
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft
File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json)
Hash identifier: vLTWYPMEcqrNmRZdvtGdOnXFXSmjfB9vvuT+bYlj81I=
Subject key identifier: 08:37:8E:84:48:90:69:F0:D4:CC:32:14:86:54:5C:FF:28:88:CA:9C
Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09
Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09
Certificate serial: 747C90467FAE8381F2945C5F2A10A78BEE2FA95E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft
Manifest number: B1
Signing time: Sat 28 Feb 2026 22:41:19 +0000
Manifest this update: Sat 28 Feb 2026 22:36:19 +0000
Manifest next update: Wed 04 Mar 2026 03:05:19 +0000
Files and hashes: 1: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: m/F9tJ0Rc3WFjZPAOdcDSgiBCDMF9Lmfj6K6COepHEw=)
2: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: Jj55Qdcw1HHwbpz0sfyPn4cWawaNftCV5QpF5pCd8+8=)
3: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: 3AL9wnFX7NUdd15jINa43wjhnEOlPugDH4MAafaXB/A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl
rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 03:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:7c:90:46:7f:ae:83:81:f2:94:5c:5f:2a:10:a7:8b:ee:2f:a9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09
Validity
Not Before: Feb 28 22:36:19 2026 GMT
Not After : Mar 4 03:05:19 2026 GMT
Subject: CN=08378E84489069F0D4CC321486545CFF2888CA9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:46:e9:54:32:19:eb:05:fb:ce:00:23:a4:
df:43:43:d2:a8:11:c4:02:ae:36:cc:53:9a:54:58:
8c:c4:c3:ef:68:b0:1c:51:09:50:58:f5:eb:13:37:
c6:49:53:1f:49:ec:89:19:47:66:f3:8b:bd:e2:14:
46:7a:dc:ed:d7:ad:63:f1:a7:0b:13:04:e7:92:50:
83:29:72:6c:60:47:42:80:d4:52:5a:60:6c:e5:f5:
1c:75:c5:3c:4c:e7:e1:0f:13:c7:63:f0:d2:ed:fc:
8b:9a:cc:07:76:a1:75:25:a9:15:f9:21:c3:20:4c:
fd:68:23:ea:b3:66:4d:88:5b:f0:b2:9b:5a:62:b9:
a6:b5:c0:8c:06:87:bd:b1:31:40:ee:6a:5d:2a:a0:
e7:9e:3a:21:48:93:00:5c:bf:73:bd:de:d6:83:98:
e5:71:2f:5b:ed:ce:e5:20:24:a0:e4:9e:d3:bb:42:
3e:4d:1a:f4:08:62:5f:7b:6c:9a:1f:d7:46:88:0f:
18:29:be:40:2b:fa:40:a7:65:52:d6:a9:88:e3:f2:
d7:0c:00:dc:f0:cb:d9:ff:df:09:52:cc:7d:f8:82:
9d:39:d6:f7:c5:02:ba:23:ad:1b:e3:e6:5d:bd:d3:
09:59:7f:b9:01:77:4a:ac:8d:bb:2f:73:67:ed:ac:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:37:8E:84:48:90:69:F0:D4:CC:32:14:86:54:5C:FF:28:88:CA:9C
X509v3 Authority Key Identifier:
keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:42:ca:57:a3:c1:cf:cf:50:39:08:fa:03:0c:18:ee:45:c0:
39:fd:7c:fa:31:5f:96:c9:3c:0a:e1:27:23:d6:ee:ea:6a:34:
99:79:2f:9d:18:d6:95:a3:c0:16:1f:3b:bf:1a:5d:74:e6:14:
a9:a5:ed:a7:a4:4e:c5:5f:1c:3d:4d:7b:1c:d7:fc:2e:4e:69:
6a:40:ee:2c:6f:51:01:eb:c5:f1:b6:fe:90:b2:15:cd:31:5b:
1f:b4:99:d3:fa:fc:e5:a3:d8:50:c5:e6:a5:72:0c:24:cc:69:
64:f8:c6:39:34:af:31:25:58:ce:85:e5:79:09:43:ba:55:ee:
51:f9:89:07:8b:0c:70:ae:81:16:89:b0:54:93:f5:99:7d:7a:
fb:d0:e0:6d:41:dd:e7:9a:4e:46:6c:9d:6b:c4:cb:05:62:c6:
b5:89:25:a2:fb:78:3f:3f:0f:15:ee:55:86:89:23:ea:78:73:
aa:b6:3c:0d:d9:7f:5f:94:c9:84:44:5e:a8:f5:b5:f5:8e:c1:
ba:33:f0:b2:47:81:fc:12:17:24:49:b0:a6:3a:4f:bd:e1:33:
40:36:c7:bc:57:5b:dd:16:e1:cf:94:6c:0f:de:b8:5b:de:21:
3a:48:fb:ad:eb:5c:7b:3f:db:8c:78:ee:44:00:40:0a:77:e9:
7f:a9:78:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:48 2026 by rpki-client