
$ rpki-client -vvf repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft
File: C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft (raw, json)
Hash identifier: MSSDtKsNYYA0xGQnAG2MyeAgc6IX3JnrhT5xX8pUhrU=
Subject key identifier: 52:61:53:E1:9C:A5:16:7D:6E:65:5F:8A:37:5A:AA:64:74:B8:7C:07
Authority key identifier: C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7
Certificate issuer: /CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7
Certificate serial: 23F7753CF202E0828CC148C7F98530A635B297D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft
Manifest number: 01CC
Signing time: Mon 02 Mar 2026 02:40:02 +0000
Manifest this update: Mon 02 Mar 2026 02:35:02 +0000
Manifest next update: Thu 05 Mar 2026 02:53:02 +0000
Files and hashes: 1: 3130332e3135382e31332e302f32342d3234203d3e20313338303839.roa (hash: M+WZc7qSf2CmAB/JGuGAm2J24ap4dhEUP+j6m1qwiAs=)
2: C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl (hash: fqkhg3P0IAddbvhmuMPmOLRotWmeW1uzdZMMFc10RBQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl
rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f7:75:3c:f2:02:e0:82:8c:c1:48:c7:f9:85:30:a6:35:b2:97:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7
Validity
Not Before: Mar 2 02:35:02 2026 GMT
Not After : Mar 5 02:53:02 2026 GMT
Subject: CN=526153E19CA5167D6E655F8A375AAA6474B87C07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:da:0a:dc:71:f6:0e:11:cd:e1:59:15:96:
7c:10:14:47:4e:16:0d:89:25:68:d5:46:d3:5c:77:
9b:46:58:2f:46:7b:b4:78:a3:71:0c:15:c8:43:99:
68:b8:13:75:74:54:fe:19:c3:72:d5:c9:cc:91:2c:
10:95:87:7a:fd:3e:32:e7:9c:f2:72:43:16:1e:af:
57:d0:4a:18:7b:f7:c5:68:93:12:ee:c7:eb:eb:b8:
2c:3b:84:3e:d5:68:55:57:69:e3:64:9d:b6:7c:92:
c1:d8:67:c4:05:b6:f7:47:68:4b:55:2d:24:7c:61:
ff:69:1b:28:89:cc:ff:a2:97:9e:9d:6e:40:77:31:
34:5c:95:15:e4:dc:b1:bc:e1:18:9b:54:16:54:ec:
a8:58:7d:6e:cf:ab:da:85:98:30:bd:c0:dc:ce:0a:
f7:38:9c:1b:5f:33:f0:b5:c9:20:8a:33:24:93:c4:
14:0f:5f:c5:9b:f6:3e:8e:5d:35:4f:80:ae:02:aa:
66:44:01:49:ac:6a:16:b2:00:ca:25:00:08:1b:96:
e1:30:cf:bb:bf:e2:08:ee:0a:df:2d:77:64:93:04:
21:09:34:15:17:da:99:4b:fc:ad:f9:38:5e:cd:16:
6d:a6:54:15:f5:02:a5:a0:4d:a7:7a:20:5d:8e:4c:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:61:53:E1:9C:A5:16:7D:6E:65:5F:8A:37:5A:AA:64:74:B8:7C:07
X509v3 Authority Key Identifier:
keyid:C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5d:2c:b6:67:ad:de:40:b3:94:9b:92:0f:86:2f:85:92:87:
63:b6:e5:ef:5a:8c:22:e2:60:c5:96:1d:92:65:0c:e3:1a:18:
d1:6a:75:9e:b4:da:66:f4:8b:82:cf:c5:1c:7c:ea:31:81:a9:
8b:7a:cd:ee:51:aa:3e:97:8b:f1:95:ee:40:8f:33:f3:ec:af:
44:46:26:6d:fc:eb:f9:f5:78:a2:1c:1e:d6:dd:3d:99:f0:2f:
85:43:e4:07:51:05:0b:90:69:8c:ee:f4:0d:76:e9:78:ea:98:
64:20:f6:e0:91:82:39:b6:08:05:d9:95:e9:05:d1:ee:d6:0e:
3c:7a:69:2d:87:28:eb:91:f4:93:86:06:1c:ed:68:f0:29:a0:
9b:34:9d:da:c8:5b:40:6b:79:19:27:5e:a8:c6:66:ba:9b:6b:
6a:a2:3c:d8:d8:26:eb:38:66:51:34:04:8a:a4:e5:0b:d7:08:
c5:56:da:16:b9:e3:47:f6:8e:40:ac:d0:78:b5:ab:ce:80:1e:
6e:e0:0f:29:a9:d2:c1:31:ea:f9:43:20:87:3f:79:90:88:77:
b1:66:f0:0a:db:3b:98:1e:7f:c6:8d:ef:7d:ab:22:85:74:87:
c1:27:74:bf:c5:66:fc:9a:84:6b:78:a9:c8:b2:af:1d:c6:77:
47:f4:3f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:29:19 2026 by rpki-client