
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft
File: 26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft (raw, json)
Hash identifier: utW23WR3Hbws5eso6VqNaVQxlVbpOjFxa++IJ8X9LGI=
Subject key identifier: 61:A5:B4:97:BA:CA:E0:74:98:BB:C9:63:38:B0:55:98:D8:58:2C:A7
Authority key identifier: 26:A1:41:90:F8:45:A3:F3:FC:33:6B:D3:06:2A:E6:F1:65:B9:7E:5C
Certificate issuer: /CN=26A14190F845A3F3FC336BD3062AE6F165B97E5C
Certificate serial: 42EA3C811BF0138BFA942470E08EA67567794805
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft
Manifest number: 0215
Signing time: Tue 24 Mar 2026 16:30:58 +0000
Manifest this update: Tue 24 Mar 2026 16:25:58 +0000
Manifest next update: Sat 28 Mar 2026 02:53:58 +0000
Files and hashes: 1: 3130332e3134352e3134362e302f32342d3234203d3e20313430303038.roa (hash: l6aeKW09Sx7rSFkeI19KtMnYYrlj03ziclyGv0GOLhU=)
2: 26A14190F845A3F3FC336BD3062AE6F165B97E5C.crl (hash: Tsbco+wpCuxoiVtUXZl21k7l9PM7GDWrfTCDENFW4cM=)
3: 3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa (hash: FzyKL9bCnJSB3v6U9N3ecP/uhXzcWqpKC54Mt7U5nck=)
4: 3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa (hash: tPkwmcbFGdH2Zdm8XN8SrM9FraltUANniKZrGodwkPI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.crl
rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 02:53:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ea:3c:81:1b:f0:13:8b:fa:94:24:70:e0:8e:a6:75:67:79:48:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26A14190F845A3F3FC336BD3062AE6F165B97E5C
Validity
Not Before: Mar 24 16:25:58 2026 GMT
Not After : Mar 28 02:53:58 2026 GMT
Subject: CN=61A5B497BACAE07498BBC96338B05598D8582CA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:3e:03:c5:06:69:ef:f3:89:a5:4b:2a:31:
e0:3f:8e:d5:4d:9c:82:1f:27:b8:43:62:6a:ce:24:
d1:31:52:04:79:51:87:1c:5e:07:59:27:26:e2:e5:
56:a7:df:42:41:1b:61:18:67:f3:ab:ca:67:65:31:
96:95:66:1b:f7:bf:06:a7:f3:2a:73:59:6f:14:37:
a3:a8:89:3f:10:8e:f5:f4:75:2f:34:25:22:d5:31:
43:3f:59:56:1e:69:e0:5f:5b:ad:98:9f:47:17:d0:
17:a7:27:06:5f:ea:c1:8f:76:b0:de:8a:3e:2e:95:
20:74:d9:05:e3:87:d1:51:19:a6:cb:eb:ec:60:5b:
f9:5c:a7:70:90:41:96:9b:cc:3f:37:5b:e4:aa:77:
88:fd:bd:08:35:46:c5:7c:e3:00:4e:c4:35:f4:13:
53:7f:06:3e:ba:ad:12:e0:34:57:72:f4:c9:aa:98:
0b:6e:dd:23:81:16:51:b2:7c:30:54:ba:b2:ec:51:
2f:ee:9b:74:72:c0:06:c8:07:bd:a4:26:4a:ae:61:
99:72:18:0e:80:7d:d9:31:4a:eb:2b:4a:09:11:6b:
e2:ba:f9:62:16:78:c1:8c:b8:16:e9:49:cc:c0:33:
58:68:ca:bd:15:76:97:60:43:ae:6c:42:fe:1c:b2:
f5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A5:B4:97:BA:CA:E0:74:98:BB:C9:63:38:B0:55:98:D8:58:2C:A7
X509v3 Authority Key Identifier:
keyid:26:A1:41:90:F8:45:A3:F3:FC:33:6B:D3:06:2A:E6:F1:65:B9:7E:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6b:d3:01:e9:84:7c:9f:70:91:18:e1:d9:f3:74:5a:22:86:
3f:ed:f2:a5:5d:c1:ce:b2:fa:b3:c3:00:f5:ca:5e:5e:c5:82:
0c:ae:be:6c:d2:3f:8b:17:33:a6:19:66:19:17:02:25:1a:3a:
6d:95:57:fa:33:46:23:f3:02:ef:c8:da:25:a5:59:92:96:98:
66:a9:f7:12:04:31:33:d7:20:b7:0e:68:2e:37:b3:e1:70:14:
d1:f0:5b:18:40:b2:04:3e:91:4c:83:70:48:27:86:37:20:7e:
89:63:12:5e:16:41:f1:16:e7:de:68:25:4d:5d:60:f7:d0:83:
80:b7:5e:c3:d6:45:2c:78:b5:55:54:7b:51:00:52:c4:c4:93:
e4:5f:cd:ab:3d:74:0b:82:ec:c3:7e:86:47:5d:52:e4:dc:d8:
d5:96:7f:78:3b:06:f6:cc:c1:3c:e6:63:f9:50:b4:3d:bc:d6:
ca:5e:1c:ab:67:6c:40:a3:3e:78:1d:91:3e:62:50:9d:2c:65:
85:d8:9c:cc:bc:15:af:6c:60:34:97:2a:7a:ad:45:a2:aa:60:
8e:72:8e:85:73:90:7d:d9:85:cd:e5:90:53:47:0f:93:77:70:
db:4c:c8:61:31:07:0c:be:3a:f3:e3:5e:ed:a5:b7:29:ca:a0:
8a:08:b6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:24:38 2026 by rpki-client