
$ rpki-client -vvf repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
File: B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft (raw, json)
Hash identifier: xwa6O0cXz/5DsHJh1blBYxNMd6fQXUHZfk9Fzbg8//A=
Subject key identifier: DE:CD:CB:8C:8E:61:B7:32:87:24:92:54:21:23:5A:CE:C7:7A:A6:D8
Authority key identifier: B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94
Certificate issuer: /CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94
Certificate serial: 40E29194A94E4A4FF85E2EE65DD4CAEC56F6AC84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
Manifest number: 0251
Signing time: Tue 17 Mar 2026 03:42:38 +0000
Manifest this update: Tue 17 Mar 2026 03:37:38 +0000
Manifest next update: Fri 20 Mar 2026 11:40:38 +0000
Files and hashes: 1: 3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (hash: XFDD1vzbK3fH2oVTZT7/I8pF/szQ/Q1UsEfrzMZOTGI=)
2: B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl (hash: W7su+Thl+5v0GES9q916CQYK318g6YwIcWM8x0r2iU4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl
rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 11:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e2:91:94:a9:4e:4a:4f:f8:5e:2e:e6:5d:d4:ca:ec:56:f6:ac:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94
Validity
Not Before: Mar 17 03:37:38 2026 GMT
Not After : Mar 20 11:40:38 2026 GMT
Subject: CN=DECDCB8C8E61B7328724925421235ACEC77AA6D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:23:15:da:5b:3f:24:2b:11:fd:6c:2d:eb:
30:94:3f:52:51:14:b3:32:37:7c:89:07:67:5d:b7:
62:54:71:10:a7:58:8a:74:f0:dd:80:94:b6:63:2f:
ff:a6:50:5d:44:6a:e0:d1:a0:65:a4:6c:14:7e:a9:
10:ec:21:22:52:3b:8d:94:c7:a1:62:f6:19:90:be:
78:1c:55:5a:c5:ca:99:74:b5:73:f7:e3:89:0e:6f:
b1:43:ae:9d:57:e0:a4:82:78:92:7f:c3:f5:89:4d:
44:58:36:7d:56:28:15:7a:b7:dc:7f:60:1c:07:f9:
4e:c4:dd:a7:55:70:88:ed:5b:89:23:aa:d7:69:7d:
96:51:cf:92:08:cf:ee:97:4d:a5:2f:ce:6d:98:22:
d5:9e:0d:40:e4:46:6e:57:86:cb:e1:aa:88:5e:e5:
13:56:42:09:69:27:ac:00:f1:69:17:19:d0:17:f1:
a2:ad:71:b6:22:49:19:28:4f:a7:a8:f1:33:f8:02:
ee:98:77:6f:df:23:05:0e:1a:28:c2:1a:92:77:27:
ea:18:16:1e:d4:ba:1f:5e:81:90:f3:29:95:19:6a:
0a:02:80:40:7b:c6:26:59:7b:38:2c:e0:a9:1b:7d:
ce:86:dc:ba:90:3e:b6:32:5c:24:87:03:1f:9b:4a:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CD:CB:8C:8E:61:B7:32:87:24:92:54:21:23:5A:CE:C7:7A:A6:D8
X509v3 Authority Key Identifier:
keyid:B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:84:d0:d5:fb:c3:14:bb:b6:f7:01:f9:0e:7b:74:6e:1a:80:
5e:a5:19:ee:91:1b:73:71:70:61:9f:ea:b4:a5:1a:8f:ad:56:
49:20:cc:16:55:b9:2b:51:9d:89:1e:b0:0c:f9:9d:fd:8e:14:
69:94:ed:aa:24:85:26:61:8b:d9:2d:06:01:a2:9c:2d:67:19:
05:b5:0c:84:ce:67:31:3c:61:8d:a8:77:5a:88:06:b4:ee:b8:
d0:d9:a6:97:30:50:cd:03:3e:a4:70:cd:28:c1:12:f1:bb:44:
0c:8f:93:5d:e9:3f:39:d4:e2:bf:02:8f:d9:4d:e2:0a:14:88:
1a:47:a4:a0:7a:94:cf:82:c8:63:09:19:fe:cc:93:6d:52:2b:
89:e3:a5:ce:2b:fb:86:5c:5f:6d:a1:46:8a:9f:c0:87:19:0b:
aa:a6:ef:e5:fd:7f:b9:84:44:d7:8c:45:98:9b:dd:6d:d1:95:
bd:74:7b:b3:c6:d6:cb:00:50:03:6c:68:af:3c:0f:76:66:61:
ed:94:39:8f:59:b4:22:b2:85:ea:32:ab:03:59:54:6d:d3:6d:
2d:ca:4e:8c:d2:55:07:9e:33:39:67:4b:94:45:6f:9a:74:2a:
c3:9a:55:19:42:3e:5b:1a:01:78:c4:c9:a2:61:0d:8e:06:5b:
fe:ed:e0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:41:27 2026 by rpki-client