
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft
File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json)
Hash identifier: jne39sllZHP7dDcG92CI4ZQYoLPSVlrG2l5gbVpKIMQ=
Subject key identifier: 1C:36:CF:02:1F:83:48:A0:BA:E4:92:C2:BB:24:5A:4F:1D:C5:B2:87
Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB
Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB
Certificate serial: 1EB3443051F4707E526A8E3A23070953E3F9598E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft
Manifest number: 0238
Signing time: Sat 28 Feb 2026 18:52:36 +0000
Manifest this update: Sat 28 Feb 2026 18:47:36 +0000
Manifest next update: Wed 04 Mar 2026 03:47:36 +0000
Files and hashes: 1: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: ORSqyMTOnq93QH/hWB4KdVjpFg2uFctZTHppM0F/QCI=)
2: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: wfRjzL8bQ7dLLloZedRWystpfn4vijpj4SNcPfcqhxI=)
3: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: bYUXew86UoI4/31WSjYGIt5ZDZ5ojqbj3fo7ufpNm20=)
4: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: 7OzNX15Yuahy0/8eEN1/yzezZR+83/JHbFFyRpwzwPM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl
rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 03:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b3:44:30:51:f4:70:7e:52:6a:8e:3a:23:07:09:53:e3:f9:59:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB
Validity
Not Before: Feb 28 18:47:36 2026 GMT
Not After : Mar 4 03:47:36 2026 GMT
Subject: CN=1C36CF021F8348A0BAE492C2BB245A4F1DC5B287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:39:1a:35:e5:64:9c:2a:bb:95:74:59:50:
46:f6:b4:72:b0:c1:fe:e3:a9:0e:1d:b0:57:98:63:
2d:74:6c:9e:a4:e6:a5:f3:71:b6:b0:96:29:96:07:
1f:7e:ff:31:7a:48:28:e6:e1:5a:7d:bb:ba:b3:2f:
83:e8:a1:c0:5e:f5:d5:39:79:f9:8a:26:b3:21:6d:
67:86:0c:57:b7:ff:7b:4a:1a:2e:9d:0b:cc:84:9f:
50:8b:8f:e1:a7:9a:8b:6e:38:c9:b3:8c:6c:68:f2:
ff:a7:39:c4:8a:f1:32:b9:46:36:3c:9f:cf:32:3a:
7b:b9:d1:92:b6:89:75:13:30:b6:fe:1f:66:2e:dd:
05:bd:55:e6:48:02:10:ce:80:b1:fe:10:ef:8b:30:
d0:aa:ef:6c:4d:69:c3:62:b3:a8:57:a6:ed:d8:3d:
73:dd:2a:2c:8a:f3:41:a5:12:cd:5f:fa:6d:0b:c4:
fa:b1:3d:4d:69:92:29:c2:45:65:f4:bd:88:0f:d6:
8c:f0:3e:73:3e:b2:e2:5f:97:e3:19:43:17:c5:88:
0e:74:8a:c3:ce:02:bf:cc:80:78:6c:b2:57:0f:67:
a5:81:c6:e9:c9:75:0a:96:7e:82:f8:54:57:65:a3:
cc:38:5e:04:ed:c3:82:53:fa:16:06:95:f8:9f:de:
84:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:36:CF:02:1F:83:48:A0:BA:E4:92:C2:BB:24:5A:4F:1D:C5:B2:87
X509v3 Authority Key Identifier:
keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:01:11:38:1a:ca:4b:ea:ba:e1:97:08:0e:2a:d4:19:00:3a:
03:1e:5c:f9:e7:f7:14:dd:86:be:82:a0:2f:af:4c:e6:b4:5b:
ff:05:95:d3:9b:4b:ab:1a:63:1d:e8:07:1c:77:35:50:2f:c1:
c0:26:63:55:03:66:35:f2:da:db:92:9a:57:59:31:c6:28:21:
1e:d0:1d:a0:b5:08:31:ab:81:a0:d5:9a:6c:24:9b:cd:05:a2:
30:60:b5:de:9d:f6:9e:f2:e0:ab:b5:80:58:ad:7b:41:a3:ad:
e3:c5:96:45:29:67:12:2c:83:da:de:15:76:53:e3:cb:6a:14:
1d:63:c8:4f:4a:ed:9f:fa:a6:26:78:62:2d:87:7b:31:1e:65:
10:64:d3:9d:e7:0f:25:92:17:9e:e4:71:ff:74:f3:68:25:69:
15:58:ac:fd:77:f4:30:03:77:88:41:c5:b0:7e:a4:4e:e7:13:
f7:14:96:59:ee:26:6c:1f:6a:95:c3:ee:8e:8c:9a:a9:fe:5e:
ca:11:3c:a3:a8:ea:c7:0d:20:c1:ad:29:bd:a2:b7:13:d7:d4:
c1:59:66:3a:93:6e:b8:1c:cb:84:bb:ed:e4:3d:bb:03:8a:a1:
f6:69:23:a8:26:dc:82:01:8a:00:ff:09:ce:81:2b:0d:d1:1e:
af:8b:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:53 2026 by rpki-client