
$ rpki-client -vvf repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft
File: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft (raw, json)
Hash identifier: Su9Lp+mVi1QsGpK9o/lI/NdiRtU+5fh6D39wYF7iVf8=
Subject key identifier: 11:C6:36:4F:16:C0:E2:CE:25:0D:46:A4:6A:48:A8:FC:58:F4:8F:2F
Authority key identifier: 0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8
Certificate issuer: /CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8
Certificate serial: 1AD50D165F33AB02534F1075AF265220E9B9CD20
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft
Manifest number: 0277
Signing time: Sun 01 Mar 2026 21:51:28 +0000
Manifest this update: Sun 01 Mar 2026 21:46:28 +0000
Manifest next update: Thu 05 Mar 2026 04:49:28 +0000
Files and hashes: 1: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: amGg2X/e259yYVIAXgMMcb+ASupbTD2+EIvh0Q1tcnY=)
2: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl (hash: YPm1Df1xuFYHxfOqsiGom4uCvwzAZ/o73VS9km2luzk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl
rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d5:0d:16:5f:33:ab:02:53:4f:10:75:af:26:52:20:e9:b9:cd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8
Validity
Not Before: Mar 1 21:46:28 2026 GMT
Not After : Mar 5 04:49:28 2026 GMT
Subject: CN=11C6364F16C0E2CE250D46A46A48A8FC58F48F2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:af:b0:5a:01:2e:bb:20:c8:62:8b:a4:a4:
4f:c8:5a:8d:16:44:91:a7:50:19:81:6d:69:3c:01:
2c:43:da:14:0d:94:d1:a3:86:b7:0f:a3:05:fa:05:
76:58:3c:47:aa:44:9b:5f:b2:e2:98:ac:4f:23:cc:
7d:29:04:c9:43:a3:27:3d:16:02:e3:f0:24:76:8e:
ab:15:87:67:b1:85:1e:d0:13:7f:21:21:47:f1:d5:
8c:23:bf:41:03:68:a9:04:15:bc:54:2c:ca:08:73:
70:77:0d:c3:90:e6:36:14:39:fe:e6:dd:89:99:8e:
5c:fd:29:1d:73:1b:8c:be:5a:5b:1e:3c:10:b6:14:
e8:28:66:4a:51:98:be:64:30:dc:15:b5:96:f7:33:
3b:67:a6:81:18:01:3a:2f:08:5d:03:35:6b:f3:00:
e4:c5:ec:29:f0:07:dd:ae:f3:ae:8f:bb:d8:ec:5b:
04:c3:18:c6:ec:1e:16:07:9a:35:bf:58:20:43:12:
48:3d:9c:91:94:e6:3a:aa:d0:98:f3:76:5b:83:91:
45:d6:04:87:b3:e3:8d:83:5e:f5:b6:91:68:70:53:
f9:45:c8:bc:b0:b7:c2:ff:8a:d2:32:78:18:ba:e9:
f3:d1:11:96:90:10:a7:a3:49:47:c6:71:da:50:a9:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C6:36:4F:16:C0:E2:CE:25:0D:46:A4:6A:48:A8:FC:58:F4:8F:2F
X509v3 Authority Key Identifier:
keyid:0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:15:4b:31:8d:fc:b6:54:0d:85:c6:d0:07:41:bf:06:16:29:
d4:b1:0c:e4:92:e4:95:7b:a7:f3:30:0b:19:03:75:ca:2d:34:
4d:45:7f:81:2e:f6:70:0a:5f:9a:60:05:c6:0b:c3:27:30:11:
52:99:6d:9f:30:07:3f:2b:e4:0c:d2:da:40:e6:32:59:36:7d:
35:46:a1:13:12:89:09:f3:fc:21:05:49:1d:bc:3b:cf:80:64:
3e:15:92:9a:55:a0:45:23:4f:5b:2b:14:51:e4:63:16:46:23:
8a:2b:d4:ea:a8:84:ea:53:42:d1:2a:4c:ea:1a:45:9f:eb:ca:
8a:04:6c:9f:0c:b2:b6:92:26:da:34:7c:0f:51:93:7e:b9:03:
25:01:4e:11:13:c1:6b:a2:4a:9e:17:f5:7a:cd:82:be:87:e6:
eb:f1:46:0a:75:8a:51:59:86:07:4b:7b:d8:87:03:74:64:01:
72:68:3c:22:06:de:6d:80:ca:e0:0f:07:67:8c:0c:04:0a:79:
af:7f:8e:f3:13:04:36:e3:14:3b:04:b8:32:b0:71:02:76:80:
13:3d:e7:21:b1:90:a8:80:da:9b:a6:63:59:da:c4:1c:57:67:
12:c2:8b:ce:57:83:45:8b:5a:25:3f:cb:08:c0:2b:2c:74:88:
98:1c:f8:c6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGtUNFl8zqwJTTxB1ryZSIOm5zSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjky
N0U4MTVFODAeFw0yNjAzMDEyMTQ2MjhaFw0yNjAzMDUwNDQ5MjhaMDMxMTAvBgNV
BAMTKDExQzYzNjRGMTZDMEUyQ0UyNTBENDZBNDZBNDhBOEZDNThGNDhGMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwa+wWgEuuyDIYoukpE/IWo0W
RJGnUBmBbWk8ASxD2hQNlNGjhrcPowX6BXZYPEeqRJtfsuKYrE8jzH0pBMlDoyc9
FgLj8CR2jqsVh2exhR7QE38hIUfx1Ywjv0EDaKkEFbxULMoIc3B3DcOQ5jYUOf7m
3YmZjlz9KR1zG4y+WlsePBC2FOgoZkpRmL5kMNwVtZb3MztnpoEYATovCF0DNWvz
AOTF7CnwB92u866Pu9jsWwTDGMbsHhYHmjW/WCBDEkg9nJGU5jqq0JjzdluDkUXW
BIez442DXvW2kWhwU/lFyLywt8L/itIyeBi66fPREZaQEKejSUfGcdpQqdDRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUEcY2TxbA4s4lDUakakio/Fj0jy8wHwYDVR0j
BBgwFoAUDCBg5B3GrP9UkoaNmxdqKSfoFegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZGExNGUzYS01YmUwLTQ2ZDEtOTAzYy0wNTliMGI2ODg4MjEvMC8wQzIwNjBFNDFE
QzZBQ0ZGNTQ5Mjg2OEQ5QjE3NkEyOTI3RTgxNUU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjkyN0U4
MTVFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw
M2MtMDU5YjBiNjg4ODIxLzAvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZB
MjkyN0U4MTVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACMVSzGN/LZUDYXG0AdBvwYWKdSxDOSS5JV7
p/MwCxkDdcotNE1Ff4Eu9nAKX5pgBcYLwycwEVKZbZ8wBz8r5AzS2kDmMlk2fTVG
oRMSiQnz/CEFSR28O8+AZD4VkppVoEUjT1srFFHkYxZGI4or1OqohOpTQtEqTOoa
RZ/ryooEbJ8MsraSJto0fA9Rk365AyUBThETwWuiSp4X9XrNgr6H5uvxRgp1ilFZ
hgdLe9iHA3RkAXJoPCIG3m2AyuAPB2eMDAQKea9/jvMTBDbjFDsEuDKwcQJ2gBM9
5yGxkKiA2pumY1naxBxXZxLCi85Xg0WLWiU/ywjAKyx0iJgc+MY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:18 2026 by rpki-client