
$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
File: 42042E672B688C3072FD4743B3E7DD81EC7CA306.mft (raw, json)
Hash identifier: xitH7tVhrIzLWYwuqBfe2d1sEIweKUo7yuVWz68KS64=
Subject key identifier: 88:86:C4:CE:DE:0E:3D:50:A6:13:77:CA:BD:2C:3B:1D:FA:23:45:EA
Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
Certificate issuer: /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Certificate serial: 2FD6A236EF4C869BAA8B68CA5716A9E9955F696F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
Manifest number: 03A0
Signing time: Sat 28 Feb 2026 07:30:48 +0000
Manifest this update: Sat 28 Feb 2026 07:25:48 +0000
Manifest next update: Tue 03 Mar 2026 12:47:48 +0000
Files and hashes: 1: 323030313a6436383a31333a3a2f34382d3438203d3e203338373539.roa (hash: fFkVLevboYrZm0ldmwFZBHRDjcsbCO8x/cTP2HxOjwo=)
2: 323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (hash: ghIreGGw1MSr8fVsMwycbTOs/dBctFRQZd0vQbqY1I0=)
3: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (hash: 5jpE9PaDWg32h1mep4+lRpd6+XHerxcnHEsnK1sv4vU=)
4: 323030313a6436383a31323a3a2f34382d3438203d3e203338373539.roa (hash: BqoEpAp2+UEuN6knkf0iHBFe+NlPdDdo1asiTk5cnH4=)
5: 3230322e3138302e302e302f32342d3234203d3e2037353837.roa (hash: cje0RNSx9P/cOPpCtYQDwkY1I+kc9+6oUoy5ingJOIs=)
6: 3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (hash: ieZuTIxFCE7GT48kZHlnhDRdoyyMo22tAQF2MzZLBUM=)
7: 323030313a6436383a3a2f33322d3332203d3e203338373539.roa (hash: PrDMvAYB7DejmELDT18axQRCP8RdhUdpLoyo3trY+po=)
8: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (hash: BnGtn4VWnuPol8Hcuxr+9+BtpB9xmH5yyn9/+BeKN6Y=)
9: 3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (hash: HtfoWX2moqZb8+kymM9PVl+dux6Wm9LUZexAAwCV9Wk=)
10: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (hash: U1oEb+i6KKGi7dOnpejft8TEWnvu9mWUcqiHJxud3FE=)
11: 3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (hash: 7wzHDGiNPdR1rFQHicraAxcZjQRCh3/Q5KM8DSR+Lzc=)
12: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (hash: 0wFTN/XqtAoutydwqc+DafnIfaxz+FirKWo3fLraaUs=)
13: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (hash: 6gKMD4zRtDAlRcIkaIZo0T1mR3a0YZm8KjfJzM2lqqc=)
14: 3230322e3138302e312e302f32342d3234203d3e2037353837.roa (hash: NbHhFmy5+M9dcxTboMeZja93XE4Bi3M8QPJR5OVXXh0=)
15: 323030313a6436383a3a2f34382d3438203d3e2037353837.roa (hash: VNcs+Fmh0oNgiWo/oCDkDKUsnCnybqve/EpfB0M2J0s=)
16: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (hash: W3Rk8oMCIZrZG18jw5tK5o5kQjsEemd0y2JxL184dQU=)
17: 323030313a6436383a3a2f33322d3332203d3e2037353837.roa (hash: 8fbkbe+zjfoqQaxLOTN723BKYFqkAiYSq9UlyPBgR3c=)
18: 3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (hash: 99pjiFxy6i9aAF5V+k03NOY+ffA/N57vuM+xXi4hwV0=)
