
$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft
File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json)
Hash identifier: LP2PMxtcUCRe2ugSzX/MxYIb4OFB6PWMWAx5oloBzgQ=
Subject key identifier: E2:1D:BD:B4:12:29:2F:DD:FC:A8:A6:C3:CF:72:2C:BF:AA:8A:6D:54
Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36
Certificate issuer: /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836
Certificate serial: 727D85BEECC93D9C844689A7AF06584D0F046036
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft
Manifest number: 0400
Signing time: Sat 28 Feb 2026 22:22:25 +0000
Manifest this update: Sat 28 Feb 2026 22:17:25 +0000
Manifest next update: Wed 04 Mar 2026 07:10:25 +0000
Files and hashes: 1: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: ApcZEcO0CdRpriMpjZ8NMdcvm7zZPBlUASlOFKPUlhU=)
2: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: JsC0v2EdiHeYHLpmF1L2QhLIL3QqIYfJYM5C5xS2qk4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl
rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 07:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:7d:85:be:ec:c9:3d:9c:84:46:89:a7:af:06:58:4d:0f:04:60:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836
Validity
Not Before: Feb 28 22:17:25 2026 GMT
Not After : Mar 4 07:10:25 2026 GMT
Subject: CN=E21DBDB412292FDDFCA8A6C3CF722CBFAA8A6D54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:8a:67:a3:1c:1f:0d:d4:ca:d4:e4:e3:c8:
f5:bb:d8:33:2c:a3:66:18:f7:d5:c6:fe:9f:ff:7b:
89:ea:53:46:02:e2:28:b3:c1:c2:b9:bc:09:a5:a5:
e2:3e:38:97:cc:41:a4:8d:58:d2:28:0b:67:8b:8b:
dc:ce:d8:6b:a1:60:52:e0:a5:38:14:70:27:f3:35:
7a:7e:f0:1c:a6:94:ac:8f:a6:4b:4f:5a:dc:21:de:
b1:1d:12:22:e7:f4:f1:7b:51:8c:0e:24:05:a3:05:
f6:40:ab:7c:39:5c:6e:da:2a:08:c1:d9:c8:e8:c1:
5e:f8:6e:a9:72:d9:85:07:f4:2d:65:19:4a:18:5e:
33:a8:94:93:6a:55:73:e5:d9:b6:a8:92:75:45:c0:
48:0b:73:ab:12:67:e5:b8:1b:ca:fb:80:7c:55:1d:
86:64:9a:00:fb:9f:f4:1a:78:4f:37:a8:14:56:4e:
bc:05:24:f1:bf:c0:5f:c5:61:93:87:24:af:5e:6b:
91:e3:5d:3b:8d:8f:d1:d9:65:1c:66:df:b3:43:93:
d8:40:3b:d8:f8:9f:ac:ce:e2:8e:ff:6c:b2:d6:1d:
b2:ca:db:d0:f1:f1:cd:80:ce:1a:66:42:47:e4:98:
c2:dc:67:52:ac:75:07:ae:b8:18:11:94:55:f5:71:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1D:BD:B4:12:29:2F:DD:FC:A8:A6:C3:CF:72:2C:BF:AA:8A:6D:54
X509v3 Authority Key Identifier:
keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c1:2b:c1:5d:ee:00:83:ad:e0:b2:6f:18:f0:22:55:24:4a:
20:70:9c:6f:12:b2:df:5a:9c:74:36:e3:90:4d:e7:b1:04:00:
e4:c6:2d:2a:d8:5a:f9:f0:df:be:25:ac:07:c5:8d:0c:99:13:
3b:47:79:5f:8d:fc:95:96:2e:1f:a3:17:2d:1c:c4:2b:4e:49:
23:95:a8:a6:02:5c:e1:51:1f:73:ea:7f:6b:aa:34:d6:98:65:
6a:69:12:f5:ab:0a:a3:de:56:1e:08:54:bc:11:0d:95:73:a9:
f4:d9:05:64:8f:0f:0e:d1:f0:01:50:85:eb:d1:37:07:8f:e2:
5e:39:86:9b:be:d5:58:27:be:1e:c1:06:8a:03:b6:65:0c:19:
08:12:85:60:2b:04:6f:2b:21:c1:7e:49:3a:b4:6d:db:30:e6:
e0:0d:34:65:1c:de:fa:dd:07:c5:69:c0:3e:f0:2e:2d:99:06:
8f:85:60:15:08:ee:49:8a:2d:71:73:33:74:8a:b4:01:18:b0:
6a:bd:b6:7b:1e:0c:60:be:1c:7a:b6:d6:43:6d:77:17:32:94:
2a:52:10:54:e6:b1:9e:a8:d1:f8:a6:73:b3:f7:3f:84:d5:c5:
0d:d5:11:db:4d:80:5d:99:42:46:1f:02:7d:59:b2:d1:db:5f:
72:03:49:ae
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcn2FvuzJPZyERomnrwZYTQ8EYDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0
Q0RENzgzNjAeFw0yNjAyMjgyMjE3MjVaFw0yNjAzMDQwNzEwMjVaMDMxMTAvBgNV
BAMTKEUyMURCREI0MTIyOTJGRERGQ0E4QTZDM0NGNzIyQ0JGQUE4QTZENTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOopnoxwfDdTK1OTjyPW72DMs
o2YY99XG/p//e4nqU0YC4iizwcK5vAmlpeI+OJfMQaSNWNIoC2eLi9zO2GuhYFLg
pTgUcCfzNXp+8BymlKyPpktPWtwh3rEdEiLn9PF7UYwOJAWjBfZAq3w5XG7aKgjB
2cjowV74bqly2YUH9C1lGUoYXjOolJNqVXPl2baoknVFwEgLc6sSZ+W4G8r7gHxV
HYZkmgD7n/QaeE83qBRWTrwFJPG/wF/FYZOHJK9ea5HjXTuNj9HZZRxm37NDk9hA
O9j4n6zO4o7/bLLWHbLK29Dx8c2AzhpmQkfkmMLcZ1KsdQeuuBgRlFX1cfn3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4h29tBIpL938qKbDz3Isv6qKbVQwHwYDVR0j
BBgwFoAUPAPPlReBlwxtCtvo+s/sakzdeDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMC8zQzAzQ0Y5NTE3
ODE5NzBDNkQwQURCRThGQUNGRUM2QTRDREQ3ODM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0Q0RE
NzgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi
M2QtZjY4MzIxM2U3YzMzLzAvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVD
NkE0Q0RENzgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAITBK8Fd7gCDreCybxjwIlUkSiBwnG8Sst9a
nHQ245BN57EEAOTGLSrYWvnw374lrAfFjQyZEztHeV+N/JWWLh+jFy0cxCtOSSOV
qKYCXOFRH3Pqf2uqNNaYZWppEvWrCqPeVh4IVLwRDZVzqfTZBWSPDw7R8AFQhevR
NweP4l45hpu+1Vgnvh7BBooDtmUMGQgShWArBG8rIcF+STq0bdsw5uANNGUc3vrd
B8VpwD7wLi2ZBo+FYBUI7kmKLXFzM3SKtAEYsGq9tnseDGC+HHq21kNtdxcylCpS
EFTmsZ6o0fimc7P3P4TVxQ3VEdtNgF2ZQkYfAn1ZstHbX3IDSa4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:34 2026 by rpki-client