
$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft
File: 26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft (raw, json)
Hash identifier: 2IqrWSI6D+u5iz3PZG4KW1bnBTuXQ2Frd+c5eDZ+yxE=
Subject key identifier: 2A:3B:23:2E:E8:37:7F:CA:AC:6D:25:65:C4:30:00:20:9F:80:0E:68
Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
Certificate issuer: /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Certificate serial: 06272A60D9B889D26873011F386E28FD70226144
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft
Manifest number: 026D
Signing time: Thu 26 Mar 2026 08:02:31 +0000
Manifest this update: Thu 26 Mar 2026 07:57:31 +0000
Manifest next update: Sun 29 Mar 2026 12:34:31 +0000
Files and hashes: 1: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (hash: yFOhY3kkRWKlei19NBlKhAG0Vp1RqJKt+S6Gob5h3Bw=)
2: 3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (hash: Uiwt0idwyNoHB6hbHTLTPXK+NKIuun2Gs6eiB4RgV7E=)
3: 26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl (hash: WPhY4LHPD3BPu3usBDn/rEG6tEYkErhkOoQK/GyVcaY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl
rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 12:34:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:27:2a:60:d9:b8:89:d2:68:73:01:1f:38:6e:28:fd:70:22:61:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Validity
Not Before: Mar 26 07:57:31 2026 GMT
Not After : Mar 29 12:34:31 2026 GMT
Subject: CN=2A3B232EE8377FCAAC6D2565C43000209F800E68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:53:ce:cd:b6:3f:40:d8:f5:c1:27:38:b9:
b7:e7:8c:44:b2:40:1e:db:fb:8e:df:07:ed:32:b3:
3a:b4:8e:fe:a9:20:0f:b1:d6:79:28:60:75:81:66:
eb:87:99:52:4b:26:c2:b8:dd:44:da:84:63:96:0c:
e7:ec:dc:2b:ea:04:3a:86:12:c2:c4:ae:2f:d5:98:
cf:77:c5:fc:78:e0:41:f2:cb:be:35:58:18:c3:76:
83:2a:e6:bd:5d:3f:f2:ff:6f:4b:51:39:0e:61:a2:
fe:3f:b4:3f:74:1a:9e:83:26:48:99:0f:22:0d:4a:
5f:8f:3b:9f:4c:e7:7c:31:b9:fb:62:ad:46:93:60:
de:32:9f:93:2b:c6:51:cb:82:0d:04:be:cc:b0:38:
1f:8b:e7:b5:a2:b8:af:1c:70:9a:b9:97:2d:4d:02:
fa:14:8a:6c:0f:4b:dd:c0:93:a6:7f:3f:5c:37:c0:
c8:eb:a8:11:d4:e3:5c:dd:7e:22:40:91:9a:80:71:
ad:ee:da:0f:ed:10:2c:ff:18:06:18:5d:23:c2:33:
2e:b3:b3:33:28:ba:2a:09:c1:fc:8f:0f:a3:7c:73:
8b:38:45:cf:4b:c8:ed:e2:11:ba:96:3b:68:5c:3b:
1a:d0:96:59:e4:ba:4f:de:02:a9:b8:d6:ef:08:92:
be:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3B:23:2E:E8:37:7F:CA:AC:6D:25:65:C4:30:00:20:9F:80:0E:68
X509v3 Authority Key Identifier:
keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:ee:82:94:28:ce:b3:52:96:bc:3c:19:41:30:68:5a:36:b7:
93:2f:f7:2e:f7:b6:16:06:ee:3b:a6:b8:b5:ca:1a:a7:d4:e4:
f4:d9:62:d5:f8:d3:4d:d5:11:59:e4:00:e9:ef:d3:c0:f9:c3:
1a:28:5e:c3:59:7c:2d:fd:6b:91:73:f4:73:c4:67:33:3d:ad:
44:db:85:56:0c:85:bd:40:40:ed:65:a4:d3:a7:04:b2:5b:da:
1e:ab:e5:1e:01:11:a6:e0:22:cd:75:96:87:e3:d8:67:e4:d9:
6f:e9:7c:5e:d9:4f:41:a6:4e:30:c3:87:b8:3d:76:30:b3:c7:
22:ea:dd:51:d1:40:4a:49:4c:69:09:c8:fb:47:59:28:2f:a6:
bc:59:69:08:89:61:9b:80:4f:4a:df:af:fd:ab:25:f5:80:7a:
7d:05:0e:18:19:af:8d:2c:2d:e8:8b:b4:92:1b:a1:26:39:5b:
6f:93:de:32:ca:eb:28:9c:f9:10:4c:12:aa:fe:64:db:0f:5d:
36:dc:c5:ac:5d:04:c6:10:c5:93:5f:7e:db:47:f5:05:8f:6d:
99:0a:12:61:00:d6:d7:13:b6:cf:8e:15:c0:3b:14:28:01:95:
6c:b8:22:2d:b1:6f:15:f5:dd:92:fc:8d:da:d8:4b:90:73:16:
68:b9:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:09 2026 by rpki-client