
$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
File: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft (raw, json)
Hash identifier: 4pHdAVrPt4m/8E52u602uYSFS9Wyl80xnq68lxW7wiA=
Subject key identifier: 60:00:26:10:05:26:EE:7E:DA:D4:7F:FB:11:55:16:E9:20:EC:9F:D9
Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25
Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25
Certificate serial: 0429296A3E5FAD198AF57111A11EA2AAA8939C74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
Manifest number: 0225
Signing time: Sun 01 Mar 2026 19:11:55 +0000
Manifest this update: Sun 01 Mar 2026 19:06:55 +0000
Manifest next update: Thu 05 Mar 2026 02:42:55 +0000
Files and hashes: 1: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: O+nmvl+UTnkLZegrbIISQHYGfoEA7BPCfhSW9p3DWUc=)
2: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: ugWQkuQ0uRRyYTj1KpvBULv0Xx0kJB9LyC15wGfuroA=)
3: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: xiMw3g54rwkg5pTrfUcRFVEPY6CzUbv7I+jMZseSJVM=)
4: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: BHHFTjLTNMFtSq5idTfwLT9M3wuRjM3mExKv2SVRdKc=)
5: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl (hash: eSXSd4o+2ItFvGHVNpSJxLIaIwK5NED/6tX/9R7WruY=)
6: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: sVFI8Cp5vLICzsv5e4/4WyRHUaJ0f+3GFM/qswBcdHg=)
7: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: JiNSNBx/NJVCb9CW8exTEdCGa2EMUTZlCI+5UgveOhE=)
8: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: iXcg9I4Oyy6EsqPXrnC6OWS/dn/agjkU6nPGqXChu7c=)
9: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: KCBeNM9Sn0PIpboyPHdjgvvuRVmSaWYIbnHGh3xSCK0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl
rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:42:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:29:29:6a:3e:5f:ad:19:8a:f5:71:11:a1:1e:a2:aa:a8:93:9c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25
Validity
Not Before: Mar 1 19:06:55 2026 GMT
Not After : Mar 5 02:42:55 2026 GMT
Subject: CN=600026100526EE7EDAD47FFB115516E920EC9FD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:3f:21:b6:77:19:1e:2d:47:aa:94:0d:96:
58:a3:d2:c2:63:92:1a:7d:c7:33:18:9c:5a:4e:42:
c2:e4:39:4c:f6:9f:59:de:f9:2b:f6:0c:23:ae:e5:
3c:13:63:92:ca:c3:d3:48:95:57:87:c6:7f:9b:96:
de:19:7d:43:2d:86:92:ea:2c:a0:f4:93:3b:60:bf:
0d:5d:10:9c:cf:37:b0:d9:88:e6:c8:65:9b:38:24:
1f:e6:a0:42:82:2c:32:39:35:5a:c1:fd:36:bf:b6:
54:9e:08:38:54:a7:be:c3:65:fe:56:d0:d3:d8:f9:
0d:b2:c3:8d:a3:52:5e:94:e0:c6:a4:fc:4a:f1:72:
52:1a:5f:49:cd:34:89:7d:72:88:25:04:6a:d5:dc:
b1:a5:7d:52:10:83:7c:7e:65:cb:cf:84:10:f5:bd:
0f:f2:36:1c:47:0c:91:b8:91:78:ee:6a:a8:f3:5d:
17:7b:f5:d4:64:9b:be:37:f5:d8:39:85:19:69:ce:
11:ef:61:5b:81:8c:8c:d2:f4:a8:e1:29:63:22:b5:
