
$ rpki-client -vvf repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
File: B126A372835801BBB738696C56DCF255D032D42F.mft (raw, json)
Hash identifier: cC0LOZeUx1Z0dF7WVPV+lI1fyqMGUI28sNMVSqX6TE4=
Subject key identifier: 87:1E:9E:56:E3:90:BC:C7:45:53:87:91:E3:31:66:1A:E8:FF:EF:B8
Authority key identifier: B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F
Certificate issuer: /CN=B126A372835801BBB738696C56DCF255D032D42F
Certificate serial: 419CEED1FB4DBFBAE75EC656181918134435BF2E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
Manifest number: 03DC
Signing time: Sun 22 Mar 2026 22:02:10 +0000
Manifest this update: Sun 22 Mar 2026 21:57:10 +0000
Manifest next update: Thu 26 Mar 2026 00:05:10 +0000
Files and hashes: 1: B126A372835801BBB738696C56DCF255D032D42F.crl (hash: 4gc66xLqjAfnVMQkTsy2DUqI83RFZmMkb3USJ/as81c=)
2: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: Nmtn3LlfweyxwcAEh/9aYsa4vVfStr8hvIJSQMmS8CI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl
rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 00:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:9c:ee:d1:fb:4d:bf:ba:e7:5e:c6:56:18:19:18:13:44:35:bf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B126A372835801BBB738696C56DCF255D032D42F
Validity
Not Before: Mar 22 21:57:10 2026 GMT
Not After : Mar 26 00:05:10 2026 GMT
Subject: CN=871E9E56E390BCC745538791E331661AE8FFEFB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:dc:23:73:86:9f:2a:b2:2d:60:3d:db:dd:
61:72:a1:2b:b9:b2:fa:48:37:b3:4e:61:37:ad:e2:
21:50:6c:e6:4c:aa:1c:37:f8:cf:09:e5:c4:e8:ab:
fc:9c:22:38:af:b6:52:84:5c:d4:7d:34:f2:58:5e:
bb:79:03:10:10:42:ed:18:47:94:d4:33:f0:c4:91:
48:c2:44:19:08:25:68:58:79:d1:d5:b9:91:47:f5:
c2:f3:bf:44:00:10:2f:28:03:a8:30:0a:7f:78:7a:
68:c8:6f:5f:c2:1b:fc:43:7f:07:64:bf:98:e2:04:
ae:ba:74:81:27:48:5a:53:f6:93:f2:ba:0c:ce:40:
f8:d1:7a:95:a1:8c:de:66:62:94:5d:0a:14:de:75:
34:87:38:18:dd:be:8b:c9:a7:02:93:25:da:88:46:
5a:db:03:89:ff:0a:51:1c:9f:2e:c9:39:6d:8a:38:
27:4d:57:83:3e:70:f1:f5:c3:6b:d4:ab:7b:27:85:
ad:99:db:7c:61:35:11:2d:04:ca:04:97:cb:44:a7:
5d:38:67:c5:ef:15:ea:15:6f:a8:0f:c4:ff:0c:33:
4a:d0:9f:d3:87:2d:08:61:62:1f:85:86:d6:62:21:
4f:07:46:77:62:ee:25:f2:4c:8c:fb:fc:15:aa:4b:
87:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1E:9E:56:E3:90:BC:C7:45:53:87:91:E3:31:66:1A:E8:FF:EF:B8
X509v3 Authority Key Identifier:
keyid:B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:dc:9c:98:cd:d6:2c:28:45:ad:58:14:36:c4:78:69:ee:44:
42:57:81:bd:d5:ae:22:58:59:0e:12:91:c7:2d:b5:fa:db:f6:
6c:b8:0b:07:5b:10:23:db:32:2a:2e:59:c3:3a:59:cb:b3:c6:
74:3c:d4:50:51:5b:b0:0b:18:66:c9:3b:c3:ba:04:b9:71:ea:
96:dc:ab:da:c2:15:b8:00:31:75:df:71:6c:5f:ae:39:e4:56:
19:df:ac:c8:28:d5:32:b6:2d:78:14:c7:5b:26:13:a4:96:cb:
ba:64:58:ba:72:82:88:f2:b5:f8:93:5d:86:29:2a:ba:85:0a:
4a:24:fe:0c:4f:1e:a2:5e:ec:a3:e9:b8:d8:ce:21:c8:d8:e0:
c9:b3:ef:73:28:13:82:7f:60:7c:9e:6b:43:58:70:d5:b2:2b:
94:3a:c5:51:b3:d2:3f:96:cb:dd:54:32:19:be:9f:65:b7:4d:
f4:a6:ca:d1:2c:dc:26:7c:6d:9f:ba:32:93:7a:1a:c9:26:52:
76:75:1a:47:9f:57:93:b9:55:c0:b1:83:d2:e9:3c:88:3d:0d:
8f:77:18:99:b0:74:76:65:50:8f:6d:ce:3a:11:34:09:50:92:
91:c7:57:88:0b:68:42:71:f0:d1:11:c7:b6:af:63:2f:c7:46:
9f:8e:b4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 01:52:37 2026 by rpki-client