
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
File: 0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft (raw, json)
Hash identifier: mBIAYIrTB0KDxEGfIMRfhBFZpAxodGyeB03MNjiUMyE=
Subject key identifier: 85:4B:A2:E8:B5:1B:95:3E:9D:1C:08:87:97:66:32:9D:F3:0A:F6:1B
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Certificate issuer: /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial: 2A5B17A748AB9A70E9166390E2B5510F6319CA63
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
Manifest number: 028B
Signing time: Sun 01 Mar 2026 05:23:28 +0000
Manifest this update: Sun 01 Mar 2026 05:18:28 +0000
Manifest next update: Wed 04 Mar 2026 10:31:28 +0000
Files and hashes: 1: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: AAfAK41bYgm/zJnOAM99b/7VZxCthhr1nADRxL8QtvA=)
2: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: vwui1qpHSvDVofVRy/Tt5fu+EupEaZj/9/a37EvMSjI=)
3: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: DRnLhFvj0XZm0VXEZ42TGDJPOpd0ZTUBf7MwJZ8bqOE=)
4: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: FJlkjy7Zh6RrMJcyoFN5uq7ubbcgdbOVveGSZgScDgQ=)
5: 0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl (hash: 5xOGOSkXxQRIolkf3CvXJ+Mrz43uCcVzl5nBhyi4g8c=)
6: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: 2VTD3WI/p1+3+37bAKEOPoRJrNamvZNDqASz/hNbToE=)
7: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: NRTKisssuBxZObjpfMlPvnnfb3JZpeBG9KHtEvhVsJY=)
8: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: O51+yh/myhmzBLnFSKrmxNaOkN9zLMNSiLH+jGUuyWg=)
9: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: uU+RiPAP5rA80po/0W6dMPifTVUm5kY6ALP/Ca/ACi0=)
10: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: KZ/MfJDGlUF+5FRxy7S8cNkPyicIqb4wdkx7H0nRfJc=)
11: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: I9GyAIe3s6r5o1IVue8LyW9A/cEmB+1nHgZeZ+VKm1g=)
12: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: k78QygJvZC5uoGv2K0v+mQ5YwQ0X8MznZdn5hmtLPD8=)
13: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: TdPV1Ae9NsfX/q2I6yHzDhMS8SBCOPuv6qM2EykOC0U=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 10:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:5b:17:a7:48:ab:9a:70:e9:16:63:90:e2:b5:51:0f:63:19:ca:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Validity
Not Before: Mar 1 05:18:28 2026 GMT
Not After : Mar 4 10:31:28 2026 GMT
Subject: CN=854BA2E8B51B953E9D1C08879766329DF30AF61B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:f5:be:39:0f:52:d1:17:66:c2:e1:7d:04:
9a:60:d9:07:c3:12:02:8d:bf:4a:10:f5:59:61:6e:
36:8a:02:49:94:49:b8:a1:4e:91:1f:d4:81:27:25:
28:fd:d2:da:1f:eb:10:67:f5:a1:d5:ef:13:cc:de:
91:db:c2:83:85:c1:64:0b:14:fc:f6:11:89:03:dc:
a2:96:8a:19:6c:a1:9e:de:51:01:cf:02:1b:e7:7c:
4a:53:1f:ad:f2:ad:2a:ec:32:c3:c5:2f:3f:85:2c:
36:1b:fa:f1:65:1f:16:0a:56:59:6d:1e:bc:11:06:
96:a0:f4:c8:07:46:34:78:97:a5:de:c9:1d:ae:5b:
6a:e5:0d:b1:1d:1a:4b:a2:55:2b:4e:14:31:d7:9f:
c9:2a:c4:b1:29:db:b7:78:8e:52:79:2e:8e:bc:ca:
82:3c:13:39:fa:ea:60:3a:cd:f8:ce:76:7b:1d:b1:
fc:22:8a:47:b1:27:39:ac:ee:d2:a8:07:57:bb:15:
12:11:44:aa:75:18:f4:17:37:a5:ba:5b:ed:d1:6e:
a5:8d:6c:1a:22:32:99:d4:24:a3:61:59:a2:d0:99:
88:3d:0d:f2:9a:1a:cc:79:cf:f3:56:9c:38:32:c4:
2e:5f:ab:ad:50:98:3e:6a:0c:27:4c:b5:81:f0:1c:
51:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4B:A2:E8:B5:1B:95:3E:9D:1C:08:87:97:66:32:9D:F3:0A:F6:1B
X509v3 Authority Key Identifier:
keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c5:b9:fa:e7:fd:8a:6d:7d:a5:83:b9:fc:cb:6e:c8:61:31:
78:9b:86:5e:51:bf:89:7b:e4:06:52:ee:f5:1d:3a:79:f2:9b:
56:a7:8b:f6:be:60:ce:65:6e:eb:ef:7a:2c:2b:23:94:19:f2:
cd:5b:c0:ae:7c:7f:e5:a0:0e:af:f2:dc:55:f7:80:fe:a6:c2:
90:54:07:bc:ac:3d:c2:87:e3:d4:f4:b0:4e:9f:b2:0d:47:b7:
41:58:b7:5f:09:92:cc:75:a2:4b:9a:f9:31:85:f3:92:78:51:
71:1b:b9:10:7e:29:ea:20:25:77:1b:97:ea:72:b0:ee:3b:df:
2f:94:30:19:13:12:14:d7:4b:87:c4:a4:e0:eb:f5:7e:3c:31:
00:86:dc:19:99:9f:b3:c0:24:0c:4d:c9:42:0f:72:77:33:8f:
ff:54:11:32:6e:28:5f:38:fd:a7:9f:18:55:68:c1:aa:d8:b1:
70:3b:e7:54:de:9b:b1:c5:52:4b:94:c6:97:a8:75:41:30:ec:
b6:75:93:e1:20:96:9c:96:21:22:ad:cc:09:b6:0c:36:fd:9e:
c8:22:b7:de:78:60:2b:35:3e:8a:3a:0d:9e:5b:fb:ed:58:d1:
11:ef:78:77:5f:51:bd:08:92:f2:e5:b9:02:20:24:a7:86:6e:
20:fb:a8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:32 2026 by rpki-client