
$ rpki-client -vvf repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft
File: 260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft (raw, json)
Hash identifier: zKLvxI+VE9VHB11iVYugJb1DUvnLhT6CiD0QKyThd8o=
Subject key identifier: 01:5B:85:1F:75:BE:99:BC:82:25:BC:C6:68:62:26:F2:C5:2A:D1:EC
Authority key identifier: 26:08:81:82:3F:28:04:BC:A7:A6:5A:C9:3B:D3:DC:9A:7E:E1:73:0A
Certificate issuer: /CN=260881823F2804BCA7A65AC93BD3DC9A7EE1730A
Certificate serial: EF9190DA534567F8463ADA0B4F53BB45061018
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft
Manifest number: 0146
Signing time: Tue 24 Mar 2026 21:21:04 +0000
Manifest this update: Tue 24 Mar 2026 21:16:04 +0000
Manifest next update: Sat 28 Mar 2026 02:54:04 +0000
Files and hashes: 1: 260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl (hash: KmkXhZoNvk1S6kGUGQ1VJR8wrOOjQkLdU5Cc137qfHM=)
2: 3135372e32302e3138382e302f32332d3234203d3e20313532343232.roa (hash: 4HEnURFX1hQSuRbmCKioRMn9cXm7KyCSSOCdtNL81nA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl
rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 02:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ef:91:90:da:53:45:67:f8:46:3a:da:0b:4f:53:bb:45:06:10:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260881823F2804BCA7A65AC93BD3DC9A7EE1730A
Validity
Not Before: Mar 24 21:16:04 2026 GMT
Not After : Mar 28 02:54:04 2026 GMT
Subject: CN=015B851F75BE99BC8225BCC6686226F2C52AD1EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:b9:cd:7a:6d:74:4f:6a:a2:f4:3b:0b:3f:
9c:69:95:17:a6:c2:55:32:71:b9:5b:2e:13:d1:3b:
47:3e:d4:4d:b0:cf:10:ac:f0:1f:52:be:70:b7:dc:
16:15:f2:c5:fc:5d:6e:ca:22:59:fd:63:7d:76:43:
3d:d6:a9:2b:7d:05:54:3a:33:1c:b1:de:e1:5a:47:
10:69:dd:63:e5:43:d6:a8:df:2e:41:55:37:0a:73:
81:bc:88:2b:d4:cc:6c:b8:40:aa:55:0e:f3:aa:87:
ca:47:0c:5f:67:0f:dd:7f:13:b4:8c:8c:e0:4c:c0:
fd:a3:e4:5d:44:f5:06:40:bb:a5:dc:d8:2b:b9:69:
51:8f:02:c1:05:c0:8f:b6:23:85:3c:fc:12:6b:ea:
f5:00:cf:4d:f6:51:e2:17:b8:62:e1:48:ef:b8:77:
05:f1:bf:46:ea:9b:fb:7f:f7:8a:43:70:e2:ba:6e:
86:7c:50:c8:4e:94:03:9e:65:54:33:07:7e:a9:81:
04:45:9c:49:e9:b1:26:d7:3c:4a:c0:88:09:ed:8d:
c5:8e:8d:ec:49:7a:da:49:29:d4:8b:49:1f:b0:30:
b1:4d:a7:6d:c4:90:0e:97:fc:54:f4:25:90:fa:36:
a1:dc:d7:b1:26:f4:c6:fd:ce:41:1e:24:99:eb:fc:
f7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5B:85:1F:75:BE:99:BC:82:25:BC:C6:68:62:26:F2:C5:2A:D1:EC
X509v3 Authority Key Identifier:
keyid:26:08:81:82:3F:28:04:BC:A7:A6:5A:C9:3B:D3:DC:9A:7E:E1:73:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/260881823F2804BCA7A65AC93BD3DC9A7EE1730A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f3:0f:58:ac:6c:e2:99:79:d7:97:6c:89:40:56:4b:5f:bb:
