
$ rpki-client -vvf repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft
File: C8AC2212A272ECEAE88D5232072578922C0E2E05.mft (raw, json)
Hash identifier: BbcRX03nlsaJHqrJLHz29mmktA+1MLM5oSSzr71ih9Y=
Subject key identifier: 21:E1:30:D1:26:76:01:02:86:3A:85:A4:E3:2D:BE:4E:D6:15:E8:B5
Authority key identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05
Certificate issuer: /CN=C8AC2212A272ECEAE88D5232072578922C0E2E05
Certificate serial: 0C3A482FB3315FC7D15A5B455A3B32072E4BBAAC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft
Manifest number: 0410
Signing time: Thu 26 Feb 2026 11:00:07 +0000
Manifest this update: Thu 26 Feb 2026 10:55:07 +0000
Manifest next update: Sun 01 Mar 2026 12:37:07 +0000
Files and hashes: 1: C8AC2212A272ECEAE88D5232072578922C0E2E05.crl (hash: PxM9nXPq5l5aMCg4RNgY8NdMO0Y4drvFafFsS40Uxnk=)
2: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: gVPQrVQX9oWdBIjWPQSJvyIQ3AEVj+vaeGmFfblKRbs=)
3: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 7+14GGdnKYA1ZHAWIx7SieKlT4Qpyh9xXAdG5rCu8fQ=)
4: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: gNg3pSVKH2ZGTQUKj2gYHIgoAzjmyWJ8bVXnPWnC+00=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl
rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Mar 2026 12:37:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3a:48:2f:b3:31:5f:c7:d1:5a:5b:45:5a:3b:32:07:2e:4b:ba:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8AC2212A272ECEAE88D5232072578922C0E2E05
Validity
Not Before: Feb 26 10:55:07 2026 GMT
Not After : Mar 1 12:37:07 2026 GMT
Subject: CN=21E130D126760102863A85A4E32DBE4ED615E8B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:76:89:57:4b:0b:51:86:ef:6e:ce:d8:f6:72:
51:7a:85:ae:e9:94:75:a1:3f:c1:1b:5a:be:10:af:
4f:bd:44:f5:f7:7c:ea:e4:fe:5f:76:6d:09:1e:69:
ca:39:a5:4f:56:65:41:fb:2d:4e:cc:0e:7a:3c:29:
2c:02:f6:e9:77:92:b8:3f:61:02:02:26:61:a2:a3:
4f:bc:a9:88:35:30:30:bf:70:32:a2:b3:fd:a2:6e:
9f:b5:9b:56:62:40:c5:9f:74:69:dd:06:64:7b:86:
92:05:4f:98:b6:3a:65:18:7f:3a:75:76:4f:87:3e:
6a:d5:11:34:31:16:b1:c9:e6:1e:d0:1a:52:5a:1d:
5f:57:a7:0e:75:86:05:c2:58:9b:ca:61:1a:0e:54:
80:d3:74:82:9d:72:ad:95:36:cf:3f:63:39:74:39:
1b:e5:d3:9f:49:9f:5e:91:c2:87:4a:5c:cd:c9:21:
15:3a:2f:f6:b8:0c:ff:07:98:e5:51:21:e6:c7:d2:
15:42:45:f7:f5:e0:13:b2:f8:f8:90:80:3d:91:c4:
f3:3b:d0:f0:18:2b:c5:45:1a:18:db:24:83:58:59:
ef:ce:c5:a6:96:6c:50:b1:93:69:14:0e:59:3b:d0:
ae:ee:bb:d0:1c:62:2a:26:43:89:7d:f1:a2:16:0e:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E1:30:D1:26:76:01:02:86:3A:85:A4:E3:2D:BE:4E:D6:15:E8:B5
X509v3 Authority Key Identifier:
keyid:C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b4:ea:ab:49:00:1b:49:60:3a:63:87:2a:dd:9f:43:2e:48:
5b:85:31:70:9c:47:8a:96:94:f9:9d:cf:4f:83:c9:11:44:8a:
5a:7b:37:ef:c2:f1:35:da:f8:3c:7b:e1:d4:d4:b9:ad:19:dc:
09:67:42:61:32:16:54:bc:9b:82:39:54:b1:7a:9f:a8:81:19:
3e:60:2a:bd:da:65:89:02:68:ce:89:fa:1a:16:f8:37:e3:98:
c0:29:54:58:2d:cf:79:6d:c9:7a:f3:04:f6:76:80:7b:d8:e5:
15:bd:a4:ce:fc:d7:d0:18:53:10:c6:c2:76:d9:c9:50:9f:4d:
16:22:d2:34:42:a3:20:79:c0:4b:08:ed:86:75:c9:1e:eb:9b:
fc:a7:e4:32:ec:4e:8b:2e:16:b2:84:69:6d:55:5e:f1:f4:50:
a7:80:e0:c9:94:27:1d:bd:f6:cd:16:d7:29:74:c4:25:f7:10:
30:43:6c:04:ef:42:a1:ee:cc:98:96:fa:23:44:e7:05:a8:b8:
1e:42:d3:b9:b1:e1:a0:26:70:08:ef:c9:59:1f:aa:b4:c4:14:
6a:4f:76:e1:fa:ed:22:50:56:0c:8b:77:a4:87:c9:42:70:1a:
b2:19:da:6e:c5:d8:e4:e5:c0:c1:ab:c4:d6:37:78:1d:5b:38:
82:22:48:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 03:29:07 2026 by rpki-client