
$ rpki-client -vvf repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
File: 2FEC60739EF087F0D4F947C7230A725109EC6178.mft (raw, json)
Hash identifier: 3i6ou5MSj9hqagfqijpLzmYJ+qG/ePYpZg9btJA/JGg=
Subject key identifier: 85:BF:08:B4:7E:3A:8D:78:42:BB:8B:33:DC:70:9A:F4:83:FB:30:24
Authority key identifier: 2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78
Certificate issuer: /CN=2FEC60739EF087F0D4F947C7230A725109EC6178
Certificate serial: 575D35B22355A652F5A225670D100A980AEA5BF2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
Manifest number: 0203
Signing time: Sun 01 Mar 2026 05:01:41 +0000
Manifest this update: Sun 01 Mar 2026 04:56:41 +0000
Manifest next update: Wed 04 Mar 2026 16:19:41 +0000
Files and hashes: 1: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (hash: UnWzJ48Nx645Ud0DTEThTJUyGBI60lPLzC3swH45IOM=)
2: 3130332e38312e3231382e302f32342d3234203d3e20313336303731.roa (hash: u24qYoTDSSf50eb2UAzUvgkQ1jglRQOcxfkd25DPbNc=)
3: 2FEC60739EF087F0D4F947C7230A725109EC6178.crl (hash: T1ufNqx21AFts0SeZHw3QThiMQ1uro7WGKpZXmWlVHU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl
rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 16:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:5d:35:b2:23:55:a6:52:f5:a2:25:67:0d:10:0a:98:0a:ea:5b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FEC60739EF087F0D4F947C7230A725109EC6178
Validity
Not Before: Mar 1 04:56:41 2026 GMT
Not After : Mar 4 16:19:41 2026 GMT
Subject: CN=85BF08B47E3A8D7842BB8B33DC709AF483FB3024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:51:ec:83:c5:0e:46:d6:c7:21:d7:0b:88:
74:2a:fc:a3:71:00:2e:4b:4b:31:e7:2f:ad:20:45:
30:e7:d4:d4:25:ad:b7:c0:af:17:9f:19:35:4a:ce:
71:6a:bb:59:4e:bd:8f:f3:5e:27:6d:aa:6b:29:37:
b8:98:1c:fd:86:cb:85:33:4f:2c:3a:8a:4b:c1:ac:
b4:37:61:15:31:50:7f:68:c0:f3:ac:e6:1f:a9:da:
41:42:fd:dd:a7:a2:cb:d2:f4:30:77:8c:b7:ad:4d:
f9:3b:5f:80:c2:cb:b1:c1:52:c6:2e:04:f7:a1:1a:
9f:77:30:7e:aa:01:67:fa:16:be:56:a9:bd:8a:71:
27:c4:2e:fc:d7:26:29:af:95:98:43:f1:24:62:a9:
a4:91:7c:8e:70:d6:f6:a6:61:76:f9:21:3a:f5:4b:
30:e5:51:da:5f:ea:70:42:57:ad:6f:91:93:8a:a5:
69:5a:e0:08:0a:ce:1b:ca:66:6c:8e:3f:d6:68:18:
4b:4f:7d:62:0c:04:6a:f3:1c:b0:fc:dc:6c:4b:8c:
d9:22:41:80:df:03:6a:e3:77:56:19:a5:8e:2a:cd:
a6:32:e6:9f:e4:04:2a:2e:ff:b7:72:0f:2e:f6:fb:
a4:34:e9:22:02:7c:a8:73:0a:27:ec:fe:5f:a3:c4:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BF:08:B4:7E:3A:8D:78:42:BB:8B:33:DC:70:9A:F4:83:FB:30:24
X509v3 Authority Key Identifier:
keyid:2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ba:55:19:9d:95:47:2a:07:3a:cf:62:b8:3e:ff:19:93:bb:
51:3d:14:76:80:ee:22:d4:64:a5:67:c1:03:03:89:d0:06:ec:
ae:1a:a8:fc:06:6a:85:ca:9b:96:81:18:f1:fa:27:53:e4:6c:
8d:bc:41:55:89:f9:09:db:1a:ae:2a:00:45:13:37:01:39:6f:
8f:65:a7:78:a0:60:ec:d8:10:b6:08:3a:ae:ad:2e:3d:1c:bd:
3c:bb:ee:01:04:30:33:81:b9:91:13:f0:20:e2:3a:53:a5:97:
ee:ac:53:69:f7:63:73:9c:f8:46:14:34:0a:70:69:36:29:81:
bd:85:e1:7b:b3:e1:d2:89:2c:1d:44:3d:75:b7:2b:d0:0f:99:
63:d4:15:30:41:79:00:69:d1:ae:76:34:bb:8f:eb:13:e2:89:
c9:f2:44:f7:19:52:a9:18:73:2b:27:db:68:c2:4b:09:0e:c3:
a9:da:fe:b5:55:03:2f:e2:51:c6:5e:32:b1:7d:e1:99:5b:b2:
fd:73:84:29:05:77:98:35:a0:eb:33:d3:2f:65:23:f1:10:e3:
32:13:50:f0:37:12:4a:cf:48:ea:87:b2:1a:13:0e:99:b1:9a:
33:61:c3:43:c4:22:db:e4:3f:c1:2c:a1:df:8e:da:e0:66:32:
b7:6b:e5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:02 2026 by rpki-client