
$ rpki-client -vvf repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft
File: 00CBB314A3396508984527DC9E3F91DA2A407863.mft (raw, json)
Hash identifier: yLytxqFwGHXJcOZrskhvsafYNLCWVoHjorXxoRiFaMk=
Subject key identifier: 72:73:79:76:95:21:20:BE:70:D2:2A:CD:74:09:93:6E:AA:6A:F3:D3
Authority key identifier: 00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63
Certificate issuer: /CN=00CBB314A3396508984527DC9E3F91DA2A407863
Certificate serial: 6AFCA3DC96040B7422FECB86728A4BFCFC110CA4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft
Manifest number: 01BB
Signing time: Sun 01 Mar 2026 20:22:31 +0000
Manifest this update: Sun 01 Mar 2026 20:17:31 +0000
Manifest next update: Thu 05 Mar 2026 06:03:31 +0000
Files and hashes: 1: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: BLd6q/emexfVlm7VngzEQ5OJ7RS62yZ/WvulX36XvOE=)
2: 00CBB314A3396508984527DC9E3F91DA2A407863.crl (hash: 27seN9q5eFM487kVIAPA8wAtetQ30AHOiA4IC6RSMp8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl
rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:fc:a3:dc:96:04:0b:74:22:fe:cb:86:72:8a:4b:fc:fc:11:0c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00CBB314A3396508984527DC9E3F91DA2A407863
Validity
Not Before: Mar 1 20:17:31 2026 GMT
Not After : Mar 5 06:03:31 2026 GMT
Subject: CN=72737976952120BE70D22ACD7409936EAA6AF3D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:79:b7:cc:1d:40:5f:c0:e4:98:55:e9:76:0a:
b8:25:1c:52:21:75:ba:a3:63:36:d5:68:1e:a5:bd:
11:21:21:d6:48:45:51:d6:60:35:33:a2:69:b2:4f:
80:a1:ae:d7:7a:52:ed:f5:74:52:97:8a:79:98:03:
fb:e4:d2:13:57:8f:c3:07:85:0c:6f:60:81:6c:34:
fd:1e:3a:45:8f:b9:ee:ae:af:63:99:2b:e6:03:4f:
8a:d8:39:ce:a5:07:a9:ac:68:e0:bd:2e:9d:0a:7e:
cf:b1:ad:fa:53:57:e8:04:b9:f5:a2:2b:5b:9c:a6:
48:ec:22:ab:5a:5a:8b:15:cc:11:c0:2b:7e:f6:a5:
d0:b7:49:d4:0b:7d:1c:5c:e8:cd:b7:af:73:1c:2b:
82:2e:d2:2c:7d:f5:12:c4:75:6a:76:5b:5a:80:28:
9d:23:75:92:dd:2d:ac:bd:bb:9d:0e:fd:be:12:23:
6a:53:3b:57:42:87:df:c6:7e:bb:0c:64:36:08:1d:
e8:50:7c:45:06:06:29:d3:a6:ed:5f:69:a3:10:07:
3a:ba:35:6f:ce:db:1b:e0:74:54:90:c6:e4:12:b3:
29:77:58:67:16:d8:cd:06:e4:94:74:c6:ad:a0:11:
4d:28:be:7b:3b:3f:51:b3:0f:c1:c8:d7:a6:c8:ed:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:73:79:76:95:21:20:BE:70:D2:2A:CD:74:09:93:6E:AA:6A:F3:D3
X509v3 Authority Key Identifier:
keyid:00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f9:e2:14:32:5e:e3:32:86:c3:cb:b9:80:0a:bd:d3:86:52:
