
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft
File: B0AAB728B88975526C1741CCA8673CBC88F7697C.mft (raw, json)
Hash identifier: X9cyaoErH1BA6Z0rrjN8ibMRkGAX4omLF1daIVAx2q8=
Subject key identifier: A6:A4:D4:68:4D:A2:DC:FE:1A:3B:86:7E:74:45:24:9E:04:49:24:12
Authority key identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C
Certificate issuer: /CN=B0AAB728B88975526C1741CCA8673CBC88F7697C
Certificate serial: 37F9A7454B46E13CA373BD0251AAC7ABA635EFEE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft
Manifest number: 03EB
Signing time: Fri 17 Apr 2026 06:51:23 +0000
Manifest this update: Fri 17 Apr 2026 06:46:23 +0000
Manifest next update: Mon 20 Apr 2026 07:29:23 +0000
Files and hashes: 1: B0AAB728B88975526C1741CCA8673CBC88F7697C.crl (hash: SBK3Ae8CPZ6mlE932Ixnv4QNvqkiyi9Tyobx1i5ATcI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl
rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 07:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f9:a7:45:4b:46:e1:3c:a3:73:bd:02:51:aa:c7:ab:a6:35:ef:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0AAB728B88975526C1741CCA8673CBC88F7697C
Validity
Not Before: Apr 17 06:46:23 2026 GMT
Not After : Apr 20 07:29:23 2026 GMT
Subject: CN=A6A4D4684DA2DCFE1A3B867E7445249E04492412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:c7:b9:b2:59:bc:d1:c2:fc:40:a4:66:3c:
84:16:70:77:8e:6f:b6:11:c7:db:a2:93:fe:bc:44:
e6:09:53:a7:d8:3e:3d:17:f8:08:d4:15:aa:c2:48:
ac:fc:34:af:38:33:8d:83:40:e3:fb:ff:34:91:b4:
c7:47:39:81:37:c2:a5:0f:e6:e9:5f:d7:ed:1f:aa:
01:d1:12:35:98:9a:94:cb:09:74:bd:4b:af:b0:28:
8f:2e:6a:ee:a5:bb:76:05:6c:57:70:5b:bc:76:91:
80:24:9a:58:a7:5e:56:8a:82:9e:e4:a5:73:61:a8:
2e:d5:ec:42:5e:a4:2e:03:ba:9a:70:6b:35:c9:ee:
d5:9c:5f:0c:05:fa:12:e4:2b:0c:fa:4a:07:fe:37:
bd:b2:bc:a0:90:45:88:97:fe:01:86:7e:f8:9e:5f:
de:a1:5f:bc:0d:4e:43:64:f1:68:dc:73:76:90:fc:
82:4d:05:53:cf:04:6b:16:0b:a3:8e:14:95:93:fd:
d7:f5:2e:ef:85:e1:ff:b5:b5:9a:03:a3:89:3b:8b:
69:6c:41:68:16:80:3c:87:b0:2c:31:9d:04:85:b1:
12:40:06:92:39:ae:6b:56:13:b0:7a:fd:b5:79:95:
80:db:9b:da:52:80:31:08:1f:c1:7c:9d:e3:81:13:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A4:D4:68:4D:A2:DC:FE:1A:3B:86:7E:74:45:24:9E:04:49:24:12
X509v3 Authority Key Identifier:
keyid:B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e1:3b:c6:3b:93:32:4b:3c:1f:ae:2c:f4:50:23:96:94:dd:
cb:c1:91:9b:b7:96:ff:8f:08:66:19:e4:95:e6:91:6c:51:3a:
d4:30:d3:d9:5b:60:36:4b:6b:ad:4b:0d:e5:a2:cf:29:df:f9:
14:4f:98:20:2e:36:6a:ef:e9:bb:72:1f:80:f1:e1:a8:e6:ea:
4d:1c:a5:31:db:90:89:e4:6a:ba:8d:03:5a:25:69:e5:82:61:
54:e9:7e:aa:11:f4:2e:af:04:81:a6:f8:1a:00:03:38:a5:81:
6a:47:77:9f:54:3c:76:34:7a:f2:af:41:0c:7a:8a:4d:b0:63:
be:01:ac:6a:2b:90:00:56:ac:32:10:01:99:f2:82:2c:c5:53:
14:53:80:a5:3c:13:25:5f:25:92:17:d5:32:51:68:3c:5b:f5:
12:3c:d0:85:0a:50:e2:5d:38:23:c6:27:6f:04:af:37:16:7a:
73:8f:ba:a9:d7:e2:14:e7:0c:dc:31:76:9e:b5:27:2f:74:60:
04:ce:23:2e:2e:bd:44:7c:29:ab:83:b0:9e:4a:a3:5a:14:d3:
3e:71:8b:f6:82:ae:b2:1f:6f:d6:73:2e:ee:56:41:f6:27:65:
6e:79:a2:6c:28:a5:9e:0f:a7:55:15:c3:9d:30:7e:41:39:6d:
0b:46:3f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:26:27 2026 by rpki-client