
$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft
File: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft (raw, json)
Hash identifier: ovctM0xli1FW1KKJs+0QWm8u359cd/HzZMBmXaUCJ6o=
Subject key identifier: 61:14:6E:EA:FF:A3:54:27:46:B1:F7:AA:A2:0B:01:37:46:26:07:22
Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31
Certificate issuer: /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31
Certificate serial: 1983838E73E828D04516DE9F974659DAEF0A7F18
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft
Manifest number: 010D
Signing time: Sat 28 Feb 2026 13:00:53 +0000
Manifest this update: Sat 28 Feb 2026 12:55:53 +0000
Manifest next update: Tue 03 Mar 2026 15:06:53 +0000
Files and hashes: 1: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: 9S29qFeJZloki9PWW9tdgsR5Hw2QfhcPZXeZtm9LI8o=)
2: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: pTegOhD4z3Faaf9uEY5aINqGFpg8v+KgvZMxN268mY4=)
3: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl (hash: Ug516hjUcFAz4xOewq3A9IbxPXCQL3hkn1o4cOo6qXg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl
rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 15:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:83:83:8e:73:e8:28:d0:45:16:de:9f:97:46:59:da:ef:0a:7f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31
Validity
Not Before: Feb 28 12:55:53 2026 GMT
Not After : Mar 3 15:06:53 2026 GMT
Subject: CN=61146EEAFFA3542746B1F7AAA20B013746260722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:6f:64:35:b1:1f:be:b6:0e:b9:2f:0c:63:
85:66:ec:03:57:1f:eb:95:9a:86:8a:8f:57:ab:a0:
c0:a2:55:1b:60:0d:3c:d0:e1:83:08:97:83:48:bf:
84:bc:f7:93:91:80:7d:66:05:a6:83:30:f3:2b:47:
8e:e4:b7:15:3d:02:4c:e2:bd:ef:16:df:af:b5:c5:
f6:84:37:92:07:2e:89:8d:e1:da:cc:9d:61:1c:5d:
f0:1c:31:ab:69:81:f8:a9:98:4e:7b:c2:ca:f1:00:
d6:7a:3d:45:e3:1b:0c:c5:7b:94:d7:1f:67:0d:58:
b2:cf:85:6a:3c:b0:cc:e5:de:fd:45:5c:35:61:69:
40:96:f3:06:d8:65:8f:83:f2:ef:f7:82:ec:92:81:
1b:6d:71:76:e5:de:ae:41:44:c7:2c:82:ae:fd:89:
ca:fa:06:af:5a:59:d5:32:ef:7d:4d:37:b0:a4:75:
a1:0b:cb:d7:9a:6f:a0:6e:91:64:0a:92:c4:dc:cb:
da:91:d7:95:ab:5d:84:41:bc:96:ce:2a:ac:27:53:
7d:97:45:75:e5:e3:e6:1d:4e:1e:86:58:f2:8f:d6:
82:79:5e:7e:9e:26:b4:30:22:26:90:05:e3:09:38:
44:ab:fb:06:8e:fa:31:4c:65:2f:2f:33:9c:1c:bc:
f5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:14:6E:EA:FF:A3:54:27:46:B1:F7:AA:A2:0B:01:37:46:26:07:22
X509v3 Authority Key Identifier:
keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:18:48:77:41:15:52:f5:38:60:9b:43:4a:d2:a6:c2:a2:02:
9f:ed:e0:89:f7:e6:48:38:2c:97:80:7e:ba:3b:66:6d:be:fa:
84:ed:91:65:73:d1:67:15:c5:7f:93:76:82:67:00:84:f4:11:
5b:b1:a7:08:bb:63:f7:83:50:f3:e5:35:10:e6:e0:00:5f:18:
4a:f2:39:bc:9a:9e:5b:17:23:d9:24:09:a0:37:8b:cb:be:9b:
92:db:50:48:e8:bb:07:75:54:b8:0f:44:a7:1f:d1:8c:7d:34:
b9:36:8b:d0:86:d0:85:5d:a9:1b:dd:68:6a:f0:93:b4:cd:da:
f3:27:f4:4e:a8:9e:bb:a1:fe:fe:bf:f8:0d:d9:c1:14:f4:fd:
41:31:62:fe:20:be:99:bc:0c:7b:1f:b0:ab:3d:24:77:ea:9b:
57:cd:52:ad:9a:6d:70:dc:e7:1e:a9:0e:09:4f:54:16:6d:3e:
28:4d:8d:fa:9a:12:2e:38:90:71:2b:d9:89:3e:ef:cb:af:35:
55:17:42:8d:46:01:62:94:dd:8b:5f:03:44:fb:78:82:14:41:
91:b6:af:22:f1:45:e8:7a:81:ed:35:8b:c3:08:0e:93:4a:d0:
13:55:ff:95:56:20:22:2c:4b:83:15:e6:8f:89:94:ef:69:a5:
82:8b:3d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:41:58 2026 by rpki-client