
$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft
File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json)
Hash identifier: D/5EtxHZ8XaQSnVEQ9kizkuofiQtzDQfBRyX7v/W71w=
Subject key identifier: BE:C8:79:05:F8:46:97:35:EA:3D:E8:75:57:A4:E7:2D:71:0F:E8:96
Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1
Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1
Certificate serial: 5C97E4D8AE78E6C0A54F343C8C94E495B0202216
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft
Manifest number: 02E6
Signing time: Wed 18 Feb 2026 18:20:43 +0000
Manifest this update: Wed 18 Feb 2026 18:15:43 +0000
Manifest next update: Sat 21 Feb 2026 23:49:43 +0000
Files and hashes: 1: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: Kwlf+QuNuNNTTT5C0tFmQAjUaml1k0BpDbMb/XEIP/w=)
2: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: RhOkR5WeCzo5mQR7gVfKbpdndqxK1egYk5AqPIyAaPs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl
rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Feb 2026 23:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:97:e4:d8:ae:78:e6:c0:a5:4f:34:3c:8c:94:e4:95:b0:20:22:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1
Validity
Not Before: Feb 18 18:15:43 2026 GMT
Not After : Feb 21 23:49:43 2026 GMT
Subject: CN=BEC87905F8469735EA3DE87557A4E72D710FE896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:04:1a:f5:98:94:54:bc:49:c3:07:60:81:
63:9c:26:30:59:52:87:0e:da:e1:e8:bc:5d:56:fd:
78:cf:f4:5c:15:c8:58:f8:f8:6c:51:a8:42:28:7e:
02:ab:d2:5c:d5:cb:11:c4:20:dc:c8:6c:fd:99:19:
2c:d2:e3:1b:87:2e:ec:53:4d:f6:4b:3a:10:da:54:
72:1d:e8:d6:df:57:eb:6b:ab:2c:93:ac:5e:8b:95:
c6:cc:6f:61:0b:2c:2c:3c:67:20:87:b4:95:b4:72:
a0:86:ea:97:f5:c7:f1:f3:ff:d6:34:2a:4d:97:05:
c8:cf:2e:e8:e2:9b:56:72:31:e5:4e:ab:c6:f0:8a:
e5:9a:6a:50:37:c1:bf:9a:59:bd:1d:c8:85:da:a1:
da:9d:31:7a:62:d2:14:83:f7:68:6b:1f:5e:5d:6a:
89:a9:51:ff:03:a1:c0:ad:df:40:f0:70:cc:1c:b8:
10:4a:24:62:06:eb:ad:5a:b6:87:3b:de:43:b5:0c:
06:56:b5:d9:46:98:91:6f:09:fe:47:99:8b:89:cf:
67:58:24:f9:74:48:34:ed:42:b2:96:7f:46:b8:c6:
42:2f:44:53:71:e2:e8:35:0b:cc:33:00:75:09:90:
c7:7b:77:33:66:2f:a8:76:e6:04:69:b3:42:4b:ef:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C8:79:05:F8:46:97:35:EA:3D:E8:75:57:A4:E7:2D:71:0F:E8:96
X509v3 Authority Key Identifier:
keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:67:9f:bb:74:d1:40:91:a1:e3:65:de:d6:de:62:e6:b0:9e:
e8:55:7c:62:dd:24:9a:6a:1d:e9:25:1f:88:7e:d7:e9:92:88:
f9:33:4c:61:ed:11:5a:cd:b4:15:c9:63:25:78:16:1e:47:48:
21:f4:26:0f:ce:be:b6:77:fc:8e:c4:cd:f7:46:63:5f:ab:c0:
4c:25:55:36:51:3e:20:c8:4e:36:01:01:13:dd:f5:6d:e0:5c:
91:0f:d4:b9:9e:61:e5:e3:cf:3a:13:1d:40:dd:9c:e5:fd:13:
43:a8:94:9e:e9:67:10:7e:b1:8c:b8:b2:e9:80:12:c4:4c:80:
5b:39:37:7a:70:21:51:54:48:e0:35:78:11:8d:99:8f:d3:65:
3d:d4:6c:49:26:4b:98:69:95:60:98:90:ff:6e:a8:42:0a:c3:
a8:1f:56:53:1a:6e:34:21:69:e2:8f:af:9b:3a:e7:28:f8:a9:
3f:e4:9f:1c:8a:c8:5d:e8:57:ec:09:9d:10:43:ba:21:1e:7b:
56:d2:7d:37:83:a3:a1:19:c5:c6:94:5f:8f:ef:1b:e0:5a:7b:
fd:4a:e4:16:90:4c:f2:11:e4:ea:89:4d:f9:f9:e7:b6:38:35:
07:6d:a6:38:76:bd:e7:ed:37:8c:54:43:8a:1c:3e:41:f7:d0:
e2:e1:85:8b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXJfk2K545sClTzQ8jJTklbAgIhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE
QkFDMTBBMTAeFw0yNjAyMTgxODE1NDNaFw0yNjAyMjEyMzQ5NDNaMDMxMTAvBgNV
BAMTKEJFQzg3OTA1Rjg0Njk3MzVFQTNERTg3NTU3QTRFNzJENzEwRkU4OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYVgQa9ZiUVLxJwwdggWOcJjBZ
UocO2uHovF1W/XjP9FwVyFj4+GxRqEIofgKr0lzVyxHEINzIbP2ZGSzS4xuHLuxT
TfZLOhDaVHId6NbfV+trqyyTrF6LlcbMb2ELLCw8ZyCHtJW0cqCG6pf1x/Hz/9Y0
Kk2XBcjPLujim1ZyMeVOq8bwiuWaalA3wb+aWb0dyIXaodqdMXpi0hSD92hrH15d
aompUf8DocCt30DwcMwcuBBKJGIG661atoc73kO1DAZWtdlGmJFvCf5HmYuJz2dY
JPl0SDTtQrKWf0a4xkIvRFNx4ug1C8wzAHUJkMd7dzNmL6h25gRps0JL72GpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvsh5BfhGlzXqPeh1V6TnLXEP6JYwHwYDVR0j
BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG
NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD
MTBBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2
NzEtZjI3NzFhZmUwMDdjLzAvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMw
QzZEQkFDMTBBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGVnn7t00UCRoeNl3tbeYuawnuhVfGLdJJpq
HeklH4h+1+mSiPkzTGHtEVrNtBXJYyV4Fh5HSCH0Jg/OvrZ3/I7EzfdGY1+rwEwl
VTZRPiDITjYBARPd9W3gXJEP1LmeYeXjzzoTHUDdnOX9E0OolJ7pZxB+sYy4sumA
EsRMgFs5N3pwIVFUSOA1eBGNmY/TZT3UbEkmS5hplWCYkP9uqEIKw6gfVlMabjQh
aeKPr5s65yj4qT/knxyKyF3oV+wJnRBDuiEee1bSfTeDo6EZxcaUX4/vG+Bae/1K
5BaQTPIR5OqJTfn557Y4NQdtpjh2veftN4xUQ4ocPkH30OLhhYs=
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:47:20 2026 by rpki-client