
$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
File: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft (raw, json)
Hash identifier: bH5LFpuY2obUcT6KlI7yZULHvTMy8vgd9jpoG0jE24g=
Subject key identifier: 5D:09:0B:00:FF:6B:8B:CD:5C:A6:27:06:5F:54:22:25:9C:01:74:F1
Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD
Certificate issuer: /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD
Certificate serial: 14497761596786E0A0084EF922AB4604D511AB08
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
Manifest number: 0105
Signing time: Thu 16 Apr 2026 09:11:18 +0000
Manifest this update: Thu 16 Apr 2026 09:06:18 +0000
Manifest next update: Sun 19 Apr 2026 15:04:18 +0000
Files and hashes: 1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: ksjiqtTAWCgIRtUjPZtNzrKoQay+iOF9ttjO6dpoPs4=)
2: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl (hash: iRkeO/WKvCUrAz66Pk3dcFvBHYvF+HwH/MDaudOcxAs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl
rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 15:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:49:77:61:59:67:86:e0:a0:08:4e:f9:22:ab:46:04:d5:11:ab:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD
Validity
Not Before: Apr 16 09:06:18 2026 GMT
Not After : Apr 19 15:04:18 2026 GMT
Subject: CN=5D090B00FF6B8BCD5CA627065F5422259C0174F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:71:6e:ea:4a:40:f6:c2:b0:05:fa:0d:ae:
7d:2b:e5:83:12:c6:01:8b:60:5c:26:40:9a:72:3f:
b3:d8:cc:52:8b:8f:e1:3c:ee:92:8d:56:b9:91:31:
60:ce:99:d4:5c:bc:c6:50:e7:ed:c1:19:8f:e3:3b:
a1:6c:43:69:1c:1e:8c:ca:12:a5:61:79:e3:b4:94:
03:e2:62:e6:c7:d7:73:87:4e:28:20:41:67:f1:39:
62:a8:2f:58:39:80:93:b4:d4:05:b2:e0:98:fb:9f:
cc:c4:df:78:ce:19:6e:34:02:c9:d0:cc:4a:ec:4f:
98:01:85:c9:51:a9:7b:5a:52:77:f3:3b:7c:bb:1f:
83:06:30:f6:e9:b5:e3:59:9a:0e:af:76:48:f5:3f:
c1:6c:c2:93:74:91:b7:55:6c:59:c2:7a:45:d1:a7:
de:18:05:bc:27:31:03:8d:d7:5e:c4:93:19:85:d2:
bf:24:7b:e5:20:3b:6c:d1:d2:e5:3a:6d:29:46:65:
f3:a5:35:9a:84:30:ed:47:1f:c0:42:0f:55:c7:56:
c1:78:09:ef:37:b1:66:70:8d:3c:ad:b5:ee:74:c0:
8d:17:38:a4:bf:0d:48:30:47:81:39:f7:0f:ce:f8:
14:04:f7:0a:17:fa:9d:12:7c:ba:33:95:f6:51:d5:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:09:0B:00:FF:6B:8B:CD:5C:A6:27:06:5F:54:22:25:9C:01:74:F1
X509v3 Authority Key Identifier:
keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ae:71:dd:28:d1:f0:8d:b7:42:8e:e1:b4:5c:47:a8:58:c2:
10:c2:62:09:b8:26:05:61:aa:4f:c6:38:02:41:ba:51:b7:45:
17:be:dd:64:e5:f9:8f:5b:16:33:12:77:d9:2d:cf:d9:f2:3b:
62:7d:ce:f0:0f:6d:86:2c:90:20:05:35:d2:82:bb:db:58:60:
01:4b:74:51:ce:10:e6:64:33:05:f6:f4:07:01:32:ce:6c:37:
0c:55:6e:9e:57:88:ef:e3:7b:27:a9:b0:61:ff:6b:bc:a6:ea:
36:4b:77:c4:72:cf:32:0f:46:b5:94:33:8d:03:59:4b:90:ee:
80:ba:39:07:02:73:af:72:af:5e:de:15:16:fb:fa:31:b5:ba:
9a:99:4a:c6:dd:01:dc:cd:2e:10:53:67:83:80:d6:b1:fb:a0:
a1:80:94:79:e7:32:37:19:a6:21:0f:04:aa:ef:bb:87:c9:44:
0d:f9:f8:aa:bc:c7:3c:52:54:81:db:52:cd:b2:ff:98:7c:66:
6c:9c:8d:ba:1c:71:ac:a7:fa:82:3f:da:5d:2b:83:66:35:37:
55:f2:6b:b0:e5:db:66:e0:8e:e8:23:5b:96:f5:24:c7:a2:17:
08:73:cb:0c:bf:5a:97:e0:ae:33:6d:a8:c6:de:8e:9b:93:a5:
40:7f:fe:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:26:58 2026 by rpki-client