
$ rpki-client -vvf repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft
File: 0D14F274908EB737876B8079A7129AF9936DB91E.mft (raw, json)
Hash identifier: +369J8TwZkU8VyPZ7QB097uIytMcaHH3LNFMjA+y35c=
Subject key identifier: 6D:AD:55:E8:E5:6B:17:D4:BD:F8:06:18:84:39:C4:8A:72:1D:C3:FD
Authority key identifier: 0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E
Certificate issuer: /CN=0D14F274908EB737876B8079A7129AF9936DB91E
Certificate serial: 71BE54EBB2500892F6A3545C9C587C917F604AB3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft
Manifest number: BD
Signing time: Sun 01 Mar 2026 01:32:31 +0000
Manifest this update: Sun 01 Mar 2026 01:27:31 +0000
Manifest next update: Wed 04 Mar 2026 09:01:31 +0000
Files and hashes: 1: 0D14F274908EB737876B8079A7129AF9936DB91E.crl (hash: 7iZb6e3drBq7wEm8PP//AdNvLA+LcrXlPqrvmvhCS6w=)
2: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: K2W9qbBj9KtIPfv2sbPkGTtIyrnqSh85ZwXUf2SSTZc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl
rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:be:54:eb:b2:50:08:92:f6:a3:54:5c:9c:58:7c:91:7f:60:4a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D14F274908EB737876B8079A7129AF9936DB91E
Validity
Not Before: Mar 1 01:27:31 2026 GMT
Not After : Mar 4 09:01:31 2026 GMT
Subject: CN=6DAD55E8E56B17D4BDF806188439C48A721DC3FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:e9:b7:46:5e:31:a6:32:99:fe:ed:65:3a:
c0:42:93:9c:e9:54:5b:d5:de:7d:43:6d:82:8d:59:
b5:86:ba:e8:1b:f5:d6:57:71:a2:73:7b:d2:fa:d7:
ca:97:9e:77:26:74:a2:83:f5:fd:1b:29:40:6c:16:
66:21:51:81:45:8f:30:95:b0:e8:e8:c5:ed:07:9f:
95:ce:ae:2a:11:ca:26:ee:ff:a2:ce:ff:81:25:bb:
5a:90:33:e7:b8:23:c9:18:20:25:a4:d7:9d:97:a0:
dc:18:04:8d:6c:7a:33:92:0f:66:65:60:a5:ac:ee:
8c:f2:2c:a3:5c:34:bc:7d:07:bf:c7:3c:5b:da:98:
b6:76:15:37:ec:03:79:44:56:a2:e3:b7:27:28:02:
2e:23:f8:3e:65:4b:4d:83:6f:c8:64:74:2d:5e:9c:
0e:cf:45:09:55:74:9a:7b:f8:e9:3c:03:37:9b:21:
26:d0:ca:47:cb:50:0b:59:ed:3a:04:8f:46:d1:96:
7f:aa:a3:2e:b1:91:70:f5:c0:fb:9e:5b:c7:25:35:
14:73:3d:d0:29:fa:43:bb:8c:9b:e8:82:7f:0d:0a:
75:4c:e4:33:8d:26:3f:18:07:29:bb:3b:2a:9d:c4:
b6:10:56:90:6e:f5:15:f9:b7:45:3f:80:cc:ef:2c:
6e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AD:55:E8:E5:6B:17:D4:BD:F8:06:18:84:39:C4:8A:72:1D:C3:FD
X509v3 Authority Key Identifier:
keyid:0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:17:fd:10:f3:ab:00:81:8b:f6:67:cb:4e:7a:07:b3:87:51:
4c:0b:61:a3:35:ec:27:0a:ba:06:23:32:42:4f:58:10:52:34:
4c:7d:ba:44:76:68:26:55:5c:fa:7a:87:b3:5e:c5:23:6e:83:
2c:a9:de:4d:72:61:a3:b5:f2:c9:07:d1:fa:aa:2b:42:38:d6:
db:0e:04:42:b8:8c:94:46:2a:bc:bf:2f:cf:ea:22:fe:25:3b:
17:cf:ee:ec:e8:93:eb:0c:5c:bf:9a:7c:50:43:e1:4e:0c:9a:
e0:ae:05:d0:6c:ae:81:3e:fd:ef:43:a6:1d:27:9e:4a:cc:91:
cd:9e:f4:a6:7e:a1:2f:c7:b4:35:7b:26:b6:de:ae:58:be:c0:
2b:58:8a:c8:77:d4:4a:13:83:07:2d:c8:aa:88:c1:08:19:05:
e6:a4:7d:99:0b:bb:5c:18:07:53:17:cc:18:a6:16:d3:2e:9c:
9e:63:9d:79:ea:0f:68:77:eb:53:97:c5:33:bf:a9:5b:cf:b6:
2e:3e:ce:d9:03:a8:46:0c:b3:d8:12:67:87:b2:c5:64:d6:91:
d3:87:f1:1f:fc:dc:88:6c:ff:72:21:1f:59:8a:80:b2:71:8f:
d3:cc:37:0d:ee:7a:44:24:66:34:4f:d8:70:d7:f0:fd:e5:09:
75:47:a4:ca
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcb5U67JQCJL2o1RcnFh8kX9gSrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5
MzZEQjkxRTAeFw0yNjAzMDEwMTI3MzFaFw0yNjAzMDQwOTAxMzFaMDMxMTAvBgNV
BAMTKDZEQUQ1NUU4RTU2QjE3RDRCREY4MDYxODg0MzlDNDhBNzIxREMzRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvWum3Rl4xpjKZ/u1lOsBCk5zp
VFvV3n1DbYKNWbWGuugb9dZXcaJze9L618qXnncmdKKD9f0bKUBsFmYhUYFFjzCV
sOjoxe0Hn5XOrioRyibu/6LO/4Elu1qQM+e4I8kYICWk152XoNwYBI1sejOSD2Zl
YKWs7ozyLKNcNLx9B7/HPFvamLZ2FTfsA3lEVqLjtycoAi4j+D5lS02Db8hkdC1e
nA7PRQlVdJp7+Ok8AzebISbQykfLUAtZ7ToEj0bRln+qoy6xkXD1wPueW8clNRRz
PdAp+kO7jJvogn8NCnVM5DONJj8YBym7OyqdxLYQVpBu9RX5t0U/gMzvLG5tAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUba1V6OVrF9S9+AYYhDnEinIdw/0wHwYDVR0j
BBgwFoAUDRTydJCOtzeHa4B5pxKa+ZNtuR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzIwNTU2ZC1jYzIxLTRlNTctYTViYS1hMjExMWUwNTliN2EvMC8wRDE0RjI3NDkw
OEVCNzM3ODc2QjgwNzlBNzEyOUFGOTkzNkRCOTFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5MzZE
QjkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyMDU1NmQtY2MyMS00ZTU3LWE1
YmEtYTIxMTFlMDU5YjdhLzAvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlB
Rjk5MzZEQjkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEEX/RDzqwCBi/Zny056B7OHUUwLYaM17CcK
ugYjMkJPWBBSNEx9ukR2aCZVXPp6h7NexSNugyyp3k1yYaO18skH0fqqK0I41tsO
BEK4jJRGKry/L8/qIv4lOxfP7uzok+sMXL+afFBD4U4MmuCuBdBsroE+/e9Dph0n
nkrMkc2e9KZ+oS/HtDV7Jrberli+wCtYish31EoTgwctyKqIwQgZBeakfZkLu1wY
B1MXzBimFtMunJ5jnXnqD2h361OXxTO/qVvPti4+ztkDqEYMs9gSZ4eyxWTWkdOH
8R/83Ihs/3IhH1mKgLJxj9PMNw3uekQkZjRP2HDX8P3lCXVHpMo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:48 2026 by rpki-client