99:ae:bd:21:de:76:c5:35:7c:57:94:f7:93:d1:1f:d3:a8:ce:
38:c1:8f:35:91:7b:fc:f9:39:17:d8:9d:f7:ca:85:9d:46:c7:
68:45:df:f3:5c:ce:f2:05:6f:47:d5:70:88:dd:04:1a:76:b7:
75:a2:57:2a:f9:43:ae:78:34:69:a9:e0:75:03:05:73:73:af:
03:a2:a5:da:1c:95:1b:b5:8b:24:41:8f:57:4d:b4:51:e6:52:
14:8e:27:d3:3e:3b:cc:21:2d:94:68:e6:ec:c5:f7:70:76:62:
ce:14:5b:24:46:53:23:ef:f8:cd:20:29:3c:35:83:a9:b7:43:
c6:db:13:6d:15:11:d5:2e:5b:76:35:75:f9:a4:d2:7b:6d:74:
e2:e4:42:60:5a:c0:e3:d5:55:cc:e5:06:90:df:f1:ab:45:1f:
9f:d8:78:f9:43:5e:e1:99:09:cc:3e:77:6e:9c:7e:12:a1:cf:
98:ec:10:55:7a:74:7a:84:67:a4:29:80:49:13:bc:74:41:39:
c3:b1:6f:40:36:a1:9a:6d:d6:34:40:52:c6:08:ed:9c:2b:b1:
09:59:04:46:83:41:40:aa:a1:b9:2d:a3:fb:b5:7c:e8:9c:f6:
fb:d3:d2:82
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUavyj3JYEC3Qi/suGcopL/PwRDKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEy
QTQwNzg2MzAeFw0yNjAzMDEyMDE3MzFaFw0yNjAzMDUwNjAzMzFaMDMxMTAvBgNV
BAMTKDcyNzM3OTc2OTUyMTIwQkU3MEQyMkFDRDc0MDk5MzZFQUE2QUYzRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2ebfMHUBfwOSYVel2CrglHFIh
dbqjYzbVaB6lvREhIdZIRVHWYDUzommyT4Chrtd6Uu31dFKXinmYA/vk0hNXj8MH
hQxvYIFsNP0eOkWPue6ur2OZK+YDT4rYOc6lB6msaOC9Lp0Kfs+xrfpTV+gEufWi
K1ucpkjsIqtaWosVzBHAK372pdC3SdQLfRxc6M23r3McK4Iu0ix99RLEdWp2W1qA
KJ0jdZLdLay9u50O/b4SI2pTO1dCh9/GfrsMZDYIHehQfEUGBinTpu1faaMQBzq6
NW/O2xvgdFSQxuQSsyl3WGcW2M0G5JR0xq2gEU0ovns7P1GzD8HI16bI7UXXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcnN5dpUhIL5w0irNdAmTbqpq89MwHwYDVR0j
BBgwFoAUAMuzFKM5ZQiYRSfcnj+R2ipAeGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NzRkYzVlMS0xZDU1LTQ5ZDItOTNkNC01ZDk4ZWFkNzc5ZWQvMC8wMENCQjMxNEEz
Mzk2NTA4OTg0NTI3REM5RTNGOTFEQTJBNDA3ODYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEyQTQw
Nzg2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz
ZDQtNWQ5OGVhZDc3OWVkLzAvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkx
REEyQTQwNzg2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA754hQyXuMyhsPLuYAKvdOGUpmuvSHedsU1
fFeU95PRH9OozjjBjzWRe/z5ORfYnffKhZ1Gx2hF3/NczvIFb0fVcIjdBBp2t3Wi
Vyr5Q654NGmp4HUDBXNzrwOipdoclRu1iyRBj1dNtFHmUhSOJ9M+O8whLZRo5uzF
93B2Ys4UWyRGUyPv+M0gKTw1g6m3Q8bbE20VEdUuW3Y1dfmk0nttdOLkQmBawOPV
VczlBpDf8atFH5/YePlDXuGZCcw+d26cfhKhz5jsEFV6dHqEZ6QpgEkTvHRBOcOx
b0A2oZpt1jRAUsYI7ZwrsQlZBEaDQUCqobkto/u1fOic9vvT0oI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:30 2026 by rpki-client