
$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft
File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json)
Hash identifier: /RBP+njPEdpcHF8HBkOH6/+X+G23uzPdipBMchRIaGc=
Subject key identifier: E2:7A:02:FA:82:5C:30:2E:CF:42:AC:AD:52:6B:F7:9D:30:B7:32:DB
Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5
Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5
Certificate serial: 640D226C90CB5ABE1527D44E698DB8E1B35595F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft
Manifest number: 055B
Signing time: Mon 16 Mar 2026 22:31:35 +0000
Manifest this update: Mon 16 Mar 2026 22:26:35 +0000
Manifest next update: Fri 20 Mar 2026 07:29:35 +0000
Files and hashes: 1: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: 7HniLPA//CdDw1OkX9Xqs9MSvGxfsvv/vsmJ2fGBtN4=)
2: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: Zl03XVx57nbxitWYw7MeSszUElsg5oZ5jVn5EskWk+g=)
3: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: IoCq5Fr7ucJSiJXgyl0hLajgLtZdo657+jXfL09lCzQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl
rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 07:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:0d:22:6c:90:cb:5a:be:15:27:d4:4e:69:8d:b8:e1:b3:55:95:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5
Validity
Not Before: Mar 16 22:26:35 2026 GMT
Not After : Mar 20 07:29:35 2026 GMT
Subject: CN=E27A02FA825C302ECF42ACAD526BF79D30B732DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d6:26:08:b8:95:65:c1:2f:d4:4a:cd:72:0d:
f7:9a:56:8d:e5:19:6d:6d:62:e7:70:d3:ce:c4:82:
e5:0c:9b:c1:81:54:e5:26:9f:c7:ce:a1:c6:89:a3:
28:f9:40:ff:97:35:af:e5:5a:ee:5e:37:e0:98:bc:
b5:a1:8a:1a:aa:5b:ff:89:15:b7:98:ef:12:f0:3c:
8c:2c:a8:81:50:ae:79:1e:34:f5:f7:81:82:5a:c4:
a1:7f:28:dc:f0:15:d1:11:e7:ea:2b:01:6b:34:97:
c9:87:99:be:ed:17:f7:a2:5d:56:9d:c3:92:1b:1b:
a3:27:73:71:7f:a7:0b:0b:5d:30:25:39:85:92:9e:
7b:f1:c9:bb:e3:b6:bb:24:32:1a:73:38:2b:56:4a:
dc:63:c0:0f:43:bb:3a:e1:31:c3:86:ee:70:18:e7:
f1:59:d7:51:1a:58:a2:aa:d8:e5:4d:2d:48:a4:f2:
58:61:89:07:98:e8:4e:85:ce:74:fd:16:86:b8:13:
53:29:1b:dd:c8:51:60:47:bf:2a:f1:35:7c:e9:60:
21:ab:6d:f8:12:bb:52:d6:92:4c:6d:88:51:76:52:
a1:9a:1d:fa:9a:86:27:9a:71:cc:dd:8f:f2:c9:8e:
7f:83:f5:ee:04:51:87:4e:10:e5:46:58:87:af:c1:
1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7A:02:FA:82:5C:30:2E:CF:42:AC:AD:52:6B:F7:9D:30:B7:32:DB
X509v3 Authority Key Identifier:
keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:93:2f:86:81:65:d3:a2:9d:82:27:2b:76:e6:e4:28:35:8e:
3a:c5:6c:0d:e1:a8:67:60:cd:2b:5d:3a:d7:ad:8d:65:c4:0e:
88:30:61:bc:83:80:f0:75:24:93:45:a1:52:a5:df:e3:c8:a1:
d4:55:ac:e9:c8:11:a4:5a:b5:ba:46:13:c5:2a:da:a7:87:76:
34:f0:85:b8:76:d6:c6:96:7e:73:11:6d:ab:27:62:db:bd:0f:
0d:61:21:69:db:9f:4d:10:67:96:90:68:bd:e1:98:ea:52:08:
21:09:2c:4e:b4:69:95:eb:a2:71:4b:df:e5:bb:5a:c4:e8:62:
93:47:fc:16:09:b2:87:3f:ea:c6:f4:b2:13:be:4e:c5:10:b3:
45:b3:de:96:18:38:b4:de:56:b5:79:3b:55:0b:cb:dd:9a:7c:
63:7a:be:8c:0f:df:45:94:52:5f:ac:21:2a:b6:0d:33:91:3e:
b4:6a:29:14:85:96:a4:3f:7a:84:c2:ff:cd:18:12:4e:21:55:
01:a7:81:7b:58:fa:a6:1e:2a:7a:13:b6:0a:d2:d3:e7:b1:a5:
c1:bb:02:4d:8d:94:26:d5:85:4a:fd:f6:93:2f:52:76:17:4c:
86:7a:94:da:df:a5:cd:98:25:a3:24:77:40:8e:81:6d:84:38:
51:bf:fa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:26:34 2026 by rpki-client