
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft
File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json)
Hash identifier: 7NhQo6XQmg2yCOO8A8Q8pEgGXes+OQ9j66TdZXYYy5Q=
Subject key identifier: 7B:F6:8B:FC:28:37:A3:97:95:FB:5A:4E:E4:2E:C6:66:F6:72:CD:E7
Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0
Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
Certificate serial: 4805D553B4C49AB5E741C2CD96AE1ECD7E128291
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft
Manifest number: 0562
Signing time: Sat 28 Feb 2026 01:52:37 +0000
Manifest this update: Sat 28 Feb 2026 01:47:37 +0000
Manifest next update: Tue 03 Mar 2026 05:47:37 +0000
Files and hashes: 1: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: RHXOQ+yPKvRAlDzdTxCz4zdrTx7c5rWYgpXqFGqY21k=)
2: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: amdqV6lzMAC4zxO9RwYxm18VuzSqbFKiq2hPtX/elIw=)
3: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: hXWJa8fVoj0vzNayNv76Qv76zEys5r5KfZWHwpWNqSA=)
4: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: /uE3RoNjstpZuWvkeLBYaDpbs3/pa2JGUNOwerwb9Qk=)
5: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: fEqrWk5yzRrIfC/NwZzR4O5o8YjE++0relBMS0Qsam4=)
6: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: M4zMEE4gM9B2z9mzotuldgSgaCKFtNvfP7tGSiFjQks=)
7: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: 1FGJd6AqSTK9oY+Kf0u0bGP0qcgnLzetRfPl9A2Bh4w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl
rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 05:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:05:d5:53:b4:c4:9a:b5:e7:41:c2:cd:96:ae:1e:cd:7e:12:82:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
Validity
Not Before: Feb 28 01:47:37 2026 GMT
Not After : Mar 3 05:47:37 2026 GMT
Subject: CN=7BF68BFC2837A39795FB5A4EE42EC666F672CDE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:1e:01:8a:88:92:f3:00:a4:be:4c:b4:6f:
0a:1d:a9:7f:21:b4:8a:4c:1c:7f:d0:98:9a:26:2e:
9e:20:da:00:14:1d:03:73:be:33:1e:b3:79:37:00:
d3:5e:63:ec:90:3a:1c:a9:7c:ec:42:ac:32:11:13:
c8:65:30:d4:27:20:b2:c6:01:3d:03:1e:7e:e8:72:
a3:c8:38:8b:a7:e2:67:e4:98:18:3a:b0:88:c4:56:
e0:06:2c:72:61:26:21:5d:a4:47:a2:90:20:57:86:
99:64:1a:bf:8e:25:10:5a:70:ea:8f:b4:c5:4d:7e:
37:6b:48:b1:8b:e4:45:6e:b9:28:b5:0d:dc:c3:97:
65:ac:87:72:70:2e:63:25:3e:7c:bc:20:aa:b9:72:
95:0f:b0:5f:3b:50:65:60:83:7a:01:ad:73:68:bf:
fc:51:d9:c2:dd:7c:c7:fd:28:b3:15:97:03:dd:c8:
9f:d7:c5:13:e2:94:95:0a:d9:5c:ca:ca:a9:43:af:
b5:d2:57:9e:5a:1b:93:37:de:dd:4b:82:ce:82:5e:
a8:5d:a9:f3:e2:98:ab:02:20:e6:35:da:08:36:d4:
31:ec:9e:9f:c1:f6:f4:74:83:87:d8:41:e3:c5:12:
da:52:7c:cd:38:73:48:bd:68:6a:8e:55:88:6e:bf:
57:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F6:8B:FC:28:37:A3:97:95:FB:5A:4E:E4:2E:C6:66:F6:72:CD:E7
X509v3 Authority Key Identifier:
keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:00:de:f6:84:09:c2:c6:5d:cd:59:3f:67:e9:4a:57:ab:af:
ad:e4:e7:b8:d6:bb:83:e8:f4:7c:38:3b:22:ba:ac:51:98:23:
4a:47:3f:c0:6d:66:c2:e6:e9:f5:35:03:c4:ea:02:82:9a:1c:
be:d9:49:aa:7d:bd:fd:ec:98:4b:5e:eb:b1:a6:67:8d:94:98:
83:ca:7b:eb:9a:6c:5e:ae:e2:44:84:38:11:94:07:5a:c1:6f:
ea:56:41:9b:29:6d:50:d1:57:4c:99:e7:e7:34:c4:f1:b3:18:
dc:0a:13:0e:89:cd:33:bf:61:76:3a:7f:59:e4:b1:3f:4f:a1:
1b:9c:54:7b:a6:1f:5b:8f:11:9e:d6:45:29:14:11:23:44:42:
8b:3c:6b:42:df:d7:dd:71:1d:87:d5:eb:f9:14:f9:43:4c:e8:
ab:26:96:66:71:2c:93:f3:79:49:33:d4:d8:50:f5:97:f8:e2:
4d:22:78:67:1a:cc:4f:0a:7f:25:fa:13:9a:61:99:bd:09:e9:
8a:3e:b0:08:65:06:4e:8c:88:0d:c5:4b:6d:78:8e:3e:c7:67:
f7:fe:ad:d2:74:ea:55:db:10:70:af:20:6e:e8:99:2a:91:4b:
c3:f5:89:ea:9d:c1:55:2f:53:bf:f0:4a:e7:ee:c1:13:04:0d:
d7:5f:ad:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:30 2026 by rpki-client