
$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft
File: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft (raw, json)
Hash identifier: yAKq1lWr94BjmtzPvl2PwFvzGpUhvVfGmyW8FbeFLJs=
Subject key identifier: B1:99:FB:DB:52:1B:FF:C3:BA:56:B9:07:A8:9E:A7:CF:38:DD:93:C1
Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4
Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4
Certificate serial: 60CB43A927142EB1000C8D309590A2F9D4CCCE83
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft
Manifest number: 02C0
Signing time: Sat 28 Feb 2026 21:32:39 +0000
Manifest this update: Sat 28 Feb 2026 21:27:39 +0000
Manifest next update: Wed 04 Mar 2026 05:00:39 +0000
Files and hashes: 1: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl (hash: aQyBpDHYdo4bU4EuneQV86ng5ririABPSHSP01kvn6M=)
2: 323430343a343230303a3a2f33322d3438203d3e203234353336.roa (hash: Hub7rZ2q+AdvyEruoWB8nsArXPAxnFiXXAQjsmifcPA=)
3: 3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa (hash: ILoC7SZWlYY8tT8nCMj2qTfJpiM1Y89EAaEhPrCEnXY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl
rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:cb:43:a9:27:14:2e:b1:00:0c:8d:30:95:90:a2:f9:d4:cc:ce:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4
Validity
Not Before: Feb 28 21:27:39 2026 GMT
Not After : Mar 4 05:00:39 2026 GMT
Subject: CN=B199FBDB521BFFC3BA56B907A89EA7CF38DD93C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:42:1f:54:ba:a4:13:d8:42:07:db:d1:6b:b3:
05:b8:e8:e1:d3:2c:4f:a6:9e:30:85:4c:f8:1f:f2:
f5:de:97:bc:01:25:76:93:ce:b1:47:cd:02:61:d2:
48:e9:a1:fb:f2:8d:57:7b:2a:83:e2:07:cd:9d:04:
99:a4:d9:cb:8e:d4:89:51:0b:1c:13:35:cb:d0:ee:
9b:0b:87:5f:79:77:e3:bb:ef:bd:be:86:91:88:5a:
3e:bf:bc:56:82:b7:fd:64:79:40:43:78:d2:a7:d9:
b6:5c:56:67:51:69:2d:aa:3b:a9:ff:79:41:b3:57:
15:7d:bd:c0:7a:1e:84:44:93:7d:33:9f:9d:c6:50:
8d:17:14:3c:ce:4c:f1:df:cf:9b:d7:b5:07:f2:86:
96:79:b5:1d:ae:9f:f0:9c:04:e7:94:f8:f1:08:93:
d9:26:7c:3e:01:d3:23:61:6e:a4:c6:e3:c0:bd:67:
1c:d1:f9:8a:c3:f0:55:fc:2e:42:da:5b:67:0e:83:
12:86:91:05:fb:b7:25:d0:98:3c:8b:3f:33:3f:dc:
b4:c4:36:fa:d9:d9:a6:b6:ec:46:18:64:3c:20:ba:
54:84:93:33:e2:6a:f5:84:a2:df:56:91:cf:4e:54:
81:36:45:66:8b:b0:b5:64:c1:ce:36:59:3d:72:8c:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:99:FB:DB:52:1B:FF:C3:BA:56:B9:07:A8:9E:A7:CF:38:DD:93:C1
X509v3 Authority Key Identifier:
keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b1:fc:2b:87:1d:e6:23:03:c8:73:4c:d9:94:77:b7:8e:49:
29:88:b4:f9:e9:60:f6:d8:72:d6:cf:ce:20:f7:34:e0:df:c0:
aa:4b:3c:06:68:df:a6:f4:e7:7b:18:99:cc:1a:c8:14:64:f6:
29:28:06:5b:01:2a:18:ec:19:21:fb:5a:94:fe:f3:71:74:2c:
b9:96:6d:70:14:22:cd:8e:75:1b:b5:4a:d7:17:69:f1:fa:dc:
ab:30:07:db:d0:da:3f:be:e7:d2:88:ef:0d:0f:1f:5a:1a:3c:
25:07:d4:1a:78:07:9d:00:26:1e:a4:93:82:41:c3:0f:87:36:
be:6e:57:60:cf:fc:ca:36:d4:ff:8e:96:d9:62:a0:d4:a6:2e:
f4:72:bd:28:cb:23:86:9f:3e:d5:3c:33:63:08:94:97:c5:05:
39:eb:66:6a:01:36:fe:a5:7a:23:eb:f8:4b:64:7d:eb:0b:f4:
90:a5:45:2e:47:fb:ff:3e:dc:79:8f:8b:06:fd:c4:61:09:1a:
d7:31:85:1a:cf:cd:44:a6:bc:08:a1:4b:91:cd:66:03:b2:7d:
29:26:9c:45:4a:6a:da:a8:9d:5f:f3:f8:38:1e:b9:d2:1e:e7:
96:e8:f3:a6:fd:d9:45:85:d8:9a:bd:b1:2b:a6:6f:9f:7a:ac:
e7:ad:57:00
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYMtDqScULrEADI0wlZCi+dTMzoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1
QTc0RENGNDAeFw0yNjAyMjgyMTI3MzlaFw0yNjAzMDQwNTAwMzlaMDMxMTAvBgNV
BAMTKEIxOTlGQkRCNTIxQkZGQzNCQTU2QjkwN0E4OUVBN0NGMzhERDkzQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4Qh9UuqQT2EIH29FrswW46OHT
LE+mnjCFTPgf8vXel7wBJXaTzrFHzQJh0kjpofvyjVd7KoPiB82dBJmk2cuO1IlR
CxwTNcvQ7psLh195d+O7772+hpGIWj6/vFaCt/1keUBDeNKn2bZcVmdRaS2qO6n/
eUGzVxV9vcB6HoREk30zn53GUI0XFDzOTPHfz5vXtQfyhpZ5tR2un/CcBOeU+PEI
k9kmfD4B0yNhbqTG48C9ZxzR+YrD8FX8LkLaW2cOgxKGkQX7tyXQmDyLPzM/3LTE
NvrZ2aa27EYYZDwgulSEkzPiavWEot9Wkc9OVIE2RWaLsLVkwc42WT1yjKE/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsZn721Ib/8O6VrkHqJ6nzzjdk8EwHwYDVR0j
BBgwFoAUpjzOY2bj/LeiZmqQkPKgV1p03PQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Nzc3NWRjZi0yODNmLTQzYzUtYWY2MC0wOWUwZGViYTAxYTIvMC9BNjNDQ0U2MzY2
RTNGQ0I3QTI2NjZBOTA5MEYyQTA1NzVBNzREQ0Y0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1QTc0
RENGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NzVkY2YtMjgzZi00M2M1LWFm
NjAtMDllMGRlYmEwMWEyLzAvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEw
NTc1QTc0RENGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEax/CuHHeYjA8hzTNmUd7eOSSmItPnpYPbY
ctbPziD3NODfwKpLPAZo36b053sYmcwayBRk9ikoBlsBKhjsGSH7WpT+83F0LLmW
bXAUIs2OdRu1StcXafH63KswB9vQ2j++59KI7w0PH1oaPCUH1Bp4B50AJh6kk4JB
ww+HNr5uV2DP/Mo21P+OltlioNSmLvRyvSjLI4afPtU8M2MIlJfFBTnrZmoBNv6l
eiPr+EtkfesL9JClRS5H+/8+3HmPiwb9xGEJGtcxhRrPzUSmvAihS5HNZgOyfSkm
nEVKatqonV/z+DgeudIe55bo86b92UWF2Jq9sSumb596rOetVwA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:08 2026 by rpki-client