
$ rpki-client -vvf repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft
File: C8AC2212A272ECEAE88D5232072578922C0E2E05.mft (raw, json)
Hash identifier: /NGQonplOXyK+MfBNz3b5A9X3WUeCn3hAaBZWNBGrxQ=
Subject key identifier: C0:FC:CE:75:06:82:D0:16:C5:35:66:00:D1:D9:8B:C2:A8:F8:34:19
Authority key identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05
Certificate issuer: /CN=C8AC2212A272ECEAE88D5232072578922C0E2E05
Certificate serial: 6FABC54D86B646734065AE1BF66F0730D8355C69
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft
Manifest number: 0426
Signing time: Thu 16 Apr 2026 00:40:06 +0000
Manifest this update: Thu 16 Apr 2026 00:35:06 +0000
Manifest next update: Sun 19 Apr 2026 08:55:06 +0000
Files and hashes: 1: 3130332e3136372e3130362e302f32332d3233203d3e203538333639.roa (hash: gNg3pSVKH2ZGTQUKj2gYHIgoAzjmyWJ8bVXnPWnC+00=)
2: 3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (hash: 7+14GGdnKYA1ZHAWIx7SieKlT4Qpyh9xXAdG5rCu8fQ=)
3: C8AC2212A272ECEAE88D5232072578922C0E2E05.crl (hash: Zd4KUebeAmb+3hZXDar4Xf9dadyAqo/LmLjewX3T6lU=)
4: 3130332e3136372e3130362e302f32342d3234203d3e203538333639.roa (hash: gVPQrVQX9oWdBIjWPQSJvyIQ3AEVj+vaeGmFfblKRbs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl
rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 08:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ab:c5:4d:86:b6:46:73:40:65:ae:1b:f6:6f:07:30:d8:35:5c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8AC2212A272ECEAE88D5232072578922C0E2E05
Validity
Not Before: Apr 16 00:35:06 2026 GMT
Not After : Apr 19 08:55:06 2026 GMT
Subject: CN=C0FCCE750682D016C5356600D1D98BC2A8F83419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:64:38:aa:79:d5:8e:08:41:fa:2f:f3:7e:
e7:f1:5d:ed:a5:33:42:e3:b6:e0:96:8d:92:bb:1f:
2d:46:08:5b:58:58:68:cd:ea:97:b5:ab:20:ee:c2:
ae:44:99:17:d4:d6:2f:a4:12:f5:d9:dc:5d:97:e2:
e9:34:30:57:bd:9f:ec:2f:09:c3:b7:1a:ad:e8:4e:
fc:2a:5b:c3:9a:5a:71:ae:70:ba:28:a4:f7:e5:57:
24:bd:5e:55:07:b7:f0:54:e7:3f:3f:7e:09:a6:45:
b5:2c:55:fd:8b:dd:4d:b3:ee:44:f4:8c:58:6a:cc:
3e:28:99:ef:e5:c9:18:e2:dc:a0:61:9b:f6:17:97:
3f:e1:ac:90:4c:67:7e:17:73:53:bc:c0:02:06:72:
f4:41:56:6e:4e:9f:55:b2:b6:19:d9:dd:a1:89:fc:
ae:0c:e6:93:37:ae:04:21:54:ad:66:0b:14:86:7a:
3e:75:ae:90:84:b5:2e:e1:60:7d:88:71:36:c5:67:
79:74:e3:7b:31:a0:d8:fa:8f:b5:ee:2c:9d:57:bf:
c0:a1:90:d9:18:3d:94:cc:e3:4f:95:8a:55:f4:f6:
57:76:d4:f9:3d:2b:98:63:44:78:e8:a1:b3:e3:55:
e6:f2:be:87:97:03:1a:58:75:16:ba:b3:9c:3e:c8:
13:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FC:CE:75:06:82:D0:16:C5:35:66:00:D1:D9:8B:C2:A8:F8:34:19
X509v3 Authority Key Identifier:
keyid:C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:11:87:1c:a6:34:32:65:6a:d0:c1:b6:27:db:2d:42:62:e4:
1c:91:48:87:a5:41:47:9d:af:ae:93:78:e1:68:7b:e5:11:74:
12:1e:6a:7d:77:8c:e7:34:79:06:ce:4c:3f:09:61:52:5a:95:
2f:55:f8:fe:fe:06:d9:ae:91:1c:78:1a:7b:ce:d2:dc:51:62:
ba:d1:72:e4:ff:f1:43:dd:2a:82:0a:8a:b5:fb:fd:3c:c2:c0:
fb:b7:06:d5:d2:d2:40:10:d7:24:25:f9:f9:1e:c0:ec:2e:0c:
e9:a5:96:43:4b:52:11:58:74:3b:20:3c:d6:73:5c:76:e7:57:
3b:4f:f3:ff:43:d9:67:f6:7f:7b:d8:26:f5:28:2a:5f:9b:87:
93:8a:a6:4f:a3:ba:31:da:b4:32:9b:08:a2:25:e9:15:d0:e4:
2d:ca:ab:89:dd:72:73:2e:25:0e:1a:b0:ca:40:2a:50:d4:32:
64:0f:49:17:20:83:6e:20:6d:60:7e:65:ce:ba:02:2d:58:6e:
b3:f4:54:7f:9a:05:be:fc:b5:06:a0:82:07:e3:41:55:f1:c7:
d3:76:14:b4:bd:6d:f0:7b:48:5d:bc:29:1b:80:c8:7e:45:d1:
30:7d:62:92:ab:fb:df:db:6b:01:e2:ba:a1:65:b0:d6:34:c1:
dc:91:09:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:07 2026 by rpki-client