
$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft
File: 579618DB6FFA608F5998FCD968B270AE61BDB97C.mft (raw, json)
Hash identifier: wfeDCX9xbn07sbZxnAy8TyYh6FnKduJMWQKn+RS9HoY=
Subject key identifier: A4:D8:4A:14:E4:61:49:95:16:6E:2F:F7:5B:1C:85:DA:15:58:4B:24
Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C
Certificate issuer: /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C
Certificate serial: 73DA9D91B6AA20D2E94649F9D025EF814F9D8ED2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft
Manifest number: 023F
Signing time: Sat 28 Feb 2026 20:22:32 +0000
Manifest this update: Sat 28 Feb 2026 20:17:32 +0000
Manifest next update: Tue 03 Mar 2026 21:11:32 +0000
Files and hashes: 1: 3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa (hash: kHWm0ElDQFUg3ddfCvb6B3R6hoVD6v/wMJbHPMOHCH8=)
2: 3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (hash: etcdt1rptra2wpD632iI4CEj+HZk7gKrmvWLBgXFbpI=)
3: 323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (hash: sIMuid2cN98YAJ+u3L+3la7IfjwgED+cUwmpS2iHGMw=)
4: 579618DB6FFA608F5998FCD968B270AE61BDB97C.crl (hash: lw+J3EkiWDrSY9+G+MX6cuKlh2ngeD4qyDvwMlxobk0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl
rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 21:11:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:da:9d:91:b6:aa:20:d2:e9:46:49:f9:d0:25:ef:81:4f:9d:8e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C
Validity
Not Before: Feb 28 20:17:32 2026 GMT
Not After : Mar 3 21:11:32 2026 GMT
Subject: CN=A4D84A14E4614995166E2FF75B1C85DA15584B24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:14:a0:a0:9f:11:71:c7:3e:a0:31:f4:ee:
cd:3e:87:57:d1:77:bd:9f:c0:4f:76:94:78:43:bd:
55:47:9e:86:08:95:ba:e0:64:20:53:d1:79:93:0a:
9c:92:f7:df:d0:1c:6f:44:04:86:ee:e3:f8:5c:33:
3c:e8:1a:ae:de:61:ed:be:e4:c2:f6:29:68:0b:3f:
fb:60:dd:31:8b:0e:d0:98:69:5f:89:a7:49:cf:4c:
a7:ab:a7:66:a0:dc:cb:7a:52:90:13:63:5e:0c:a6:
48:9e:4a:68:60:b4:b2:46:88:d0:77:b4:75:f6:76:
26:83:91:a8:b4:59:ee:76:96:c1:37:d3:8e:bb:09:
58:36:ba:9f:6f:b3:51:fc:76:28:92:ad:6e:bb:46:
79:41:82:1d:d5:aa:2a:87:8c:5a:22:95:84:97:9c:
14:c7:53:5f:cc:8b:a7:b7:d1:fd:dc:82:80:76:5d:
8b:df:08:60:c6:74:76:4f:56:2b:0f:38:66:02:a3:
68:b6:d8:ce:78:60:d3:55:ce:87:05:6e:61:8c:b3:
b7:bb:9c:8f:f1:26:0a:de:2a:5e:b8:db:ef:4e:67:
d7:a6:e5:85:69:af:7c:83:d3:2e:4d:03:ed:8d:dd:
0a:14:c9:42:c3:32:fd:98:59:06:c4:cb:06:c5:d4:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D8:4A:14:E4:61:49:95:16:6E:2F:F7:5B:1C:85:DA:15:58:4B:24
X509v3 Authority Key Identifier:
keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ec:d2:a0:e2:25:fa:f6:37:88:3b:2a:02:0f:ac:84:6c:11:
a4:20:49:af:6f:91:24:05:1f:80:1a:d5:e6:d3:5b:d9:57:e5:
59:16:c8:e2:c0:b8:e0:bd:5c:bc:96:38:7d:56:bb:fb:7e:89:
7f:fc:d7:4c:60:79:db:39:81:a9:f2:9e:14:47:43:ee:6d:08:
dc:38:be:d7:71:5e:8d:d2:c0:9e:3e:23:b5:dc:b1:45:db:d1:
d8:15:6d:cf:44:6f:a0:c1:97:3d:40:74:8b:29:e9:88:c5:48:
15:0e:07:19:96:02:3a:80:5c:f9:e6:ee:d4:1d:12:f1:09:a4:
b7:01:f2:9e:38:89:30:8e:b3:ce:ef:d7:0f:32:7c:78:b2:57:
69:3e:23:ad:e5:ab:c6:17:f4:4a:bf:b1:38:02:36:5f:77:9d:
15:af:b7:f7:bb:a8:87:19:92:eb:49:b2:de:8e:88:25:90:1c:
1b:48:02:66:d5:4e:7b:c5:88:43:62:99:e1:90:dd:73:f1:d1:
c0:27:e2:5d:a4:1e:a9:7b:72:27:a1:4c:2d:0e:7c:db:96:7c:
c3:8f:2f:d1:e4:9b:6a:92:1c:87:d1:a0:06:f9:59:8f:9c:d0:
8b:17:6e:fa:4f:89:a7:77:cd:db:68:e6:01:e8:f4:ea:7a:db:
51:50:08:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:57 2026 by rpki-client