
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
File: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json)
Hash identifier: RsZaowk1/sQQ4tP8PTZOVZ65zR5daTIRUtE3ODx4hvw=
Subject key identifier: 34:E8:FA:18:98:B6:DF:BA:71:B1:35:4A:CD:95:D9:8F:9E:31:CD:0A
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial: 0B3FF4C9D8B2BC3D692A690FFD276922C3BE51FD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
Manifest number: 0586
Signing time: Fri 27 Feb 2026 14:30:57 +0000
Manifest this update: Fri 27 Feb 2026 14:25:57 +0000
Manifest next update: Tue 03 Mar 2026 00:40:57 +0000
Files and hashes: 1: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: Mo+ywRg/G9o+M5ufzONjfakS+qPVaicNW0HrvAATwhk=)
2: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: 6L28DKU2IWYtA3lRV3VTpPyJ/UkW+g97L32zaXfZ124=)
3: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: nj7nwkg4jEji5skSyGq127SyeIEToj2AxAchD/5z7y0=)
4: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: /Pgqw6Rs+ajT828waAS0R/dEt8fu2pWuzGj9i8zT3Rk=)
5: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: zHFuXcJsHRS8oU5g73vyR9ezkdJAc6jv+r1NZhBGTU4=)
6: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: 75E5/wNg1gW13NP4pidyseZpfPgC9bQlFJMQWGidUN4=)
7: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: l79vjEoCDRYp7Imq4o09nFUUOawBLUlHdvJpjB5kQuE=)
8: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: JNQ343i5OALYy6+PPMTF9ZMCDVDR/l5G+uGpk10x6iY=)
9: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: wSzeEeUlQ9dVeDBBx0XlYcJDAiPM7sQsbdx5J/YQ+rE=)
10: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: QhseuehbmAg1CgvzVHn3OnXvEwbOGfNyxdByQxi2PSM=)
11: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: eUGLFIbBQXUlbrF2iA2Xszdo9Zh7AGLGsZzJrRkvT6k=)
12: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: 72HPQ9soRaE4/4lgNJ5rLeh7S0aFvaQSc2jBFme4Gu0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 00:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:3f:f4:c9:d8:b2:bc:3d:69:2a:69:0f:fd:27:69:22:c3:be:51:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Validity
Not Before: Feb 27 14:25:57 2026 GMT
Not After : Mar 3 00:40:57 2026 GMT
Subject: CN=34E8FA1898B6DFBA71B1354ACD95D98F9E31CD0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:52:37:d6:5c:df:04:bd:c3:27:7a:0c:88:0c:
76:ee:e1:40:d5:85:d1:96:e6:fc:3b:ec:66:b2:f2:
7f:1a:3b:6c:9b:e8:e6:bf:1b:54:16:42:e3:81:93:
5f:8f:cb:c6:b1:03:80:56:67:ec:7f:6a:10:be:ef:
e5:dc:af:78:63:d5:26:46:16:a4:b8:18:d9:9a:37:
e8:8a:63:8e:a7:39:91:7c:ce:38:a1:61:45:aa:76:
b7:7d:03:2a:a6:35:0e:13:90:3c:d7:44:19:84:0f:
ea:6e:bf:db:63:35:69:69:68:5b:fc:b8:b0:a2:ab:
9a:4f:ea:64:a3:4d:c2:3e:df:21:7e:f5:fd:cf:9f:
ce:44:f3:5b:48:a7:c5:45:bf:49:90:82:1a:d9:e7:
00:34:94:b2:fa:06:f8:60:cf:4f:b5:91:87:40:7d:
96:e1:0d:e5:49:32:18:ff:10:f8:4b:63:49:65:eb:
1c:3b:80:6a:eb:8a:b8:24:91:88:af:ae:3e:b6:00:
62:bf:36:0a:26:78:24:b8:68:0f:b5:ab:4a:26:8a:
03:b4:1e:86:f3:9e:cd:70:df:d4:e3:7c:54:87:25:
5d:44:c7:78:ca:d6:53:7a:13:86:b6:d8:37:d3:b8:
15:bc:f9:e9:1e:a2:b1:7c:fd:b1:cd:b2:ce:45:b2:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E8:FA:18:98:B6:DF:BA:71:B1:35:4A:CD:95:D9:8F:9E:31:CD:0A
X509v3 Authority Key Identifier:
keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3d:7b:66:37:58:5f:9e:5a:4e:a6:0b:92:1b:5d:7b:73:94:
69:1d:7e:95:54:45:e0:50:b8:58:85:77:62:3d:83:db:81:e2:
9d:a5:af:5d:ae:60:3e:ca:26:c3:36:22:be:8f:5f:b5:82:a2:
c1:7a:e5:f9:b2:12:19:4b:a0:d4:fe:f1:c1:bc:48:c0:d2:e0:
29:eb:9e:7d:21:1e:ab:e6:6d:61:74:8e:47:0a:6e:43:ec:72:
f7:d7:97:c3:b5:90:92:14:cc:b1:84:cb:87:a0:82:0d:69:f2:
e1:ef:53:ff:ff:f8:98:00:03:0e:82:a7:88:37:71:c6:85:24:
87:ff:eb:ac:eb:5b:27:0c:8d:25:d5:81:ec:09:2f:47:66:39:
d1:0d:41:c1:e2:dc:4c:6a:b5:1b:27:3f:51:d0:a6:c9:5e:a7:
73:ae:4b:27:94:29:b5:56:ce:16:fe:19:b7:7e:f4:4b:4a:07:
16:d4:8e:de:ec:04:2c:54:26:99:67:6b:0e:cc:b1:60:36:dd:
1f:5c:af:2e:16:e4:d7:60:00:5c:72:91:4b:24:56:6f:e0:5c:
99:7e:c6:c1:38:cf:b7:c0:bc:ef:41:2e:20:28:8a:e6:eb:2b:
e7:e4:df:ec:13:4d:ba:18:ea:ab:9a:b9:ea:e2:3f:e9:41:e2:
96:1b:da:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:36 2026 by rpki-client