d3:2d:67:39:c4:b9:4c:72:b4:75:85:ac:f0:19:23:f1:e4:69:
6e:92:24:d9:01:b8:54:91:e7:37:15:60:a1:a3:1a:ac:05:ac:
f0:db:6a:bf:fe:00:7c:86:72:55:7e:13:7d:91:db:1f:c6:49:
d9:ec:95:77:f9:98:13:22:79:be:db:2a:17:b8:0d:ab:9c:81:
9d:ba:ba:23:44:8f:2b:fc:17:10:1b:8f:98:d0:77:a3:fe:9b:
fc:47:5f:f4:b4:cd:b1:10:b8:ee:6c:62:ce:17:e5:e1:0d:53:
10:6a:f4:d7:4c:c1:ad:a5:ca:84:20:33:86:aa:48:01:38:33:
40:22:51:31:ab:15:79:7a:4c:a4:0e:5c:a1:eb:62:43:9d:70:
b9:66:e5:6f:1c:db:70:17:5b:c9:74:09:61:56:e5:78:17:00:
86:dc:c3:ff:2b:8d:2d:f6:fd:9b:87:ed:e8:c2:87:f2:a1:82:
cb:d6:5d:24:76:d4:b0:56:d7:f3:5d:f8:12:f6:c7:e3:bb:55:
e5:ba:f1:b3:48:f1:8d:cf:d4:31:f2:85:8c:d9:e0:c8:88:0f:
f0:de:47:c3:16:7b:12:ff:3f:85:38:9a:fd:48:1e:d0:c9:31:
2c:ed:35:9d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAO+RkNpTRWf4RjraC09Tu0UGEBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYwODgxODIzRjI4MDRCQ0E3QTY1QUM5M0JEM0RDOUE3
RUUxNzMwQTAeFw0yNjAzMjQyMTE2MDRaFw0yNjAzMjgwMjU0MDRaMDMxMTAvBgNV
BAMTKDAxNUI4NTFGNzVCRTk5QkM4MjI1QkNDNjY4NjIyNkYyQzUyQUQxRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBhLnNem10T2qi9DsLP5xplRem
wlUycblbLhPRO0c+1E2wzxCs8B9SvnC33BYV8sX8XW7KIln9Y312Qz3WqSt9BVQ6
Mxyx3uFaRxBp3WPlQ9ao3y5BVTcKc4G8iCvUzGy4QKpVDvOqh8pHDF9nD91/E7SM
jOBMwP2j5F1E9QZAu6Xc2Cu5aVGPAsEFwI+2I4U8/BJr6vUAz032UeIXuGLhSO+4
dwXxv0bqm/t/94pDcOK6boZ8UMhOlAOeZVQzB36pgQRFnEnpsSbXPErAiAntjcWO
jexJetpJKdSLSR+wMLFNp23EkA6X/FT0JZD6NqHc17Em9Mb9zkEeJJnr/PenAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAVuFH3W+mbyCJbzGaGIm8sUq0ewwHwYDVR0j
BBgwFoAUJgiBgj8oBLynplrJO9Pcmn7hcwowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MTM2OGFlMy1kZDEyLTRhYTMtODk0OC01NDZkZTA0YzUxZTQvMC8yNjA4ODE4MjNG
MjgwNEJDQTdBNjVBQzkzQkQzREM5QTdFRTE3MzBBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMjYwODgxODIzRjI4MDRCQ0E3QTY1QUM5M0JEM0RDOUE3RUUx
NzMwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDEzNjhhZTMtZGQxMi00YWEzLTg5
NDgtNTQ2ZGUwNGM1MWU0LzAvMjYwODgxODIzRjI4MDRCQ0E3QTY1QUM5M0JEM0RD
OUE3RUUxNzMwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADLzD1isbOKZedeXbIlAVktfu9MtZznEuUxy
tHWFrPAZI/HkaW6SJNkBuFSR5zcVYKGjGqwFrPDbar/+AHyGclV+E32R2x/GSdns
lXf5mBMieb7bKhe4DaucgZ26uiNEjyv8FxAbj5jQd6P+m/xHX/S0zbEQuO5sYs4X
5eENUxBq9NdMwa2lyoQgM4aqSAE4M0AiUTGrFXl6TKQOXKHrYkOdcLlm5W8c23AX
W8l0CWFW5XgXAIbcw/8rjS32/ZuH7ejCh/KhgsvWXSR21LBW1/Nd+BL2x+O7VeW6
8bNI8Y3P1DHyhYzZ4MiID/DeR8MWexL/P4U4mv1IHtDJMSztNZ0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:09:11 2026 by rpki-client