
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft
File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json)
Hash identifier: YQjUB0RwYQYtAPEq8bZ8hAFCMaLHKeZx8+DurxnlbBY=
Subject key identifier: 00:6E:41:C8:4F:8A:C1:04:58:92:D0:EA:37:7C:91:D6:C4:0B:C0:5A
Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E
Certificate issuer: /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E
Certificate serial: 46CD1A8AB4BA87AAA0D4870B1E06123802E5BFFC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft
Manifest number: 0177
Signing time: Sat 28 Feb 2026 20:02:33 +0000
Manifest this update: Sat 28 Feb 2026 19:57:33 +0000
Manifest next update: Wed 04 Mar 2026 03:15:33 +0000
Files and hashes: 1: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: BuMPJRqcoNFcpJkhn9dND5YUFEyPIX3V2duiWurvMUc=)
2: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: dNnoIXKVhmyapC9qepVTmmkVYB2sWKjzCXWE7DAeobc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl
rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 03:15:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:cd:1a:8a:b4:ba:87:aa:a0:d4:87:0b:1e:06:12:38:02:e5:bf:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E
Validity
Not Before: Feb 28 19:57:33 2026 GMT
Not After : Mar 4 03:15:33 2026 GMT
Subject: CN=006E41C84F8AC1045892D0EA377C91D6C40BC05A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:d9:ba:e0:23:1c:6b:8a:33:1d:6c:c2:c9:
8d:f9:ad:a9:e2:6e:aa:d9:a4:cf:68:7d:fb:40:e9:
fb:4f:6b:3c:e2:43:13:8e:29:86:02:cf:36:79:76:
10:a0:57:27:32:ec:68:70:67:ad:27:e8:7c:59:fb:
de:5f:17:be:56:5b:5e:03:61:dc:b2:8e:09:a2:b2:
35:fd:8b:e4:c3:5e:54:3b:1c:7c:1b:33:a5:32:22:
c7:b4:23:7c:56:9a:a9:f3:36:7f:ee:39:bf:9c:8e:
c1:a1:50:0d:7a:a7:50:33:9e:ce:6e:ef:da:31:f2:
61:7e:db:75:81:03:3b:d7:c2:c4:7f:5e:2b:e8:cd:
19:00:32:1e:5a:47:db:47:40:af:7a:b3:fe:5b:f9:
09:b7:dc:cb:e2:ed:fa:86:a1:01:fb:9d:11:b9:b6:
22:b5:17:e9:ee:13:83:18:33:56:39:dd:af:27:29:
69:d1:ff:68:bf:89:64:5a:9f:56:c7:1f:76:4d:6d:
a4:69:07:37:0d:3c:e3:9a:a3:5c:4e:6b:00:42:ca:
8f:bd:57:c9:85:b1:a9:b8:79:8f:bc:ec:6e:33:ac:
76:b6:7a:0e:19:44:08:70:db:8e:35:89:e9:8e:35:
b8:d5:17:e0:22:fc:69:54:07:21:de:21:e3:3d:a5:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6E:41:C8:4F:8A:C1:04:58:92:D0:EA:37:7C:91:D6:C4:0B:C0:5A
X509v3 Authority Key Identifier:
keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:cc:92:00:08:3d:ab:a9:ea:7f:b2:bd:e8:53:e7:a8:83:6f:
24:07:0e:99:59:77:cc:93:48:fe:1a:e7:3f:45:39:e3:58:f7:
0f:03:cd:4d:1c:2f:07:fb:b9:34:1e:d2:d2:43:d6:8c:86:da:
5c:53:d9:e3:77:cb:7d:7d:b0:8d:e4:ca:26:1c:7c:15:c6:68:
6b:43:02:d7:98:b9:35:d2:d2:5c:d4:3c:3f:a7:87:84:34:4a:
e0:34:13:d4:97:22:f3:8b:7e:fe:2a:ab:35:79:29:bf:80:56:
53:f7:e3:62:62:25:ba:f2:da:04:fa:ef:a9:11:f4:b6:0e:6a:
ca:03:3b:3d:74:f9:5b:a6:f7:32:e9:e1:d3:61:61:44:14:53:
ab:b4:8e:0e:c9:7e:3a:b2:b7:2a:57:23:4b:61:32:ac:91:4c:
10:20:27:eb:9b:3d:98:7e:3e:d1:8d:89:53:7e:47:1b:0a:ca:
f5:c5:19:42:1f:8a:cf:32:97:1e:cb:a4:69:d1:2b:a0:7a:27:
48:c4:ff:56:ef:10:31:8a:cf:64:ad:1b:4a:e0:30:c5:d6:ac:
ca:0a:18:b5:a2:a5:b7:26:03:ae:4f:8d:a2:4e:c4:16:a8:8a:
da:d2:64:9a:9c:10:22:9e:d1:0b:5f:47:91:30:50:ed:1a:50:
81:6c:23:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:52 2026 by rpki-client