
$ rpki-client -vvf repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
File: 2FEC60739EF087F0D4F947C7230A725109EC6178.mft (raw, json)
Hash identifier: dvnX6dGfUyfU29ZnWrdIYYcL++iDOmsuNOrp+ZXpTKo=
Subject key identifier: 14:55:BE:94:B9:84:08:EB:37:48:0A:3D:66:F9:AB:AB:7B:4B:46:3A
Authority key identifier: 2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78
Certificate issuer: /CN=2FEC60739EF087F0D4F947C7230A725109EC6178
Certificate serial: 593334A8961A0F6CDC0CE5AE3DC102B52D758D3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
Manifest number: 0218
Signing time: Sat 18 Apr 2026 07:01:11 +0000
Manifest this update: Sat 18 Apr 2026 06:56:11 +0000
Manifest next update: Tue 21 Apr 2026 09:30:11 +0000
Files and hashes: 1: 3130332e38312e3231382e302f32342d3234203d3e20313336303731.roa (hash: u24qYoTDSSf50eb2UAzUvgkQ1jglRQOcxfkd25DPbNc=)
2: 2FEC60739EF087F0D4F947C7230A725109EC6178.crl (hash: pTaw4dCn7hE7A0xSjcWRQf8ZfJHUC3APedjOVZDPvk8=)
3: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (hash: UnWzJ48Nx645Ud0DTEThTJUyGBI60lPLzC3swH45IOM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl
rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 09:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:33:34:a8:96:1a:0f:6c:dc:0c:e5:ae:3d:c1:02:b5:2d:75:8d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FEC60739EF087F0D4F947C7230A725109EC6178
Validity
Not Before: Apr 18 06:56:11 2026 GMT
Not After : Apr 21 09:30:11 2026 GMT
Subject: CN=1455BE94B98408EB37480A3D66F9ABAB7B4B463A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:f6:43:81:bb:45:5b:f7:e1:a8:10:6d:f4:
19:03:cf:23:be:c3:e1:1a:a4:f2:b6:2b:71:fd:7d:
02:63:5f:97:52:d1:b6:3a:51:d1:6b:38:09:b6:63:
cd:33:12:c8:02:2a:06:5c:ac:7d:0f:1e:bd:df:c0:
cb:e0:04:41:e8:10:60:8a:b7:38:a5:c6:d4:bb:fb:
57:64:e1:c6:95:36:fd:ab:6b:fb:24:be:f2:b0:4d:
6a:f2:25:5b:4e:02:8e:cd:d1:c5:d3:ec:c2:0a:b9:
00:77:f8:4f:c6:34:aa:ea:ac:9f:ba:62:46:d1:0c:
5c:92:90:20:d2:5f:d0:bc:cd:1b:b2:ed:a2:5c:5f:
57:20:2e:81:f9:ba:e2:85:77:88:98:f1:1a:55:62:
9d:8d:96:f6:d7:ca:a4:d4:ae:f1:74:e8:3b:65:19:
c2:3d:69:f7:f1:3d:52:1b:63:4f:f7:4a:69:c0:43:
20:de:43:19:f0:b7:60:66:46:07:6b:9f:13:b4:36:
f9:8b:ac:c5:61:b6:96:f8:9e:85:52:a7:2c:12:7f:
c2:01:4d:28:cf:d7:a1:f2:ce:f5:69:77:3e:05:89:
e9:67:97:4e:dd:ea:7c:15:a9:14:ad:4f:3c:c8:99:
81:03:cd:f3:9d:01:fd:ab:2d:4e:a4:a4:db:05:95:
ee:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:55:BE:94:B9:84:08:EB:37:48:0A:3D:66:F9:AB:AB:7B:4B:46:3A
X509v3 Authority Key Identifier:
keyid:2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:30:37:cc:9c:a5:44:7a:ab:e0:9b:09:3e:a4:b2:54:08:2f:
ed:da:04:07:eb:8d:b1:59:d5:d2:85:ff:0e:b3:98:f8:77:95:
e7:31:62:4a:bc:46:49:8d:e6:f7:b8:4c:a6:d1:6e:38:9d:3b:
55:76:aa:34:9a:80:dc:6d:aa:f1:c9:ae:88:dd:03:94:aa:d9:
23:81:de:7b:60:22:60:9b:bb:fb:a1:5f:af:d6:cf:31:c3:54:
22:6d:34:26:6d:80:50:07:7a:13:6d:2d:45:ca:83:aa:ae:f5:
37:3b:69:f5:b0:ff:0a:f0:cc:0a:39:49:07:ef:ab:be:32:9f:
f7:6a:01:38:62:e4:6d:1a:65:1b:e5:40:80:00:bb:57:8b:bb:
30:7d:d8:43:1f:71:48:0b:12:d7:0d:6b:8c:50:79:79:40:3e:
2f:61:21:6c:fc:57:06:48:c7:6f:c4:cf:77:43:b8:f7:f2:f7:
65:70:8b:df:7d:e9:9a:87:2b:0f:19:7a:bc:2a:56:ac:ac:42:
2e:12:0d:dc:06:48:05:e4:4d:ce:01:91:80:7e:40:61:1f:47:
07:7f:ea:6e:de:c3:7b:44:22:9a:5a:88:a8:f8:84:c6:8b:55:
b0:61:b1:53:24:77:a3:c6:dc:d2:f1:b3:a2:39:e3:5a:dd:6f:
1b:11:d5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:20:00 2026 by rpki-client