19: 323030313a6436383a313a3a2f34382d3438203d3e2037353837.roa (hash: 3O9Dun/SNBINZ3B9YhjfBGGqTvlmzFCIO86PaMzUieA=)
20: 323030313a6436383a373a3a2f34382d3438203d3e203338373539.roa (hash: muxJdFe2pixOmgM0+n/vOhMDRG8grm2Btn/Nr9wnHdc=)
21: 42042E672B688C3072FD4743B3E7DD81EC7CA306.crl (hash: jwR31WiQaiwNAn4OudynY44qfmZmM4tPNRFIJHBTlQg=)
22: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (hash: CpXbrXmGX4ITchWOi7/vrQ9BAy1FQYBh+LSYePLlGN8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl
rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 12:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d6:a2:36:ef:4c:86:9b:aa:8b:68:ca:57:16:a9:e9:95:5f:69:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Validity
Not Before: Feb 28 07:25:48 2026 GMT
Not After : Mar 3 12:47:48 2026 GMT
Subject: CN=8886C4CEDE0E3D50A61377CABD2C3B1DFA2345EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:33:47:ba:81:d2:4a:cf:e6:66:e0:c6:99:
01:06:46:95:06:45:83:09:e0:de:95:52:59:90:f4:
60:a8:8b:c1:f8:1a:34:dc:5f:fe:b5:7a:a6:b7:88:
46:26:ca:7a:da:47:d9:cf:40:8f:8f:f3:17:84:34:
6b:e9:3f:74:ed:64:9c:64:9e:af:59:b0:4a:24:00:
2f:24:75:49:3e:8c:ad:e2:3b:75:a3:16:cf:ff:f9:
ce:d8:d6:e9:0e:a2:92:0d:a9:08:0a:e8:fc:d3:06:
de:b1:d7:ce:60:c2:aa:20:a9:38:b4:38:6e:9a:7f:
0f:3e:c5:6c:76:91:7f:5c:93:59:88:40:00:f6:8e:
ce:28:05:52:0e:de:c9:6f:86:16:c7:3a:12:3c:3c:
9d:4c:c3:ca:51:f6:39:03:4f:16:9f:de:c6:47:4e:
d8:2e:90:6c:8a:f0:62:03:5a:34:02:e5:76:90:c2:
a1:4a:2c:c1:79:9b:dd:53:8b:f6:68:01:e5:5a:19:
f8:9b:92:2e:f0:14:4d:44:f8:49:75:50:88:8a:cf:
9c:68:e7:e1:7c:c6:ba:a0:83:d0:fe:58:7b:d8:f8:
2d:12:41:2b:bf:f1:e5:3e:e5:6a:da:47:a6:95:c6:
67:6f:8f:0b:6f:5f:41:14:e0:58:9b:ec:45:9f:0a:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:86:C4:CE:DE:0E:3D:50:A6:13:77:CA:BD:2C:3B:1D:FA:23:45:EA
X509v3 Authority Key Identifier:
keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:51:94:2b:f7:30:8f:34:bc:53:45:de:cd:7c:38:51:0c:db:
0f:49:4e:96:4f:9a:8b:c5:f4:c2:1b:33:f0:50:f9:bc:5c:7c:
a2:cd:f1:ac:e8:13:89:04:c7:9b:aa:85:ae:45:6a:20:6a:1b:
53:1a:1c:14:aa:35:72:72:67:83:da:79:0a:2e:f0:7e:06:89:
d7:38:f6:df:94:da:da:b2:e5:cb:18:07:2b:e6:a7:c2:16:53:
5c:c6:d9:ef:89:0f:de:64:10:2f:f5:f6:fc:a7:52:d5:8f:02:
39:f1:ff:a8:98:e5:5d:8b:a4:ef:8f:c3:82:2f:0f:31:90:6c:
43:2c:b4:b2:0b:98:55:5f:d9:fb:13:45:62:e5:39:cb:28:c4:
91:de:90:11:e3:56:dc:aa:04:8f:7b:47:61:ec:96:b7:79:99:
1d:a7:01:26:4a:65:25:e9:5a:d5:1c:bb:63:80:2c:9f:29:49:
95:2a:e6:7c:ef:38:df:6b:65:77:af:d9:60:c1:2e:05:b6:fe:
9f:bb:50:77:b7:3d:fb:fb:5a:ae:a3:19:fa:2c:23:0f:22:13:
bd:f9:79:eb:f6:33:60:50:75:1d:50:bb:18:30:bb:96:fc:8e:
7b:f3:63:4e:ed:78:29:71:94:1c:bc:ff:2d:6e:bb:14:10:0b:
3c:f8:78:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:23 2026 by rpki-client