
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
File: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft (raw, json)
Hash identifier: C0m4bOoAKSCpmZABvO4RzZDQXwbB1y+4asDIA73yviQ=
Subject key identifier: F0:0D:D5:7B:44:71:86:98:14:65:8F:95:25:16:76:90:6F:EB:87:E6
Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
Certificate issuer: /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Certificate serial: 060006DC6462711A4CFDF1ED6ACEC6D8BEE23356
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
Manifest number: 0186
Signing time: Wed 25 Mar 2026 01:11:35 +0000
Manifest this update: Wed 25 Mar 2026 01:06:35 +0000
Manifest next update: Sat 28 Mar 2026 08:41:35 +0000
Files and hashes: 1: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: DWfEMEPWxsUozNiwbgr8ihU7QhgizyAKxGEXUL32Nzc=)
2: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl (hash: V4Yp7+cy81h2lNYMsP4CCZo8pxQL/mUnDGbrY4IWcDE=)
3: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: +5s73n1GRDKOs1PLsu8AmlmjjmE1TE3hQKNaKdkD1e0=)
4: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: vmmdKTzGdj+WW7oR5Y7BlF5cHcjcyn2ZeY0vBD9tiWM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl
rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 08:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:00:06:dc:64:62:71:1a:4c:fd:f1:ed:6a:ce:c6:d8:be:e2:33:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Validity
Not Before: Mar 25 01:06:35 2026 GMT
Not After : Mar 28 08:41:35 2026 GMT
Subject: CN=F00DD57B4471869814658F95251676906FEB87E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:c3:9e:93:2a:79:ff:87:ad:f4:75:01:74:
e2:90:c9:a9:1a:7f:19:f5:61:79:62:bb:28:a1:4f:
3a:01:3e:6a:c7:38:ba:6d:37:3d:23:7c:99:33:75:
8d:74:0d:57:c2:a2:fa:7d:dc:dd:38:f8:b8:e9:03:
80:a5:ad:12:d5:2b:ad:b6:1f:59:8c:e7:ed:ab:7c:
aa:9f:20:32:78:a8:07:0e:9c:bc:00:fa:fc:fd:09:
18:89:bf:8b:c7:aa:26:bb:f1:66:f0:4f:94:0f:e1:
1f:a1:84:41:79:d7:d6:55:e8:c7:ea:ff:4e:6b:a5:
85:11:d7:4d:d8:a6:66:69:6e:dc:42:ce:de:98:a5:
54:fd:10:70:10:b2:91:fc:c4:17:60:50:ad:31:a1:
58:be:76:b3:58:7f:e1:fa:61:a7:d2:30:0f:5d:93:
89:29:65:d7:2f:b7:ab:a2:42:82:41:53:3c:35:bb:
1f:9d:20:33:f4:20:79:2a:08:77:97:d6:8a:46:07:
b9:76:17:42:bf:38:56:ed:94:82:4f:fa:4f:d2:30:
81:2a:26:23:7d:65:48:d5:15:9b:ee:c4:93:ab:ae:
2a:23:53:6e:3b:7f:a3:3a:81:21:9d:d6:d9:91:d8:
e5:ab:f9:9f:ae:b7:b3:40:a0:f7:f2:1e:5c:75:08:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0D:D5:7B:44:71:86:98:14:65:8F:95:25:16:76:90:6F:EB:87:E6
X509v3 Authority Key Identifier:
keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e3:8e:83:d3:ea:b0:fc:60:ad:2e:95:80:d3:92:44:60:bf:
e7:89:9c:9f:53:75:05:3f:8e:26:dc:7a:ad:43:ff:b1:91:f9:
df:8b:57:89:a7:46:0e:79:0b:d7:81:71:ab:e1:12:d3:34:5c:
3f:83:fe:f9:40:71:29:1b:5e:73:e0:55:d6:9f:32:1d:c4:3a:
5d:f5:2f:9c:f6:74:86:79:d0:52:b2:c2:a6:ce:08:8b:76:15:
a4:03:13:96:77:80:44:c2:2e:50:c6:7b:3a:ee:7f:ad:7f:d4:
0e:01:4c:87:4d:88:e7:ea:36:a4:5f:4c:42:f7:d4:19:dd:3e:
c5:7f:1f:ef:8b:d3:cc:5e:75:93:b0:01:bf:08:87:b8:7c:51:
8b:2c:05:eb:c6:28:c1:aa:2d:27:14:5e:b4:71:2d:fa:2c:1a:
17:76:9a:4e:4e:db:c6:19:50:66:45:72:ab:f3:41:87:58:1f:
d9:c3:9d:fb:e2:f5:9f:01:58:4b:a1:8b:48:47:9d:4c:c0:21:
ba:19:48:e9:91:cc:f3:b2:56:f2:73:d7:10:02:32:38:de:1c:
3e:38:9e:6c:0c:80:1e:e0:6d:6e:22:8b:ac:c1:f8:8f:b6:e7:
c7:ae:b4:4a:d9:91:f5:74:4a:02:41:11:4a:b0:77:9e:45:88:
87:e5:c0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:02:51 2026 by rpki-client