
$ rpki-client -vvf repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft
File: 00CBB314A3396508984527DC9E3F91DA2A407863.mft (raw, json)
Hash identifier: 0JyafeQD/IA/EPVJK6araXxW8Rpbu/8WX/wbayAWtsU=
Subject key identifier: 3A:9C:0C:7B:65:DC:05:46:A7:1E:76:12:F6:78:9F:26:46:D7:F9:23
Authority key identifier: 00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63
Certificate issuer: /CN=00CBB314A3396508984527DC9E3F91DA2A407863
Certificate serial: 612DC3519B18BE5ACA96CA5761E2DE1C060F4833
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft
Manifest number: 01C6
Signing time: Thu 26 Mar 2026 00:42:34 +0000
Manifest this update: Thu 26 Mar 2026 00:37:34 +0000
Manifest next update: Sun 29 Mar 2026 09:21:34 +0000
Files and hashes: 1: 00CBB314A3396508984527DC9E3F91DA2A407863.crl (hash: XxvLc79p3vZjwmfd9XuOt2VybrMO3bpX2XwXdQwCFMM=)
2: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: zPJwoYlYVUWfKNJbenzQ4XPKJqwUvv7VGWry1rzbZSc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl
rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 09:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:2d:c3:51:9b:18:be:5a:ca:96:ca:57:61:e2:de:1c:06:0f:48:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00CBB314A3396508984527DC9E3F91DA2A407863
Validity
Not Before: Mar 26 00:37:34 2026 GMT
Not After : Mar 29 09:21:34 2026 GMT
Subject: CN=3A9C0C7B65DC0546A71E7612F6789F2646D7F923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:f1:7d:e1:c7:92:03:a4:77:6f:d6:fb:55:
cb:04:a9:39:77:1e:08:9f:8d:54:30:db:a4:4e:52:
cf:8f:1b:3e:c4:c5:e4:30:d6:37:85:a0:7c:73:1f:
65:49:71:20:4e:a2:ba:3d:5f:9f:7d:9a:74:07:1f:
cb:33:cd:69:32:eb:e9:14:c4:19:fd:2a:15:15:64:
51:02:ce:14:df:4d:c1:39:9f:a4:25:cd:74:f8:8d:
43:87:e1:ee:b3:2f:8f:33:8e:81:ec:76:ae:24:37:
54:d1:f9:33:34:2b:4b:43:bd:75:f3:db:a6:2d:cb:
a1:c9:98:d1:ec:ab:7b:49:13:dc:99:3c:f3:8b:63:
95:95:98:f3:24:5a:0f:94:96:c2:e1:6b:69:c3:76:
aa:e4:e2:b9:f2:64:2e:01:bc:36:c1:26:6c:f5:4d:
76:88:32:b1:e8:f6:ab:ab:f1:7f:f5:cf:b9:41:24:
8f:cd:7e:45:62:57:7e:8d:4e:a4:a3:6c:d9:8a:a6:
41:16:d0:5d:52:71:a7:2e:cd:92:ca:29:0e:d5:e0:
90:89:a1:f6:ec:1d:05:41:32:f3:61:0a:ee:99:54:
1d:11:98:4f:e6:9a:01:2e:83:cd:3a:5e:4c:93:4e:
3e:52:a6:a4:c0:ac:ed:77:93:52:1e:51:5c:1c:79:
47:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9C:0C:7B:65:DC:05:46:A7:1E:76:12:F6:78:9F:26:46:D7:F9:23
X509v3 Authority Key Identifier:
keyid:00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:49:dc:b2:84:ad:5e:c1:e4:62:69:0c:2f:80:57:dd:eb:df:
09:46:b1:9c:b3:0c:88:2f:35:24:b1:81:a9:56:58:7c:d9:c7:
98:81:e8:12:7f:04:f0:c9:8c:e8:dd:a2:8f:24:b8:5c:d6:6a:
ac:a5:53:11:a2:89:79:90:75:6a:5b:79:2b:83:80:63:24:fb:
ae:05:80:94:62:44:c5:0e:23:c5:81:99:c9:0d:f9:3c:7f:21:
3c:1d:6e:fc:76:45:02:3f:93:a5:ea:04:d8:ad:e5:d6:57:7f:
9d:21:53:d0:72:38:82:b5:55:66:c3:e4:4a:f8:46:93:57:76:
54:50:77:a0:53:3b:f2:64:26:bf:40:90:80:e8:23:c3:eb:ad:
45:a1:a4:79:11:a8:3a:8c:8d:aa:dc:bf:b5:d7:e9:7a:87:95:
fd:2c:86:9c:10:1d:79:90:01:04:59:f6:a5:a2:05:c0:f4:7a:
a4:50:5b:f3:79:d2:c2:fc:67:32:83:0d:aa:85:9d:79:a7:b6:
33:a3:32:62:5e:bc:4e:40:11:7d:42:99:3c:ee:35:6c:a3:46:
71:ec:e2:30:1d:a0:d8:5f:f9:4e:67:17:ef:bd:9e:2a:0a:46:
17:86:88:57:06:70:62:e8:4d:4b:4d:f7:e0:17:2e:05:9d:87:
d5:f3:ab:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:51 2026 by rpki-client