
$ rpki-client -vvf repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft
File: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft (raw, json)
Hash identifier: sU/f0sIs/Fdn/dd4EA8QfT4ZFnsXfPVFF2TVSobIMMU=
Subject key identifier: A6:C7:5B:24:65:81:9D:FB:9C:6F:42:DE:67:FB:DD:92:D8:75:8E:D2
Authority key identifier: 01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2
Certificate issuer: /CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2
Certificate serial: 26910A014D404F5A91D92A9D96E8EF3605138150
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft
Manifest number: 0110
Signing time: Sat 28 Feb 2026 21:51:25 +0000
Manifest this update: Sat 28 Feb 2026 21:46:25 +0000
Manifest next update: Wed 04 Mar 2026 03:27:25 +0000
Files and hashes: 1: 3136302e31392e3135362e302f32332d3233203d3e20313532373638.roa (hash: CbUawBdc6/owSFYBdX6zk907J+9GwiPGZDz88NQXPnI=)
2: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl (hash: UhjT1XkeYOUiaHYrOrUBzCM17ye/f2CjA2h0UzonGpA=)
3: 3136302e31392e3135372e302f32342d3234203d3e20313532373638.roa (hash: /U+44U6OBvCGsv3ed3z+YxR73loB+6G9DzRSbiFpHC4=)
4: 3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa (hash: YwfkNT9uJxp+XppevLMj2drKR6MOyIxH6IZjcA7OFyw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl
rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 03:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:91:0a:01:4d:40:4f:5a:91:d9:2a:9d:96:e8:ef:36:05:13:81:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2
Validity
Not Before: Feb 28 21:46:25 2026 GMT
Not After : Mar 4 03:27:25 2026 GMT
Subject: CN=A6C75B2465819DFB9C6F42DE67FBDD92D8758ED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f1:54:24:2d:f6:32:0a:e4:82:80:c1:59:dd:
0b:0e:67:d5:e6:63:4d:62:b3:79:12:6d:99:df:84:
85:01:7e:ea:0c:8f:d4:e5:94:a8:24:06:85:b8:09:
00:95:09:0a:1f:6b:fc:49:27:21:4a:8c:85:32:a1:
3c:03:ed:4a:c5:da:51:77:a5:0b:6b:91:bb:09:cd:
5d:2b:ea:48:cf:d1:67:b9:f1:84:6a:94:3f:4f:30:
86:cc:36:a6:2a:ec:f6:06:6a:79:cc:62:29:f1:57:
3d:c4:e7:d3:fe:0b:43:83:7c:6e:b0:5e:50:e0:83:
97:f4:05:af:b2:21:11:4e:d0:c3:1f:29:ab:be:b0:
46:fb:80:92:21:8d:5c:55:eb:71:9f:c6:a5:6d:3b:
10:0c:56:d2:26:d7:bb:38:b5:4c:72:f6:f7:a0:e8:
07:71:26:3c:52:02:c7:ff:ca:8d:a3:20:f6:15:19:
73:06:b0:89:57:fd:2d:b8:01:7a:a4:e4:f1:94:80:
7a:7b:24:ed:9d:be:41:fe:2d:07:95:2c:b9:d3:3d:
a6:23:e5:45:74:28:56:65:5a:e8:7f:5d:50:08:62:
f5:ea:f8:65:80:ee:80:35:7a:4b:c2:48:71:25:c9:
fc:f4:9e:e6:2e:ab:16:87:a7:cb:c4:0a:40:f5:81:
ca:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C7:5B:24:65:81:9D:FB:9C:6F:42:DE:67:FB:DD:92:D8:75:8E:D2
X509v3 Authority Key Identifier:
keyid:01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f2:38:31:83:a0:2b:e8:3d:96:65:74:79:9e:dc:79:4b:fc:38:
70:f6:43:10:c0:21:d1:8a:4f:4b:d3:bd:7a:f9:e8:cc:58:42:
eb:ca:7a:3e:ac:85:62:f5:c9:16:cb:82:9a:ea:b4:03:2c:bc:
b1:66:79:96:b2:3a:d7:10:a4:4c:28:65:3f:fb:e1:6a:f0:98:
ad:7a:60:fd:8d:c5:6e:b0:a8:e7:c4:35:63:ec:80:0f:92:ec:
0d:54:07:b7:6f:84:9d:76:e2:6f:5b:84:dd:67:e9:c0:21:01:
33:17:0c:cd:44:fa:ad:c2:52:86:15:83:5a:e4:45:7d:65:76:
26:96:3f:99:77:73:d8:53:93:b7:f1:0d:2f:1b:38:1b:3a:29:
0e:67:ac:db:2c:5b:fb:b3:57:33:c7:64:fc:0a:a0:52:6f:2c:
ca:03:64:ce:ab:70:a1:8b:55:15:3a:c7:8c:c4:45:72:3c:79:
f2:1a:0c:2e:31:36:49:f8:30:4b:db:f1:7f:ef:21:1d:d6:52:
ed:8a:0e:f1:13:67:ed:22:73:e3:f5:3f:74:f8:f2:8c:e4:91:
f9:99:11:c2:d9:ae:5f:99:61:c6:4b:d6:d1:28:2b:e7:b8:28:
11:d3:b9:7b:ca:92:a6:dd:ec:8d:cd:83:c0:ec:cc:bc:5d:e1:
04:31:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:57 2026 by rpki-client