96:86:65:de:53:c1:a8:4f:ba:9e:9f:fb:c6:e4:a6:
2b:c3:fa:90:f6:0b:b6:63:b3:eb:82:dc:80:12:31:
f7:5f:94:1c:a6:76:a6:d9:00:2e:7a:f1:12:63:f4:
e1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:00:26:10:05:26:EE:7E:DA:D4:7F:FB:11:55:16:E9:20:EC:9F:D9
X509v3 Authority Key Identifier:
keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7e:bf:7e:79:26:f1:01:88:a2:e6:7e:e2:af:7b:06:69:46:
ee:85:8b:20:26:59:d3:bc:16:aa:3d:ff:77:13:c1:6f:ae:10:
89:ea:a9:55:7b:0a:6d:ce:9c:63:e7:88:7f:45:ca:1a:2f:fe:
1c:c6:51:ec:d7:b1:d7:47:77:51:9d:04:90:2d:44:99:ea:44:
0e:17:ec:96:37:72:aa:ff:58:b2:7d:61:f0:ee:48:03:20:9f:
b0:68:bb:fe:65:18:c4:4b:2d:18:76:4d:4b:c9:a9:13:8f:e1:
d5:83:e8:97:23:75:ea:ab:5b:69:40:24:91:61:5c:00:2f:9c:
5f:28:ee:21:fe:7a:1d:b0:78:6b:41:5c:8f:aa:cf:71:93:6d:
02:d3:94:48:34:67:37:c8:2e:7d:a7:2e:e5:2c:bd:f0:94:49:
1e:bb:01:13:16:36:dd:00:35:b4:4e:a8:a8:8d:40:31:8d:f1:
b3:d8:79:36:84:97:6b:46:07:d5:8e:54:9d:45:31:e0:33:aa:
ce:8a:e7:24:9b:fd:28:76:7e:03:0e:76:f9:46:81:eb:ad:ae:
01:66:66:52:dc:c4:a8:27:90:cd:16:11:5b:00:3b:a1:99:34:
a5:90:aa:55:73:e2:5d:7d:58:92:27:58:4c:3f:49:60:f0:86:
77:f2:03:2e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBCkpaj5frRmK9XERoR6iqqiTnHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2
NDg5MkMyNTAeFw0yNjAzMDExOTA2NTVaFw0yNjAzMDUwMjQyNTVaMDMxMTAvBgNV
BAMTKDYwMDAyNjEwMDUyNkVFN0VEQUQ0N0ZGQjExNTUxNkU5MjBFQzlGRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSVj8htncZHi1HqpQNllij0sJj
khp9xzMYnFpOQsLkOUz2n1ne+Sv2DCOu5TwTY5LKw9NIlVeHxn+blt4ZfUMthpLq
LKD0kztgvw1dEJzPN7DZiObIZZs4JB/moEKCLDI5NVrB/Ta/tlSeCDhUp77DZf5W
0NPY+Q2yw42jUl6U4Mak/ErxclIaX0nNNIl9coglBGrV3LGlfVIQg3x+ZcvPhBD1
vQ/yNhxHDJG4kXjuaqjzXRd79dRkm7439dg5hRlpzhHvYVuBjIzS9KjhKWMitZaG
Zd5TwahPup6f+8bkpivD+pD2C7Zjs+uC3IASMfdflBymdqbZAC568RJj9OE9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYAAmEAUm7n7a1H/7EVUW6SDsn9kwHwYDVR0j
BBgwFoAUP26bxfFvHDq1/WNufeBv3WSJLCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MWRiMzczMC1mNDk5LTQ0OWYtYjZmMi03YTVkZWI1MzJiMGMvMC8zRjZFOUJDNUYx
NkYxQzNBQjVGRDYzNkU3REUwNkZERDY0ODkyQzI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZGREQ2NDg5
MkMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkYjM3MzAtZjQ5OS00NDlmLWI2
ZjItN2E1ZGViNTMyYjBjLzAvM0Y2RTlCQzVGMTZGMUMzQUI1RkQ2MzZFN0RFMDZG
REQ2NDg5MkMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKJ+v355JvEBiKLmfuKvewZpRu6FiyAmWdO8
Fqo9/3cTwW+uEInqqVV7Cm3OnGPniH9Fyhov/hzGUezXsddHd1GdBJAtRJnqRA4X
7JY3cqr/WLJ9YfDuSAMgn7Bou/5lGMRLLRh2TUvJqROP4dWD6JcjdeqrW2lAJJFh
XAAvnF8o7iH+eh2weGtBXI+qz3GTbQLTlEg0ZzfILn2nLuUsvfCUSR67ARMWNt0A
NbROqKiNQDGN8bPYeTaEl2tGB9WOVJ1FMeAzqs6K5ySb/Sh2fgMOdvlGgeutrgFm
ZlLcxKgnkM0WEVsAO6GZNKWQqlVz4l19WJInWEw/SWDwhnfyAy4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:11:17 2026 by rpki-client