
$ rpki-client -vvf repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft
File: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft (raw, json)
Hash identifier: EOObGJj49ma2w4JVFDFo7a9iPDG7ODtTkPzlbDGaCzE=
Subject key identifier: 3E:E6:C6:1F:FC:B7:50:82:5F:99:BB:21:D2:F0:65:10:5A:86:4E:2F
Authority key identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C
Certificate issuer: /CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C
Certificate serial: 591B4E67D8A5CCE939BE9E0A58719C99174EF136
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft
Manifest number: 010A
Signing time: Thu 05 Mar 2026 22:50:06 +0000
Manifest this update: Thu 05 Mar 2026 22:45:06 +0000
Manifest next update: Mon 09 Mar 2026 03:51:06 +0000
Files and hashes: 1: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl (hash: f0kOXUM+wMNNpg2IEfUBGQlvNqlFamh/o6XL4Sc6XpE=)
2: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: 7IuV0NhxXlp455EXe3FaAoXVfJrAOl6E2yru0xUglkI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl
rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:1b:4e:67:d8:a5:cc:e9:39:be:9e:0a:58:71:9c:99:17:4e:f1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C
Validity
Not Before: Mar 5 22:45:06 2026 GMT
Not After : Mar 9 03:51:06 2026 GMT
Subject: CN=3EE6C61FFCB750825F99BB21D2F065105A864E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:95:72:ce:9d:69:4f:74:ed:06:2a:c8:92:6b:
c0:59:84:5b:48:98:be:78:31:6e:fe:53:0c:25:5d:
72:be:5f:20:95:2c:f4:f9:79:f1:d3:9d:b3:b0:75:
19:09:b4:93:1c:4f:1a:18:68:7e:59:56:7c:92:f2:
bc:e3:3f:08:d4:5f:d8:23:a3:e6:f3:22:ae:f6:ed:
83:6c:a4:4c:d0:94:df:e1:86:30:93:8e:45:cd:4e:
26:80:e6:e1:30:3e:33:27:5a:42:aa:d6:73:5f:c3:
e6:dd:46:63:02:1b:62:21:90:45:59:d5:ee:27:f2:
cd:84:7a:91:fb:89:ab:3d:f8:8c:c6:63:91:5f:48:
9f:16:e7:76:34:d0:b1:e9:dd:f2:3f:0f:96:93:01:
6a:dc:63:54:d7:3e:2e:98:8d:f2:2c:f5:bf:33:8b:
0c:99:30:65:1d:3d:19:6c:dc:0e:b2:4f:12:50:10:
51:bb:bd:a2:08:e9:ff:2c:b5:93:ad:4c:a2:60:27:
c6:6d:99:d8:5c:8e:c5:a0:b0:67:33:42:f8:e6:4a:
59:98:31:84:25:e3:61:60:45:16:02:04:17:28:fb:
80:d6:aa:8f:c7:43:c8:59:e8:f9:13:ad:09:9e:ea:
ba:ea:91:35:02:bd:4d:11:39:16:b2:b7:ef:b1:56:
f7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E6:C6:1F:FC:B7:50:82:5F:99:BB:21:D2:F0:65:10:5A:86:4E:2F
X509v3 Authority Key Identifier:
keyid:B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2b:39:69:e5:1b:9b:e7:c3:49:0d:c8:40:a6:16:0e:e6:93:
97:84:82:14:7b:44:b2:e7:bc:0c:da:4a:e8:7f:06:77:87:08:
1d:ee:58:58:8e:b7:cd:b3:15:bc:bb:f2:32:97:fe:94:22:30:
0c:4c:f9:87:7f:e9:f3:f3:86:0d:ae:24:f8:ef:88:4d:7b:55:
c8:17:a0:2c:5f:49:28:45:37:a8:24:35:56:85:d2:97:06:59:
20:9e:35:71:9c:2f:fb:a7:e7:b9:8c:08:27:78:88:0e:3c:5a:
a2:62:33:71:db:76:5e:c0:4f:4a:34:1e:21:6f:02:7a:3e:cb:
5f:26:f9:f2:4d:dc:86:d1:26:bb:1a:e0:e1:eb:74:a7:af:2c:
15:fd:e8:0c:68:ce:f0:0d:dc:4e:73:78:b6:de:1f:69:db:97:
62:e0:fc:d7:cf:f8:14:81:c2:30:d8:0e:64:c9:d5:c4:a0:87:
f2:21:05:47:49:64:7a:2b:ea:f2:b3:1f:d1:34:9b:78:0d:57:
97:87:a9:5e:29:f5:19:01:92:b9:11:91:59:6f:fa:d1:ca:0e:
3f:2a:3a:5b:c4:a6:66:3e:73:b6:e4:dd:db:24:f6:24:b6:73:
17:ee:83:0d:48:42:d9:02:b1:0b:f9:94:94:c1:f4:1e:49:59:
5c:6c:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:52:40 2026 by rpki-client