
$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
File: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft (raw, json)
Hash identifier: 7iY/RohhkdFLgpLeoJFw0/fFKEdpN7Mbdz/b6QrWwfw=
Subject key identifier: 37:22:9D:2B:AF:F0:72:B0:0A:90:F3:3A:C9:AD:76:1E:D8:B7:A0:3F
Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD
Certificate issuer: /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD
Certificate serial: 2CDCA8175149B29E7CCCB42E4A6988D9895D7137
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
Manifest number: F0
Signing time: Sat 28 Feb 2026 16:21:14 +0000
Manifest this update: Sat 28 Feb 2026 16:16:14 +0000
Manifest next update: Tue 03 Mar 2026 17:22:14 +0000
Files and hashes: 1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: ksjiqtTAWCgIRtUjPZtNzrKoQay+iOF9ttjO6dpoPs4=)
2: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl (hash: lIA5VRTnfN888xGcOYcApMJaWIgbZlhFScGlDRqQvdg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl
rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 17:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:dc:a8:17:51:49:b2:9e:7c:cc:b4:2e:4a:69:88:d9:89:5d:71:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD
Validity
Not Before: Feb 28 16:16:14 2026 GMT
Not After : Mar 3 17:22:14 2026 GMT
Subject: CN=37229D2BAFF072B00A90F33AC9AD761ED8B7A03F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:f6:a4:28:d7:76:38:4e:34:19:5e:55:28:
84:79:a4:1b:3f:07:83:43:5a:f4:20:c7:5b:18:24:
67:5b:05:09:51:c2:e4:7a:b4:a8:fb:53:b8:9c:1c:
0c:00:13:d9:ae:2a:d3:e5:0b:d5:ff:2c:7f:d4:5e:
3d:ba:2d:53:3b:84:64:72:e0:1b:b2:07:c4:dc:5b:
30:aa:26:93:ac:08:ab:5e:4b:a0:8c:3c:cf:83:a4:
f1:85:59:dd:9c:3f:9a:9e:27:c2:09:9f:12:79:5b:
9c:c1:fd:dc:4b:8a:98:4e:b3:48:1f:84:7c:7c:5c:
6e:e2:c4:dc:9b:ad:0c:5a:94:43:fb:62:05:e0:70:
6f:1f:4c:61:3e:58:ca:b4:71:73:87:84:18:00:69:
ac:f3:84:77:08:31:60:09:20:b4:a2:a6:b9:e4:2a:
e0:28:b5:88:81:21:84:09:39:14:4e:5e:96:2a:b4:
24:e1:56:5b:38:eb:75:8b:64:69:88:84:c8:b7:f8:
75:42:8f:e4:e3:23:ee:08:da:0d:71:a7:89:a0:00:
90:8c:2c:5a:52:27:09:83:50:05:64:42:29:b5:89:
1b:f2:74:56:c6:ce:d0:35:47:30:f3:b0:d6:06:96:
6d:55:86:71:65:18:29:f4:83:6d:46:35:72:a8:5e:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:22:9D:2B:AF:F0:72:B0:0A:90:F3:3A:C9:AD:76:1E:D8:B7:A0:3F
X509v3 Authority Key Identifier:
keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cf:41:b9:15:04:14:8a:85:89:60:d7:8e:2c:ae:46:c3:59:
91:4f:04:f2:46:17:88:a2:27:2d:ba:55:39:fa:1f:f6:58:d7:
6a:e6:52:bf:bb:a0:73:6b:1c:fe:ca:dc:b2:33:d9:3b:a0:43:
48:21:6a:25:47:b6:cd:52:ae:08:1a:74:d4:4b:af:40:0e:a2:
63:2a:8a:9f:0f:a6:82:ff:c4:f8:a5:62:03:a0:f7:e2:c8:78:
0f:5c:c9:c4:38:b5:c0:f3:d5:6a:20:0d:e3:94:b7:28:d3:e3:
ea:35:8d:14:90:3b:af:80:a6:e4:2a:c3:57:27:57:e1:b9:76:
6d:64:75:9c:71:21:70:b7:30:dd:4b:51:63:43:41:31:67:bc:
b7:bf:f5:c6:ff:a3:36:74:cb:b0:62:d9:42:09:e5:44:1e:fb:
c8:41:12:db:22:b3:05:a2:37:21:35:8a:fc:f0:16:4d:44:90:
93:71:8a:c2:58:fb:0f:aa:26:e2:a4:91:fa:4a:83:0e:2f:39:
8a:0c:ab:5d:cf:f4:e3:ae:32:9e:31:13:fa:c7:35:20:60:0c:
60:88:c5:d1:ad:f2:d4:a9:99:e0:1c:dd:e5:cc:37:32:15:02:
1c:57:f6:8a:c9:59:57:ea:24:e0:5d:f7:35:51:32:d3:59:7c:
1b:b5:c4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:04 2026 by rpki-client