
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
File: 26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json)
Hash identifier: B64ufSdrdWWoN/VQ3jmqr1flKcjF90zp0J7A3ksgkWA=
Subject key identifier: BC:8B:CA:64:22:43:AB:4D:83:59:7E:A6:95:C6:C5:41:7D:37:27:A5
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Certificate issuer: /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial: 16C0E035C243D185A38D3B6CD962B91404E70070
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
Manifest number: 055C
Signing time: Wed 25 Mar 2026 22:50:01 +0000
Manifest this update: Wed 25 Mar 2026 22:45:01 +0000
Manifest next update: Sat 28 Mar 2026 23:03:01 +0000
Files and hashes: 1: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OH7ZCJTwnLCxXMNsgmtlP1c6T2EBORCMxpBSErbjzUQ=)
2: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: JNMmXBJmRLeZ0v7hbRMvuNCKgvK7sZzrdM1QwWkvKok=)
3: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: pPJorPhtoURcHfFuZaHPY1347QHf/vc9r8CP1wzserg=)
4: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Lu9azehLR4chvFlJHbgACl9g/2sKz1G6TYe/wHO70OY=)
5: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: Hb5P0TDeMBn1cOFH2oq3loUzifYWvfep94RtX5Q9BTY=)
6: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: FphOhbOvD7rhQc2k+v+l+2rQkAehuLUzPlPUYQrzCzw=)
7: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: sSjIG0LDeS5saZQ8C2CVyK81s+5ejD72CH0is00YDY4=)
8: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: PsjkpoFEIr6BiGS329B8+0NZ3TKepqT/wJfW0DwSHsg=)
9: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: N6AEmETFQ4NGMx3FYjWNV2pifT99NOMKn0cAzmtwEPs=)
10: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: GllxH/PgbP6S2bfFvEpAEeVFKqOz04XhxUteJc/lpd0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 23:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c0:e0:35:c2:43:d1:85:a3:8d:3b:6c:d9:62:b9:14:04:e7:00:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Validity
Not Before: Mar 25 22:45:01 2026 GMT
Not After : Mar 28 23:03:01 2026 GMT
Subject: CN=BC8BCA642243AB4D83597EA695C6C5417D3727A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:50:39:80:78:3f:4e:c4:1c:c6:e1:4d:8c:
ca:31:73:7b:89:14:34:d4:55:72:66:1a:01:12:62:
81:ae:d8:7a:b6:6f:5a:0f:48:ec:5a:12:f5:f2:be:
5d:38:dc:1b:a1:db:06:a4:81:d2:e0:dd:ad:e4:f2:
40:5f:60:fb:0f:19:1b:84:89:f2:09:e3:66:17:1b:
49:d4:81:08:40:0b:61:92:5c:b1:e1:27:78:53:77:
6c:97:05:86:37:9d:58:f3:81:ea:16:34:ca:1f:e0:
9a:46:90:29:e7:d1:39:50:bd:a8:55:09:82:4f:c1:
40:44:ab:04:13:8f:91:ac:f2:62:8c:86:8d:05:94:
08:c0:a9:49:42:0e:20:d5:42:c7:0a:7a:a9:fd:4b:
cd:48:32:e0:7e:fc:85:43:75:9d:d5:d9:93:d5:79:
a8:ae:20:6a:5c:b6:f9:ef:99:25:2f:94:9a:59:e4:
44:07:8c:a3:1e:09:7f:bd:a7:d8:cc:85:dd:a0:17:
5e:b2:f7:30:28:c3:ed:4c:8b:4a:5e:b3:f5:6b:66:
26:bc:69:9c:18:2a:6b:2c:26:b6:1b:72:08:88:7e:
8b:ef:b2:66:7a:1d:56:86:cc:20:c9:c7:99:a2:3e:
31:e3:b9:00:a2:8d:3a:15:20:2b:a8:5c:41:08:3d:
cb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8B:CA:64:22:43:AB:4D:83:59:7E:A6:95:C6:C5:41:7D:37:27:A5
X509v3 Authority Key Identifier:
keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:67:c0:ee:11:dd:d6:5c:1e:d4:9a:53:69:85:98:0d:97:82:
98:ec:26:e7:1f:cc:a8:8f:57:5a:17:7b:e3:cc:71:53:40:aa:
15:68:80:a6:74:e6:dc:80:2c:e5:61:9e:59:4e:cf:06:6d:7e:
20:65:3e:fe:e2:fa:e5:36:88:38:10:e5:13:bb:62:8b:bc:97:
1c:c1:eb:17:a7:23:33:a8:a8:32:90:97:57:70:19:52:03:85:
70:f5:3b:9c:13:29:bb:1f:d5:e0:c7:8c:6f:9b:24:0f:0c:1e:
a4:b0:e2:f5:b1:15:5f:dc:06:c2:4f:8c:d7:fe:fc:32:f0:2a:
9b:1d:11:b9:1c:7b:04:55:72:af:9b:5b:e9:3c:e2:e9:72:aa:
81:75:41:56:af:74:12:71:ac:74:3b:3e:71:6f:a4:aa:0a:f6:
f3:1d:96:7c:91:b3:ce:a6:1c:e6:a8:0f:2c:41:12:39:24:3d:
7f:fe:01:c6:cd:68:18:a8:13:20:b7:f7:74:8e:9a:79:b3:05:
a6:0c:7c:b6:61:62:28:7e:b3:6d:88:bb:df:80:66:43:43:a3:
3c:46:df:87:b6:83:75:49:39:77:00:b5:55:97:93:9a:95:9a:
6f:88:e5:6c:17:2a:4b:e3:fb:3e:20:55:71:42:05:6e:15:13:
d9:e2:d9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:39 2026 by rpki-client