
$ rpki-client -vvf repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft
File: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft (raw, json)
Hash identifier: bI9VKG/lTDr16U/8dU1nzMTqr/vziQEcqAH9Agyw7x4=
Subject key identifier: 69:9A:95:BF:CD:78:EA:66:DD:B8:6F:6F:CD:E7:16:1D:35:A8:33:5B
Authority key identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53
Certificate issuer: /CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853
Certificate serial: 1393E2826F3CB1F000459D1D2A93C74F1CCBE55F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft
Manifest number: 03FF
Signing time: Sat 28 Feb 2026 22:32:03 +0000
Manifest this update: Sat 28 Feb 2026 22:27:03 +0000
Manifest next update: Wed 04 Mar 2026 02:25:03 +0000
Files and hashes: 1: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl (hash: /4OY/t3cgfYkA0PIVCaGnGX++HIyA1rkOUNb7q7/Nkk=)
2: 3130332e3131322e34342e302f32332d3233203d3e20313332363639.roa (hash: pGG2Bi36SLJ3ZRv3lx6++uoX962j1RY60TxoCjCPGXI=)
3: 3130332e3131322e352e302f32342d3234203d3e20313332363639.roa (hash: c7K/kJi/sdHC40eB5yKboQSZpT9ath8KafCzibQS9r0=)
4: 3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa (hash: IgSDzMHI3dSppPCf14soQgaWSO7iUukjBimhBkSaH7U=)
5: 3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa (hash: CyUa8cUnppeeXFA8fzhGE48owkMTBLn/7bLT/UPIoOA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl
rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:93:e2:82:6f:3c:b1:f0:00:45:9d:1d:2a:93:c7:4f:1c:cb:e5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853
Validity
Not Before: Feb 28 22:27:03 2026 GMT
Not After : Mar 4 02:25:03 2026 GMT
Subject: CN=699A95BFCD78EA66DDB86F6FCDE7161D35A8335B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:6b:8a:01:71:d3:fb:13:a7:99:50:5d:32:
8b:aa:5a:05:25:90:3c:49:38:83:cd:ee:9e:37:ff:
7f:69:0c:2a:e6:5d:87:f1:9c:27:9f:e1:b7:cb:4a:
f5:cc:92:f1:6b:45:34:78:41:b9:ba:bf:7b:2c:b1:
13:9b:a8:bb:fb:f6:99:cc:46:69:b5:00:c5:f0:d6:
fa:79:8a:0d:a8:05:9a:f4:10:d5:15:9b:82:24:97:
a0:95:14:0a:d7:b2:28:6f:55:ca:98:31:2b:13:fa:
92:92:80:fb:5d:3e:29:70:84:b3:89:80:fd:7a:5e:
a7:2d:4e:d4:c6:e8:ae:5d:60:4d:4f:67:5e:5b:76:
8d:75:4f:4a:41:a4:3b:60:70:18:2d:96:0d:9d:aa:
d1:fd:88:b1:a4:9d:4f:77:d0:f5:6f:f5:1e:4a:e4:
a2:85:ff:e5:cf:dd:d5:0f:83:9a:2c:ca:23:d1:37:
26:bb:1f:92:be:47:70:41:4d:b6:e4:82:08:da:ed:
a6:ab:8c:64:57:17:ec:0c:0a:87:aa:c5:a7:57:6f:
69:2e:89:98:a0:47:d4:0d:02:83:9f:4c:54:e6:67:
5a:d8:fe:19:1f:b9:a6:2b:eb:33:02:2a:7b:7e:9d:
0e:bd:fc:4f:f4:1b:2d:22:63:c8:3f:83:d1:43:98:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9A:95:BF:CD:78:EA:66:DD:B8:6F:6F:CD:E7:16:1D:35:A8:33:5B
X509v3 Authority Key Identifier:
keyid:0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:af:c7:40:c5:6d:d8:10:20:ce:ac:96:19:b0:01:da:38:a2:
b8:e1:02:0d:4b:9f:ba:34:04:30:98:a0:49:62:0b:55:d5:31:
84:fe:18:c7:88:5d:49:07:7b:a7:72:28:f1:27:08:9e:35:77:
9b:fd:e2:bd:35:3f:eb:bd:e7:2c:e6:03:4d:92:35:cd:d8:f3:
57:78:d9:52:98:23:6f:8f:92:67:98:c8:fc:98:ab:0a:25:11:
85:37:14:86:6f:a9:eb:32:13:23:43:c3:0b:e3:c3:3c:a6:cc:
2e:71:d3:af:41:bd:dc:3b:ee:d1:73:e6:8f:a0:d6:92:9c:01:
73:29:fb:2d:57:46:b6:51:40:29:0e:db:98:56:8b:69:55:ad:
4a:dd:b0:bb:3e:c9:a0:ea:4a:39:09:b6:a6:e7:3a:8a:68:45:
1c:b5:5e:f1:47:e4:b3:cb:da:5e:78:64:be:44:b1:3f:ef:e8:
c9:34:e2:b6:e7:78:f1:27:0d:13:b3:48:52:41:89:81:11:84:
ce:7f:88:5f:f4:38:c9:d5:32:4f:5d:88:61:aa:88:0b:1a:8a:
48:37:e5:9e:06:15:0c:a3:8e:fc:72:55:2e:d0:cc:04:17:19:
b4:e6:0b:d9:c2:e0:23:60:56:8e:87:37:60:21:80:72:9f:8d:
83:64:bb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:49 2026 by rpki-client