
$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
File: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json)
Hash identifier: tno4ldFkyfMwuDmlmmzi1bLb5aisR2yf4uKv48mNtXY=
Subject key identifier: FF:FD:36:99:B1:1C:0B:30:34:99:E1:65:EA:50:75:31:1D:EA:52:85
Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA
Certificate issuer: /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA
Certificate serial: 2D72F247C806934FC6F12D6DE37EFCD918EE9AAE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
Manifest number: 055D
Signing time: Mon 02 Mar 2026 02:12:30 +0000
Manifest this update: Mon 02 Mar 2026 02:07:30 +0000
Manifest next update: Thu 05 Mar 2026 03:04:30 +0000
Files and hashes: 1: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: HFx27am61y/dC1xdTadXPgOw5A9a+PEjL0futSZShAU=)
2: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: Q4FCJx2xdQyXWuG/Mkdlbm+EYQuJWHSMRXEQhaDwxBc=)
3: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: W5Zb76xYohKVMN4oDjg1HwPWp43mgnWE5orvLBb5SkM=)
4: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: eYJSZ6BNvJdcwOjXxyxNY4HDMCsMbaLoRNn+0CbiAds=)
5: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: i3HQaU7A5T+hugQmUCoVWplcF5RYtJ+OjDq/WGotyFM=)
6: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: J6znwF/VIOIQq7nf+/cVdXFnP4yNGPdAl3m1qZHQzpE=)
7: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: TDn/D5Jn1B5hHim5JSk9HFRrdHWAM0K9Pz4Q+QOo2cc=)
8: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: IvhePbxETJJ1An12hekeGcMrYJecR0U54GWOfDVzXpo=)
9: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: lmYVrCn9BeJjLwZ83vYZIK3fLJEIHwntZ3WH1J4i7Cc=)
10: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: i565en58aZkxitE/Cu7dj7vQtPe24rOc0XFo1zdj2pA=)
11: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: HfReQfR8KQgqYxrjCjLONRll8cJTpbYph9s5PnSext8=)
12: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: Myo0yUY2zYBlmDu7ifkTtwfEDTywRzZJiBzIgMz4kyk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl
rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 03:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:72:f2:47:c8:06:93:4f:c6:f1:2d:6d:e3:7e:fc:d9:18:ee:9a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA
Validity
Not Before: Mar 2 02:07:30 2026 GMT
Not After : Mar 5 03:04:30 2026 GMT
Subject: CN=FFFD3699B11C0B303499E165EA5075311DEA5285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:ae:b4:28:2f:b7:0b:8b:4f:8c:5c:e1:8f:
2d:cb:08:1e:34:05:9c:7b:49:3c:0b:ef:f2:22:83:
51:1e:8b:cb:ab:d0:ce:dc:c0:b9:3c:04:5b:66:25:
53:a2:08:16:e9:77:86:34:38:c1:dd:21:3e:cb:d4:
04:93:fc:5c:f1:86:32:d2:6d:f5:da:d4:50:88:66:
bf:04:e7:27:21:44:49:41:a2:a1:83:7a:15:76:d4:
f0:c8:af:01:71:e4:73:07:02:d2:01:a6:84:67:31:
0b:23:0f:8c:59:07:d6:f5:f0:38:36:0a:a4:6e:28:
48:cd:64:b8:1d:1d:af:95:88:72:07:85:d4:d9:39:
cd:0e:1b:ea:0c:10:9e:c5:11:ea:47:ed:10:94:66:
eb:b3:b7:36:38:3e:d2:d3:0e:90:9c:bc:5a:b6:6f:
c3:9a:2e:8a:11:33:83:11:5c:8b:30:ce:98:4f:c5:
29:8f:27:2b:ac:06:e6:cd:7d:01:e8:fa:6d:9d:9f:
34:18:5d:5f:5a:f7:00:74:08:c4:41:b1:72:46:df:
d0:12:32:34:b4:8f:d3:ac:b7:52:27:7d:2b:09:7d:
8c:ce:a3:a3:69:5f:cf:b7:78:63:55:70:f5:8d:4c:
37:44:e8:10:66:d1:65:fc:5d:60:52:a9:df:22:5a:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FD:36:99:B1:1C:0B:30:34:99:E1:65:EA:50:75:31:1D:EA:52:85
X509v3 Authority Key Identifier:
keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1a:7c:4e:b9:d3:db:85:2b:c5:05:e3:3e:6a:43:88:b9:98:
f8:48:24:b9:db:07:a0:f3:07:3e:bf:50:2f:8c:d3:0e:3e:74:
1b:fe:ab:6f:49:17:fd:7f:39:fb:25:be:66:65:e0:51:4e:fa:
1c:b5:d4:27:c0:5f:00:b0:89:97:33:e4:9f:30:09:32:d7:46:
ef:85:f7:f6:eb:69:fa:a2:b0:27:56:f6:40:cd:6a:bb:cb:1d:
cc:03:46:ef:1c:c1:e0:25:9f:3c:39:02:73:5b:f1:b4:82:e2:
43:d5:30:b0:e3:86:98:2d:c5:c5:22:c7:8b:d5:85:e6:c7:37:
a6:34:ec:0e:e1:c8:d7:50:01:c3:e8:a2:84:ad:4b:bd:bc:11:
1d:d5:a1:97:e3:30:8e:05:0a:4f:54:70:5c:52:99:8d:58:2b:
0a:74:33:0d:84:39:33:20:71:33:c9:23:d7:4f:ba:ab:a0:62:
a3:1d:0a:ed:6a:4d:23:a3:0a:ff:d6:d7:4e:41:6a:4a:88:ea:
27:f3:7e:a3:6d:d9:99:32:e9:ee:e8:0d:a3:b5:ff:86:54:c1:
bd:56:45:32:25:77:2c:df:72:d5:5d:1a:3b:9b:4f:de:b8:de:
d4:4a:f4:9b:99:a6:4f:52:68:3b:4a:84:2b:57:8d:20:96:61:
3a:7c:a9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:53 2026 by rpki-client