
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
File: 0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft (raw, json)
Hash identifier: XN7zzFwi9uKvDEPvsGHtRB4XbSQ2V+bgTXRKnBrY2oc=
Subject key identifier: 3D:49:2C:86:68:30:B0:34:2F:59:24:13:DD:DC:F8:A6:26:50:91:46
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Certificate issuer: /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial: 72399575179593722F69E602EE8CFF2B2318FFD1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
Manifest number: 0296
Signing time: Thu 26 Mar 2026 17:21:32 +0000
Manifest this update: Thu 26 Mar 2026 17:16:32 +0000
Manifest next update: Sun 29 Mar 2026 18:13:32 +0000
Files and hashes: 1: 0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl (hash: CTNWnKiCVyYv9z9DSU7PqK3RJp/MuW6i+DQiqkrJ/F0=)
2: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: 2VTD3WI/p1+3+37bAKEOPoRJrNamvZNDqASz/hNbToE=)
3: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: TdPV1Ae9NsfX/q2I6yHzDhMS8SBCOPuv6qM2EykOC0U=)
4: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: KZ/MfJDGlUF+5FRxy7S8cNkPyicIqb4wdkx7H0nRfJc=)
5: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: DRnLhFvj0XZm0VXEZ42TGDJPOpd0ZTUBf7MwJZ8bqOE=)
6: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: FJlkjy7Zh6RrMJcyoFN5uq7ubbcgdbOVveGSZgScDgQ=)
7: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: vwui1qpHSvDVofVRy/Tt5fu+EupEaZj/9/a37EvMSjI=)
8: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: O51+yh/myhmzBLnFSKrmxNaOkN9zLMNSiLH+jGUuyWg=)
9: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: uU+RiPAP5rA80po/0W6dMPifTVUm5kY6ALP/Ca/ACi0=)
10: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: I9GyAIe3s6r5o1IVue8LyW9A/cEmB+1nHgZeZ+VKm1g=)
11: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: AAfAK41bYgm/zJnOAM99b/7VZxCthhr1nADRxL8QtvA=)
12: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: k78QygJvZC5uoGv2K0v+mQ5YwQ0X8MznZdn5hmtLPD8=)
13: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: NRTKisssuBxZObjpfMlPvnnfb3JZpeBG9KHtEvhVsJY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 18:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:39:95:75:17:95:93:72:2f:69:e6:02:ee:8c:ff:2b:23:18:ff:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Validity
Not Before: Mar 26 17:16:32 2026 GMT
Not After : Mar 29 18:13:32 2026 GMT
Subject: CN=3D492C866830B0342F592413DDDCF8A626509146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f7:2b:ae:75:3c:cc:d9:9a:03:89:3c:a9:bd:
99:08:db:e7:94:39:51:0b:0d:5e:2e:8c:ee:f5:3b:
06:80:ea:4f:73:f3:2c:72:0a:ad:c4:6c:05:05:ce:
08:03:41:1a:4b:58:4f:84:a0:a9:ed:9c:e9:2f:57:
20:32:71:92:59:65:77:86:49:c6:59:13:55:4c:bd:
13:8b:de:5c:1d:5d:45:27:f4:41:ef:db:34:51:87:
fd:11:af:13:15:b8:f2:ec:97:f4:01:3f:3a:fa:35:
da:70:68:e7:73:ce:28:70:9e:98:b8:41:61:ea:79:
d8:a8:e1:ec:75:53:d3:35:0e:6c:81:02:c0:47:2b:
66:a3:06:75:0e:63:d9:fb:ee:90:52:f2:51:20:9a:
75:31:07:31:24:e2:83:aa:08:db:f1:94:f7:ad:81:
fe:d7:f8:2b:36:d6:e8:33:3a:91:eb:52:aa:ed:70:
41:5c:65:cb:60:4f:42:07:f8:3e:ff:35:b1:d4:25:
50:78:15:19:c1:79:96:89:40:a3:b5:49:34:46:c3:
b9:89:6c:e7:a8:0e:6f:a4:8b:02:26:61:8e:3c:4d:
3b:93:26:2d:35:16:9f:ac:ca:97:24:88:57:b2:bc:
25:5f:85:55:22:d2:66:c9:66:ec:f2:f8:0f:cd:d1:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:49:2C:86:68:30:B0:34:2F:59:24:13:DD:DC:F8:A6:26:50:91:46
X509v3 Authority Key Identifier:
keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3d:7d:f5:04:76:a6:82:e1:57:c0:22:88:65:8b:23:66:6a:
b9:45:a9:68:30:95:f1:1a:ff:dd:be:96:6e:1f:0d:3c:a5:a9:
a3:00:77:2a:e0:56:65:3b:60:5c:aa:a9:c8:3d:6c:a5:7a:37:
72:e8:11:a3:0b:17:d8:a8:d6:02:be:2f:ad:33:02:78:e8:25:
33:7b:7c:3d:97:11:85:f0:27:f0:97:7a:f6:31:fa:86:83:ef:
e8:af:89:ed:6a:4a:5a:da:26:62:a6:c8:09:50:7d:05:23:9a:
c5:4d:43:97:db:de:44:80:9d:04:5e:52:f8:52:f7:05:6e:a9:
fd:37:61:13:8d:f0:cc:40:cb:e0:6f:23:9c:ed:9d:f7:43:5e:
a9:70:58:df:f4:29:a8:0c:c6:6f:35:bc:5a:45:0e:2d:cf:f4:
01:67:17:9d:cf:60:0d:78:31:00:d1:db:2b:88:17:e1:14:b7:
ab:8a:9f:0a:b1:4b:bb:38:d8:63:54:91:a1:c0:c8:29:88:23:
70:01:4b:fe:b0:ef:8e:11:7b:2b:2d:39:8d:58:b2:b0:4f:ec:
d3:b6:02:68:97:df:3f:d7:92:d4:a9:b8:89:4a:8b:f6:36:28:
a5:4d:19:e2:97:63:81:dc:63:4d:8d:07:9a:39:a6:69:66:db:
d8:3f:e6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:43:53 2026 by rpki-client