
$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
File: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft (raw, json)
Hash identifier: FS7EzhGDZfGzhjNgIzfXhBuOe3YEfjV5IQGjlUte4mI=
Subject key identifier: 61:38:67:9B:E2:34:82:73:9E:82:59:5F:E8:1E:57:9B:37:BD:4B:C9
Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD
Certificate issuer: /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD
Certificate serial: 5B2D8CA5211A68CC12901E56C39DB9DE11252204
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
Manifest number: F3
Signing time: Sat 07 Mar 2026 12:31:17 +0000
Manifest this update: Sat 07 Mar 2026 12:26:17 +0000
Manifest next update: Wed 11 Mar 2026 00:17:17 +0000
Files and hashes: 1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: ksjiqtTAWCgIRtUjPZtNzrKoQay+iOF9ttjO6dpoPs4=)
2: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl (hash: DD8HUr1SkkhRBgv6erKmP+btuEO9p30yAxnZoCOt5BM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl
rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:2d:8c:a5:21:1a:68:cc:12:90:1e:56:c3:9d:b9:de:11:25:22:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD
Validity
Not Before: Mar 7 12:26:17 2026 GMT
Not After : Mar 11 00:17:17 2026 GMT
Subject: CN=6138679BE23482739E82595FE81E579B37BD4BC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:1c:05:2d:4a:6b:1a:ed:13:17:63:61:33:
89:e0:d1:f9:4e:89:c2:f3:a3:66:7c:10:fd:e8:ff:
f6:7c:c1:87:10:15:be:ab:3e:03:ac:98:94:ce:75:
c3:5f:ad:0f:79:11:86:0f:ee:9e:b1:02:27:9a:c0:
e3:f8:ec:4c:97:ed:60:94:72:34:fb:c9:14:ed:3e:
dc:25:7a:ff:50:3e:29:8b:22:73:76:ef:9e:24:ae:
23:0f:47:5f:6b:84:55:d8:2e:24:59:34:85:c7:ff:
6a:4a:6f:f8:f4:03:aa:33:5e:6a:83:de:c7:88:08:
67:85:1c:e1:3c:bb:d0:bd:c5:00:9c:bf:20:8f:e2:
df:ec:a3:fc:28:6b:85:5d:e4:26:94:55:27:03:30:
77:30:22:3c:7d:5a:94:4d:4e:02:7c:e1:33:6f:49:
f6:55:de:b9:ef:40:69:c4:1a:0a:68:a3:9a:5c:95:
cf:2b:08:ad:65:1c:63:4b:7f:f9:1f:79:69:dd:77:
d4:5d:6e:4e:68:80:27:c8:c6:bd:e6:f2:5a:17:ef:
4c:c4:c7:79:84:b5:9f:65:68:43:6f:16:9a:1f:5a:
e8:8a:83:d2:8b:71:d3:fd:79:73:67:ff:31:77:b0:
c8:04:77:2e:33:ad:c9:ca:f6:43:9b:12:e5:45:4d:
1e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:38:67:9B:E2:34:82:73:9E:82:59:5F:E8:1E:57:9B:37:BD:4B:C9
X509v3 Authority Key Identifier:
keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ec:75:5b:d7:4a:6d:1b:c5:19:60:58:03:38:11:73:23:01:
fb:08:96:55:0a:7f:ae:a8:72:b8:62:a1:85:bb:4a:52:c6:7f:
10:14:44:35:2d:f3:48:80:de:a4:f7:27:ed:e8:c3:b6:a1:41:
d9:15:19:4c:e9:e7:39:d1:7c:3c:45:de:94:69:c9:d5:0a:bc:
2d:36:e3:41:e1:49:6f:6b:bd:9f:9c:14:21:ca:a7:21:c8:9f:
65:cb:94:42:04:4c:a4:08:cb:07:24:29:52:55:b2:ee:27:6f:
31:e4:60:a6:36:a9:7b:8f:5a:76:11:f3:8e:62:9d:da:b5:f2:
b5:81:27:04:77:b7:52:30:1f:54:0c:68:00:05:86:16:86:0e:
65:96:e4:82:2f:42:5d:84:14:6d:f0:4e:22:15:df:ec:50:dd:
97:d5:d0:54:a0:36:bd:d5:be:4a:67:ea:7c:66:13:a1:bf:b7:
f1:1f:88:2a:d0:85:11:70:ae:b1:75:10:1b:d9:ce:6e:54:4c:
e3:4b:0d:99:6d:4a:d3:e6:9b:01:6b:1c:3e:79:ae:6f:ab:24:
3d:86:d0:a0:db:7f:48:eb:2b:28:e4:b9:df:b2:67:af:69:ad:
e6:7c:96:c2:38:75:00:33:5c:ac:a8:59:e5:09:4d:74:7b:5e:
c1:51:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:38:25 2026 by rpki-client