
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft
File: 6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft (raw, json)
Hash identifier: KrhpqSDBwR1pkh8Miy0rRDpz9ziB2ck0uLPvUY1VSQA=
Subject key identifier: B0:BA:C8:6A:B4:65:85:D9:42:49:4C:DC:92:04:3C:B9:CE:49:04:B9
Authority key identifier: 6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0
Certificate issuer: /CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0
Certificate serial: 38965EF7CD6C9909D0600C84F0855E45C9F471CA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft
Manifest number: 03F5
Signing time: Sun 01 Mar 2026 19:31:36 +0000
Manifest this update: Sun 01 Mar 2026 19:26:36 +0000
Manifest next update: Thu 05 Mar 2026 04:05:36 +0000
Files and hashes: 1: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: L07oO7f3vw0DUvy59vVd0Qr/06ehYbsWyVpjAPoMAUI=)
2: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: GVGKM4eV+MMT2LsZ6I2vKHLbSn/15kKEM082mCeNaT8=)
3: 6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl (hash: KCab89DMFIxwWOyWXt7uCt4dDeeSsf6Wk3wexASJLnY=)
4: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: Y6+vZBez/i96eARFh7xYTRVry9EpC0Oe75C8ykkMi9Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl
rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 04:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:96:5e:f7:cd:6c:99:09:d0:60:0c:84:f0:85:5e:45:c9:f4:71:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0
Validity
Not Before: Mar 1 19:26:36 2026 GMT
Not After : Mar 5 04:05:36 2026 GMT
Subject: CN=B0BAC86AB46585D942494CDC92043CB9CE4904B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:72:4d:d5:37:99:ec:06:17:cc:4c:0a:99:
61:84:64:17:1e:2f:03:77:6f:9f:5a:15:44:62:46:
8f:04:d3:a6:cf:8e:c8:fa:36:2a:2f:ca:ab:e2:8c:
eb:c2:37:39:84:09:e1:9a:d0:9d:97:e1:ef:08:d8:
a9:8a:ce:6c:1b:ef:74:b6:ef:f2:0d:dd:57:ed:ff:
0f:fa:11:aa:f0:fc:21:17:90:56:a0:b5:fb:1e:9f:
fd:4c:c0:cf:40:61:76:15:2c:90:18:60:42:2a:2c:
8f:22:59:cc:df:3a:70:a2:50:04:b8:af:33:39:fc:
7e:8d:4c:ce:54:17:14:56:e6:15:bc:9c:7b:c0:4b:
af:01:c2:37:18:d4:d9:4a:c3:84:c8:63:93:73:ca:
ef:2a:18:1b:9c:ce:9c:20:fd:b6:a3:69:74:06:20:
b8:cb:e6:b6:08:79:8c:35:bd:03:13:28:02:67:9c:
04:e9:6e:0d:a5:d8:07:d9:38:90:ef:5b:df:2d:7b:
06:18:97:12:92:c7:76:13:47:77:99:9d:71:a2:f1:
a2:b1:b6:2c:f0:68:fa:a0:2f:6a:33:ca:7d:e8:6d:
7e:1b:ca:ac:d7:d9:02:15:a1:0c:a6:04:4a:65:22:
9a:fc:e5:bc:d0:05:2b:a5:08:c1:bc:3a:23:65:26:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BA:C8:6A:B4:65:85:D9:42:49:4C:DC:92:04:3C:B9:CE:49:04:B9
