
$ rpki-client -vvf repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft
File: A385F006CB4A332AED2E94013E7482A62617F17F.mft (raw, json)
Hash identifier: W+hH4n5aVUiCKbD3GknpGWGJOmEtwWh2N2pgHH7TgGg=
Subject key identifier: 92:23:51:BC:14:4F:4C:09:8B:C5:A7:60:11:0F:4E:01:29:36:E9:FE
Authority key identifier: A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F
Certificate issuer: /CN=A385F006CB4A332AED2E94013E7482A62617F17F
Certificate serial: 1943C2B3C181B5DE4AB9D589B0C8AB71B46B22B3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft
Manifest number: 03C8
Signing time: Sat 28 Feb 2026 13:11:42 +0000
Manifest this update: Sat 28 Feb 2026 13:06:42 +0000
Manifest next update: Tue 03 Mar 2026 13:14:42 +0000
Files and hashes: 1: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: D3IFwC+agUDfefnTI4Rr2XGP2SiD66JV5F/CoQ1sgto=)
2: A385F006CB4A332AED2E94013E7482A62617F17F.crl (hash: HOaxcOdhvO6utePHtrHd9lyqDQAUxn5uPBZtIhMZ4gQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl
rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 13:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:43:c2:b3:c1:81:b5:de:4a:b9:d5:89:b0:c8:ab:71:b4:6b:22:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A385F006CB4A332AED2E94013E7482A62617F17F
Validity
Not Before: Feb 28 13:06:42 2026 GMT
Not After : Mar 3 13:14:42 2026 GMT
Subject: CN=922351BC144F4C098BC5A760110F4E012936E9FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:19:02:75:75:ea:4d:a0:f9:c2:bb:05:be:
b8:53:6f:1d:7f:04:46:2e:ba:55:e2:80:e7:26:86:
40:72:89:85:f3:1c:be:cb:77:fd:41:f3:e8:fc:e5:
8c:be:e7:0f:10:38:dc:9d:a0:46:2f:b0:de:ae:c1:
a3:2b:0e:54:54:92:a9:7c:b0:19:fe:c0:d0:19:30:
4a:0b:58:46:ff:a3:c1:49:36:af:fe:4f:74:64:08:
92:fb:b5:e6:63:a6:4d:67:ef:ff:33:d4:c4:9d:59:
38:a5:91:83:77:5b:10:d8:25:4c:41:de:15:81:97:
23:74:d5:b4:8a:fb:90:88:fd:cb:b8:ae:f9:28:f3:
b3:83:8f:cd:05:ab:34:b3:86:4c:88:1f:cf:30:4a:
21:94:1b:1b:47:7b:37:d7:ef:4d:42:61:31:78:a2:
80:51:23:d1:43:45:7d:0b:cb:01:5d:38:64:a9:3e:
6e:7d:ad:76:a5:e4:d4:cb:64:31:85:95:25:13:1d:
6d:8b:22:14:7c:9b:ab:b6:20:6c:a9:bc:14:43:40:
0b:2b:47:63:c4:e1:81:cd:79:4c:7b:ad:38:b4:2d:
0c:36:64:da:4e:c9:74:fe:fc:75:a8:c8:86:62:8a:
8c:db:43:94:b4:c0:6f:d2:29:67:7a:ba:66:bb:b5:
06:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:23:51:BC:14:4F:4C:09:8B:C5:A7:60:11:0F:4E:01:29:36:E9:FE
X509v3 Authority Key Identifier:
keyid:A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:55:b0:e0:df:ac:f1:5e:76:5c:c2:00:da:2a:8f:e8:14:33:
2a:34:4c:c9:33:b0:fc:88:4a:c3:1b:87:6a:74:de:78:c7:07:
3f:8a:24:56:86:87:2e:d6:1c:0d:54:27:c0:e5:c3:36:10:e7:
ce:38:e2:db:5c:a6:e6:2b:0f:40:c8:14:60:64:f7:5d:e3:a9:
19:79:77:c0:e4:3e:4b:86:6d:e8:43:2c:05:c4:dc:41:3f:66:
25:72:71:6a:6a:02:85:9d:3e:92:11:24:03:52:25:f3:8e:39:
16:e7:d4:a4:e2:34:13:da:a0:a2:94:e7:0e:e6:73:59:ad:5c:
b1:35:3b:f5:0d:66:6a:a1:77:49:02:47:29:41:06:1e:07:77:
27:0f:d8:8f:73:31:f3:78:d3:22:85:51:64:e1:63:7f:f6:ff:
24:8c:60:cc:76:b7:7f:85:7a:57:af:e8:fd:7d:e3:78:ce:b0:
81:a8:3a:db:11:84:6a:c5:14:53:1c:08:80:e4:24:14:23:b6:
1a:cb:db:87:7b:2e:d7:94:78:c7:ac:6c:9c:73:a8:b1:a4:9f:
5f:21:4f:03:74:26:a7:76:4a:ff:34:63:68:d4:6b:c5:03:c7:
3d:88:fb:75:c0:17:10:07:57:37:c1:e2:b3:1a:b6:90:96:9e:
45:4c:fa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:45 2026 by rpki-client