
$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
File: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft (raw, json)
Hash identifier: obBRiAxj0TkjBiX9Fs4H5sSR0ZHPBzVCuFHfzljbQ9k=
Subject key identifier: 9C:91:5F:CD:F5:ED:4A:66:E1:B6:1C:8F:49:1F:A8:BC:92:12:50:85
Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18
Certificate issuer: /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
Certificate serial: 1C3BFAC293B491F888A3AE5170473D9C08221785
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
Manifest number: 0556
Signing time: Sat 28 Feb 2026 12:30:53 +0000
Manifest this update: Sat 28 Feb 2026 12:25:53 +0000
Manifest next update: Tue 03 Mar 2026 12:31:53 +0000
Files and hashes: 1: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: d7I2swOfny5ecV9M83MtKittywnggYfHKo91PVbmn6Q=)
2: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: o2Fqju9m16OPUHuFcH3wb0i9qMLN8qQR+7Sxr2BaVt4=)
3: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: pTOPZ6sG4IHWMXNqdVtb8BodM+aimyGzFSlPn64NksY=)
4: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl (hash: lq/prhsHwzqBs0lwTJ/SXPIdMwEN7CtuSY6wUd24Kik=)
5: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: 1AWd4OZCytjnMLGGQ3mn/VpwNeJ1KA7954S/Uarlfug=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl
rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 12:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:3b:fa:c2:93:b4:91:f8:88:a3:ae:51:70:47:3d:9c:08:22:17:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
Validity
Not Before: Feb 28 12:25:53 2026 GMT
Not After : Mar 3 12:31:53 2026 GMT
Subject: CN=9C915FCDF5ED4A66E1B61C8F491FA8BC92125085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a8:d8:6b:93:7a:94:e7:ed:bf:e7:b9:68:7b:
f0:72:3a:ba:7b:76:bc:1d:7e:f2:f8:da:d5:00:6b:
6f:33:a7:e3:9f:80:70:84:14:81:50:25:b8:b7:bd:
53:47:96:9e:c6:18:c2:72:e0:bf:a0:ab:b4:f0:3f:
b2:32:72:b9:61:b3:ec:9b:4e:2c:0e:42:86:0a:7d:
d0:04:25:7d:3f:bc:16:ef:c9:22:63:87:f6:17:09:
5a:71:40:78:0f:1d:1f:7d:c2:83:21:0a:e2:dc:5d:
6f:17:35:74:2c:2b:86:6a:ac:ff:25:1e:74:08:58:
a1:4f:d6:b1:25:63:82:86:e1:89:ba:2b:16:af:e0:
19:1c:39:8f:be:1f:e5:40:18:3c:e7:d5:26:0f:0c:
5b:8e:1e:e0:d6:5a:09:47:b9:6a:b9:e0:e0:e0:10:
c4:a1:10:f6:d0:3a:7a:12:e8:77:52:43:b8:b3:25:
d7:43:61:1d:5c:43:d6:34:85:9c:08:60:72:c2:24:
ac:30:ec:e2:a5:1e:20:36:10:07:4b:8e:42:6e:f8:
f1:b0:f4:8c:6c:02:dd:64:25:44:17:e0:68:77:16:
f6:a5:0c:61:a3:49:37:77:27:4d:73:df:d4:dd:d8:
12:be:3b:52:c7:d1:06:91:c3:e2:78:fa:00:3a:db:
b8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:91:5F:CD:F5:ED:4A:66:E1:B6:1C:8F:49:1F:A8:BC:92:12:50:85
X509v3 Authority Key Identifier:
keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0c:f0:fd:b2:d3:75:ba:77:66:05:ce:97:b3:b8:a8:1e:df:
9d:12:f7:fb:12:e8:4b:12:26:13:6c:ed:48:f7:2f:35:1c:fd:
12:d6:c1:e6:d7:4f:9d:87:ce:a0:dc:77:62:47:91:fa:a3:dd:
2b:e3:5c:b1:ee:fc:a1:0d:1e:b2:08:e1:4e:f4:bb:0d:03:85:
7c:71:6a:da:5a:3f:ac:f4:96:a8:0d:f4:86:eb:21:c0:60:a8:
10:ef:71:f5:a6:8d:9f:6d:7a:71:b2:19:bb:a0:7e:da:91:c8:
66:d7:90:b0:1f:70:b3:d4:55:34:4e:8b:b1:d2:5f:1f:61:bc:
81:d0:60:f1:5d:86:d4:bb:3f:28:6f:5e:81:f2:c3:6a:1e:b2:
a9:ed:ed:d7:88:3c:b4:61:d9:ab:e1:69:9f:c8:38:d9:02:bc:
5b:3c:51:87:5b:4b:78:88:f2:e2:fe:0c:8e:f6:e0:bd:6d:ef:
e3:b5:19:7c:f1:f8:dc:ac:eb:f4:13:b9:63:cd:e8:a7:b7:75:
18:76:17:3b:ba:60:cb:bb:67:48:e4:f3:a7:cf:11:55:8f:78:
83:ae:f0:61:b6:2d:a7:92:79:45:2a:9c:d0:21:37:18:fc:cd:
ca:99:69:6b:ce:31:6b:5e:17:c1:f4:31:8a:7c:fc:eb:38:db:
5e:38:d5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:51 2026 by rpki-client