
$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft
File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json)
Hash identifier: 2wA/7l1eAe8Ad7wV8lrj+9gKVqfasTqHWnq/EMi3aHo=
Subject key identifier: F3:86:6E:CC:E4:4B:05:BB:3F:12:54:7B:CD:C6:4F:3A:05:CB:6F:7D
Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4
Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4
Certificate serial: 1BC71C4826BEAB60455CFF16420A3A617FD6C23C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft
Manifest number: 0265
Signing time: Sat 28 Feb 2026 11:40:49 +0000
Manifest this update: Sat 28 Feb 2026 11:35:49 +0000
Manifest next update: Tue 03 Mar 2026 19:21:49 +0000
Files and hashes: 1: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: dkX3mi6UtP2EclKtk4Ns5Our6XJ4lNIlC+WY5pkrMVA=)
2: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: pZz62m1gD3j25rkNtr+ZrpUFopI0lVMRASTdO0j7bx0=)
3: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: K4PCAzM4dSlpAp4NltLpen0pb2pwGiAXMlt5QdZY5ss=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl
rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 19:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c7:1c:48:26:be:ab:60:45:5c:ff:16:42:0a:3a:61:7f:d6:c2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4
Validity
Not Before: Feb 28 11:35:49 2026 GMT
Not After : Mar 3 19:21:49 2026 GMT
Subject: CN=F3866ECCE44B05BB3F12547BCDC64F3A05CB6F7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:b1:b8:90:06:52:a0:f7:ab:d7:4b:c0:9b:
0c:84:27:4a:9d:61:70:09:02:a6:1e:c6:44:09:3c:
22:d4:da:3b:e6:60:7e:de:6e:1d:87:8c:20:63:10:
93:9a:ee:60:5b:46:6a:ce:35:ac:49:de:aa:ac:9d:
b4:81:f2:5a:d1:1b:2b:d5:19:5b:6e:f4:48:e7:5c:
38:e0:1d:70:c3:16:ab:37:d5:eb:b1:a0:68:d9:af:
61:26:85:e7:e3:db:95:cb:16:b8:fc:0c:e1:f5:29:
70:b6:92:2b:cd:ec:b2:f4:14:32:3f:e5:b7:15:23:
54:32:88:00:85:ab:42:a1:f9:32:1a:4d:ee:85:9f:
7d:07:6d:88:f8:0a:40:42:82:13:53:52:b1:04:fe:
6d:52:60:a4:2d:e7:0c:fc:46:15:f5:8b:14:4a:8e:
1a:ac:54:da:b4:2d:a4:9e:64:4b:8a:a2:1a:83:78:
ee:db:b4:8e:20:c4:37:0a:13:c8:55:4c:33:65:98:
6d:95:1c:8d:0b:e2:3f:0f:ff:a9:c2:07:9a:a9:b2:
fc:1b:78:21:35:8b:a2:61:ac:dc:96:fe:ee:f3:42:
f9:4f:a3:c6:26:fd:fe:d2:66:67:1f:1b:1e:81:c6:
f9:9b:4f:26:0e:3a:0f:ea:50:a9:f7:9a:ac:fd:f0:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:86:6E:CC:E4:4B:05:BB:3F:12:54:7B:CD:C6:4F:3A:05:CB:6F:7D
X509v3 Authority Key Identifier:
keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e7:95:cf:37:11:29:37:1e:7c:06:11:e7:2f:70:88:70:5c:
10:ce:fe:99:fb:dc:34:ec:b0:b9:e3:42:93:9e:7c:bf:f0:2a:
42:60:07:38:c4:ad:a4:da:f5:39:5d:b5:88:f3:b6:ca:56:ec:
fe:f9:3f:b6:73:c2:11:19:2d:bb:c0:db:94:ff:f4:9b:98:32:
2a:8c:93:a8:07:47:6c:7e:88:71:72:00:cf:c4:21:5d:79:6a:
6d:71:34:f8:4a:a9:95:fe:c1:1c:65:f0:59:45:55:89:42:71:
ad:d1:e7:d2:b3:a8:d9:35:89:60:13:7c:f4:2d:80:f0:a0:32:
47:89:bc:a8:13:ca:7f:b2:e3:60:56:50:bc:7f:3b:0e:05:41:
ba:19:66:ba:45:91:d8:b7:45:44:6c:f1:f5:51:97:b3:cf:ff:
e2:0b:f7:e0:d4:72:dd:84:a2:04:02:7d:eb:db:9f:9e:c3:0e:
60:1b:43:a1:af:e5:3a:5a:2a:01:bc:34:ca:15:69:d4:54:ad:
20:fc:07:b2:2b:51:11:59:1f:83:80:66:d9:e6:d5:2b:d0:0f:
7f:7b:ab:bc:8d:e2:3b:d9:03:fb:76:c1:8c:b8:7e:bf:3c:70:
ec:7d:13:c8:75:3c:f9:55:a8:43:e7:23:8d:0c:32:8b:cd:b9:
8f:c6:e0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:16:33 2026 by rpki-client