
$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft
File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json)
Hash identifier: XTgiGSzbhlyiNJKroLMo4PZrGkxz0HV+xAF0poboiRQ=
Subject key identifier: B6:47:E7:21:D2:76:92:CD:79:82:40:DE:0A:43:38:AB:D8:31:60:4C
Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD
Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD
Certificate serial: 1A6A015DDCF5B7604433FB03BD23706D33682E1C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft
Manifest number: 012E
Signing time: Fri 06 Mar 2026 14:42:59 +0000
Manifest this update: Fri 06 Mar 2026 14:37:59 +0000
Manifest next update: Mon 09 Mar 2026 17:52:59 +0000
Files and hashes: 1: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: XsjHTUcHkRjkYPKHbvijLc/iJA9BjCnhWYDW42TR7Mc=)
2: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: zJyhGvQzaDs1uZ/vkTZ4lisg94de9IwLPmGapH9vBW8=)
3: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: frMDYjZLvx/PXC3WNp74+r5lWIhNgG/QgNa89ajNdXU=)
4: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: B9KhJfiPLTdFyEaKzk2Aum8U3nc9C/aYPDj+Ohv6SaM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl
rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:6a:01:5d:dc:f5:b7:60:44:33:fb:03:bd:23:70:6d:33:68:2e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD
Validity
Not Before: Mar 6 14:37:59 2026 GMT
Not After : Mar 9 17:52:59 2026 GMT
Subject: CN=B647E721D27692CD798240DE0A4338ABD831604C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:ec:27:3d:f4:82:09:84:5f:4d:14:fe:15:
f2:d5:6b:37:32:3d:8f:08:c1:60:bd:c8:31:98:ba:
f0:99:e4:15:6d:f2:a6:a3:8e:ee:9e:3c:20:32:55:
03:a0:08:d2:0f:de:ae:04:3e:0e:3a:ad:0a:f6:d5:
7e:3f:c2:85:af:79:ab:5a:a6:b7:eb:bd:de:09:82:
c5:e1:d4:c6:da:7d:8e:98:df:30:1c:dd:2c:a9:bc:
88:c2:92:0e:f5:9a:13:2e:e0:1b:0d:f7:7b:81:f2:
dc:da:d1:f7:f0:b8:5d:ce:8a:b0:fc:9a:3b:c8:42:
71:65:27:d0:8b:98:06:d5:b8:47:23:ae:83:68:12:
8c:9c:25:5b:f6:22:4b:3b:14:78:80:95:e1:3b:e2:
a4:47:ff:80:4c:9e:09:62:5d:dd:4f:c9:0c:71:c7:
e2:98:12:49:3f:3d:9f:a4:63:7f:9c:71:ab:c9:21:
a5:17:e7:15:e1:8f:8b:c2:ba:08:a2:3a:b3:dd:6b:
37:5d:9c:14:9e:a8:60:61:04:f1:e4:8b:c9:48:73:
41:45:0a:53:e8:c2:f5:14:b1:da:18:03:7e:61:88:
83:cb:32:4c:56:ef:e7:79:43:5e:45:bb:50:a4:e2:
9b:16:f4:ad:69:79:73:21:23:15:01:50:5d:ac:09:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:47:E7:21:D2:76:92:CD:79:82:40:DE:0A:43:38:AB:D8:31:60:4C
X509v3 Authority Key Identifier:
keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fe:bf:bc:29:55:19:7b:d1:76:d8:92:24:e9:76:e8:5b:ff:
7b:bb:61:56:e6:dd:5c:2c:85:82:4e:76:5f:8d:d2:5c:d7:e4:
a2:d4:69:4e:b3:69:6f:22:d8:5e:37:46:09:3d:05:50:33:07:
b5:cf:de:13:3d:02:b7:a7:83:00:f7:5f:a6:9e:c8:dd:44:ad:
81:9c:96:08:97:9c:00:93:f5:51:d8:d9:d4:04:f9:29:7c:b4:
27:46:ec:3b:97:54:04:55:ce:76:02:be:6f:57:b8:94:b3:8a:
2d:4c:32:11:ea:d3:57:d1:fe:ec:90:06:07:0b:3d:c6:c2:91:
2e:3a:3a:7f:e2:0b:86:ce:80:d2:b8:fa:fe:fd:94:47:82:b8:
40:6c:1f:6a:ec:1e:b2:ee:10:74:2d:00:f6:1a:3a:61:6d:27:
c3:35:10:9a:f2:67:7e:59:d2:db:a5:ce:96:00:48:15:a4:d4:
db:f2:d1:a6:e9:0b:a7:d9:21:da:94:f1:aa:3c:90:28:c0:25:
07:75:72:5a:21:84:46:ee:7e:69:3f:71:ce:a2:34:6d:b2:49:
77:06:71:72:8f:d6:d8:41:85:01:14:54:e7:18:76:b7:21:13:
cd:59:a8:c3:83:a7:73:d7:31:27:c6:3c:d9:c1:3c:48:a1:9d:
1d:79:16:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:48:43 2026 by rpki-client