X509v3 Authority Key Identifier:
keyid:6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:70:8e:eb:c4:de:b5:14:6d:ed:bf:60:14:b1:bf:e3:8a:c3:
cf:d7:bc:3e:05:4e:3a:b7:e0:f4:c9:92:32:b7:6f:56:74:8c:
f7:95:90:8f:a7:82:71:77:85:c2:a8:fd:7b:58:75:2e:6a:06:
e4:27:ad:23:d0:53:d2:7e:50:82:48:86:ba:68:0b:98:4d:73:
75:d9:33:d5:46:79:b9:42:e1:3f:f7:ad:cf:17:79:ab:06:22:
96:4a:7a:3c:ea:22:b9:14:57:7e:81:93:8e:6b:d8:fd:9c:0e:
f3:b4:c9:b9:62:91:2c:df:e7:62:b6:8f:39:41:db:12:6f:eb:
db:0e:86:a6:15:55:ab:0a:29:41:33:79:85:6e:fc:fe:d9:31:
44:53:27:50:ac:f2:ea:c4:21:48:1b:61:ef:f4:39:07:6c:b3:
1c:15:f9:c2:39:6e:fd:c7:b7:f4:91:91:15:01:ce:da:59:a4:
83:12:63:65:77:a6:95:06:13:e3:0f:98:63:ee:7b:0b:4c:e3:
07:e2:78:22:cb:90:a8:af:c9:73:08:44:30:06:7a:e4:4f:7c:
61:19:3e:1d:3c:0e:36:53:7a:91:8d:df:10:1a:0c:79:6a:fa:
db:66:6f:e7:73:74:82:69:8c:76:08:83:80:22:ce:bb:29:39:
51:6a:7f:fe
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOJZe981smQnQYAyE8IVeRcn0ccowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMx
RUY0MTJFMDAeFw0yNjAzMDExOTI2MzZaFw0yNjAzMDUwNDA1MzZaMDMxMTAvBgNV
BAMTKEIwQkFDODZBQjQ2NTg1RDk0MjQ5NENEQzkyMDQzQ0I5Q0U0OTA0QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHUHJN1TeZ7AYXzEwKmWGEZBce
LwN3b59aFURiRo8E06bPjsj6NiovyqvijOvCNzmECeGa0J2X4e8I2KmKzmwb73S2
7/IN3Vft/w/6Earw/CEXkFagtfsen/1MwM9AYXYVLJAYYEIqLI8iWczfOnCiUAS4
rzM5/H6NTM5UFxRW5hW8nHvAS68BwjcY1NlKw4TIY5Nzyu8qGBuczpwg/bajaXQG
ILjL5rYIeYw1vQMTKAJnnATpbg2l2AfZOJDvW98tewYYlxKSx3YTR3eZnXGi8aKx
tizwaPqgL2ozyn3obX4byqzX2QIVoQymBEplIpr85bzQBSulCMG8OiNlJr0BAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsLrIarRlhdlCSUzckgQ8uc5JBLkwHwYDVR0j
BBgwFoAUb+rhINjNY9aCTYJh97CYYx70EuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YzFlNDlhYi01MGNhLTRiM2UtODIzYy04YjNkMzFiYTg1ZjIvMC82RkVBRTEyMEQ4
Q0Q2M0Q2ODI0RDgyNjFGN0IwOTg2MzFFRjQxMkUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMxRUY0
MTJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy
M2MtOGIzZDMxYmE4NWYyLzAvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4
NjMxRUY0MTJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKdwjuvE3rUUbe2/YBSxv+OKw8/XvD4FTjq3
4PTJkjK3b1Z0jPeVkI+ngnF3hcKo/XtYdS5qBuQnrSPQU9J+UIJIhrpoC5hNc3XZ
M9VGeblC4T/3rc8XeasGIpZKejzqIrkUV36Bk45r2P2cDvO0yblikSzf52K2jzlB
2xJv69sOhqYVVasKKUEzeYVu/P7ZMURTJ1Cs8urEIUgbYe/0OQdssxwV+cI5bv3H
t/SRkRUBztpZpIMSY2V3ppUGE+MPmGPuewtM4wfieCLLkKivyXMIRDAGeuRPfGEZ
Ph08DjZTepGN3xAaDHlq+ttmb+dzdIJpjHYIg4AizrspOVFqf/4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:48:27 2026 by rpki-client