
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
File: 3E0D060F214DF8E6493243033EBD30ABD627ED36.mft (raw, json)
Hash identifier: f6bmolXckQtWdteC2XKJMPkPF1mufnswVcngVA+6/kY=
Subject key identifier: BF:9A:B8:02:4B:57:9E:67:7C:28:67:A2:69:CE:25:2B:8F:17:3B:E0
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Certificate issuer: /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial: 0A791F6F11D049FEE00C54EB63471C81C91159CE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
Manifest number: 039E
Signing time: Sat 28 Feb 2026 17:11:29 +0000
Manifest this update: Sat 28 Feb 2026 17:06:29 +0000
Manifest next update: Tue 03 Mar 2026 23:49:29 +0000
Files and hashes: 1: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: JWZBNDnWrENdctaqQmnbVevM+3EqtVlewochx0EfS+s=)
2: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: Ez6QIdOXrwH3cf8oEyXk+iBGNJ8xFXIz0jGNdzgCm5M=)
3: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: 3D9vuP9WnybAIy/tjpIyzYKT6Y/ASbbbLJ7Kn+x1z7Q=)
4: 3E0D060F214DF8E6493243033EBD30ABD627ED36.crl (hash: eNJDKpzlXC/qBjqlPcOyOjOLoK692hwvVmiqa204xZA=)
5: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: fOY5dkAcQph8EWJTLprRbPuleZdE/MLjzsb7GZ9f9kI=)
6: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: jx7v0Idpebq1Ou6PCUn6oQ0kEGw/RyRx4sL+jxJLcZU=)
7: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: weBnxCBwkaeNxkdjFOdohMOR+sXn3+vCk0UPpAqaQI8=)
8: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: CbVKZtVYvVOggDO1uOKPHPfiUdMOnMjVJFDe5xCk8Yw=)
9: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: xxFYLgnOs6wDgHlT3HJi54CQjUA2KWj+T7DvpjE3DPU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 23:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:79:1f:6f:11:d0:49:fe:e0:0c:54:eb:63:47:1c:81:c9:11:59:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Validity
Not Before: Feb 28 17:06:29 2026 GMT
Not After : Mar 3 23:49:29 2026 GMT
Subject: CN=BF9AB8024B579E677C2867A269CE252B8F173BE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:ea:e7:e4:33:a9:f0:61:05:19:93:69:1c:
f3:85:14:e3:d4:5e:d4:21:ed:d6:bf:56:a9:dd:1e:
15:63:63:2a:fd:05:b9:54:1e:3c:9c:80:6c:5d:24:
fb:54:b1:1d:e0:b0:48:b0:de:0b:04:00:91:68:1c:
70:60:b8:1b:a2:01:7c:2c:ca:68:73:6c:e7:fa:d4:
46:bf:1c:ec:22:b2:f8:7b:f0:09:82:ff:af:76:d2:
7f:5d:b6:29:67:0d:46:59:dc:4c:cc:53:0d:99:09:
a0:7a:38:9e:cc:b7:be:82:ce:36:e2:a2:82:ab:98:
c5:19:f2:b2:1e:df:f2:08:bc:45:fe:85:05:1a:d5:
32:21:43:56:20:32:f0:91:cb:2e:68:85:6d:60:2b:
4f:a9:e2:8b:39:a0:98:e0:83:5e:f0:96:f5:3d:dd:
0b:22:2d:bd:84:d7:45:da:93:68:8d:09:ff:cb:f8:
9a:fd:d9:32:9b:1b:a6:25:1c:ef:b0:a8:a3:63:37:
00:91:2f:b5:b1:45:d6:e3:77:c9:37:a4:6d:73:04:
9d:a9:0f:3a:c2:c5:f9:12:bb:27:92:6c:35:dc:b2:
c5:81:44:6e:c3:60:19:07:ec:c1:e4:c6:94:6e:ac:
95:b4:12:27:c3:ba:c2:53:6d:27:12:ef:03:e9:0d:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9A:B8:02:4B:57:9E:67:7C:28:67:A2:69:CE:25:2B:8F:17:3B:E0
X509v3 Authority Key Identifier:
keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b8:df:42:27:82:b9:29:5d:dd:59:6d:2c:bc:0c:78:a6:98:
29:cb:9b:3f:40:46:2e:ff:ff:af:51:5d:79:d5:ce:b8:20:5f:
45:ca:ad:ef:a9:87:12:7a:d3:e2:66:a0:9c:28:d2:95:74:dd:
4a:dc:e6:11:b1:f8:b7:cd:cc:dc:4d:ee:4f:10:f0:e2:ff:aa:
45:73:41:68:2a:3d:47:90:50:54:da:54:cb:15:db:48:8f:c2:
f0:90:88:92:39:c4:3e:b7:84:bb:aa:26:7b:d2:57:db:80:2e:
90:90:46:54:5b:32:3e:25:04:4f:db:26:e4:22:8f:53:ff:f9:
d2:a3:e5:14:d8:b8:3f:71:15:6e:38:66:92:94:27:0f:71:85:
59:41:84:5c:45:58:ac:cc:27:43:a4:04:f7:06:07:59:44:52:
79:2c:86:06:f5:9e:4e:16:e0:d6:cc:53:8b:68:6e:9f:98:40:
81:85:53:e9:ec:2e:bd:aa:16:85:1a:3c:3d:f3:7f:37:f7:a9:
68:ad:35:48:7a:ea:5b:f8:4f:55:9e:38:ce:5c:ed:04:c8:66:
8d:70:33:e3:d6:cd:bf:ae:e2:e6:fa:8e:f6:29:a4:a9:d8:62:
8b:72:3c:bb:3f:57:17:ae:8a:8a:de:ed:3f:33:06:06:58:46:
9e:ff:65:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:22 2026 by rpki-client