
$ rpki-client -vvf repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
File: C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft (raw, json)
Hash identifier: QLEs+Xl0K2Yymz9k2BDA0Tu2lMVqZ2MNgR29bzhTTeI=
Subject key identifier: 90:82:9B:D5:2A:5E:07:38:ED:66:C3:F0:B2:52:97:C4:EF:70:9C:08
Authority key identifier: C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB
Certificate issuer: /CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
Certificate serial: 1ABCD95EE591742CA2EE2EF625D56A857A9F12B5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
Manifest number: 0565
Signing time: Sun 01 Mar 2026 17:31:16 +0000
Manifest this update: Sun 01 Mar 2026 17:26:16 +0000
Manifest next update: Wed 04 Mar 2026 22:19:16 +0000
Files and hashes: 1: C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl (hash: CCXjGarjpydOWTy+gmxJwr6r+G0UzYTHyUz+7k9Gess=)
2: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: 1buHOMlubpPb1vK9bmP2byXKlPQ3RocJRoJnWCufqIM=)
3: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: Q1wQYF2XtInj2d/t3tW21h1V//UQoT/xphWVYkOXt/o=)
4: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: zLiivndeuuRmiqPurXuqSo8rmLZskUTJQAWFfVjjmnQ=)
5: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: BDx4i2a4BYM3v0dGczfBklRepdAm0ptx8LXvALg8yN4=)
6: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: fLwaxSiPiMGYGYjTwweBcQlSgL4S11+kugIMQEQ/4F8=)
7: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: IxoIU9qeskgyNiyRBaWp27OvX1vOQmtVbnmjBXacBdE=)
8: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: PZwOUUZx2EQHdYrYeYouuZVw5NeiiX9go4HwzvpQyZo=)
9: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: N1MXVORdbt5FpdZaRMnKXk8HUDVu1M5FZBwZhaokx8M=)
10: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: 6GuT0WNGNAuW+mMwzOZfOwnrZJiyz2WtE/5vgADo9MY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl
rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 22:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:bc:d9:5e:e5:91:74:2c:a2:ee:2e:f6:25:d5:6a:85:7a:9f:12:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
Validity
Not Before: Mar 1 17:26:16 2026 GMT
Not After : Mar 4 22:19:16 2026 GMT
Subject: CN=90829BD52A5E0738ED66C3F0B25297C4EF709C08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:46:33:44:28:6c:80:39:d6:68:eb:2f:61:
ba:cf:13:4e:17:b0:f9:ab:79:fb:c7:dc:b5:7b:a5:
6b:60:ca:0a:04:d5:55:5d:35:b0:77:f1:8e:c4:2b:
a9:cd:2f:ec:31:cb:ce:e0:0d:8c:ce:92:d9:a2:44:
2f:70:d3:8b:8c:36:0d:f1:2a:ec:20:c0:3f:ac:dc:
3a:8b:6b:fc:91:08:f8:91:9e:11:b5:17:a7:aa:f7:
34:f9:c1:46:15:c8:23:04:ad:e6:ca:1e:c2:1f:8c:
ae:d1:45:75:80:ce:7f:f2:8f:12:0d:53:ab:f1:51:
9c:30:55:b7:c2:31:fe:50:db:17:43:eb:a2:03:8a:
f1:38:e8:16:fe:c6:39:8f:bc:6b:1a:4a:54:21:c5:
82:0b:3b:23:6f:ca:f1:5d:dc:f9:6c:40:4c:3b:7d:
58:0b:3f:cf:d6:ca:35:51:b7:e6:76:1b:89:5b:ae:
f7:ad:d3:f9:18:1a:d2:d3:88:ef:c1:87:b9:fc:91:
eb:3a:80:27:76:bd:97:77:01:9b:ed:f2:a8:af:37:
88:12:d0:9d:02:ba:2a:ee:32:5d:08:81:f0:5a:9b:
c1:ea:5d:46:65:49:0a:40:88:67:5d:75:b1:8d:2f:
2c:92:31:6e:cf:7e:b5:f3:32:d1:de:b6:fe:25:cd:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:82:9B:D5:2A:5E:07:38:ED:66:C3:F0:B2:52:97:C4:EF:70:9C:08
X509v3 Authority Key Identifier:
keyid:C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:16:4e:69:50:5e:eb:ee:2c:06:c0:a4:97:e5:26:6f:ca:58:
8b:2a:c2:f7:b6:90:b6:d2:89:e6:d4:cf:c8:4b:35:fa:15:89:
ac:38:72:e3:aa:11:ac:8c:32:e7:69:15:1b:ea:9c:32:72:bc:
94:8d:f1:6e:9d:55:cf:b3:05:e7:b0:d3:1d:12:74:bc:ac:24:
b8:72:59:ae:31:b3:d7:9d:b2:da:e1:53:16:5e:43:11:b4:3b:
b5:86:5a:f1:e8:a9:1a:7e:f1:09:9d:43:24:d9:c9:45:7c:39:
b2:0a:33:0e:e5:64:e4:e3:6e:68:a6:e1:ac:4b:af:24:b5:dc:
f1:2b:70:5a:f8:27:2c:c2:9f:0f:27:ac:97:aa:3e:13:eb:f0:
38:8b:f7:92:75:e7:87:45:35:25:76:b4:6a:84:af:70:d8:4e:
fa:ea:5a:1e:28:3a:7a:ad:83:65:11:be:2c:b1:ac:fc:06:8e:
91:7d:34:7c:b2:43:51:39:2b:09:c2:b7:fc:65:71:45:0e:c9:
19:e8:eb:54:83:2f:4b:ff:53:9e:8b:ab:3e:98:29:60:9d:4c:
4b:21:47:33:1f:df:a4:30:f1:02:17:4a:43:c3:cb:90:ec:1d:
45:04:43:0b:f2:7a:a0:9f:fd:9f:c4:db:00:65:8d:71:14:2b:
ce:33:f2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:47:55 2026 by rpki-client