f:12:ad:32:54:db:9d:fd:56:2c:
87:e6:48:5e:59:e1:ab:21:c3:c4:d6:86:d0:ab:3b:88:c7:02:
79:20:68:65:ba:e2:fa:b8:23:5a:43:99:28:54:94:9d:27:15:
38:a1:37:fa:f5:ea:e3:fe:91:de:43:b4:f0:46:1b:8e:1e:ac:
22:17:16:a2:07:1b:28:d8:1a:f5:f5:f2:71:81:71:0f:14:11:
7c:81:ad:e1:fb:fb:c2:6c:36:59:8f:9f:c7:4d:01:60:0b:71:
bc:a3:9b:d7:48:5a:06:40:2d:73:a6:a9:62:98:f1:39:65:b9:
47:0f:1a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:47:28 2026 by rpki-client