
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft
File: B88116E180F32C03362804A81CB0CF2EB0C261B6.mft (raw, json)
Hash identifier: EhnugJei8Yq35S3zcLKqcg+bxt5swSX24EY88P1KAwg=
Subject key identifier: 9B:E5:6D:B4:DA:F1:24:A8:E1:24:D9:F7:03:2B:67:F0:5B:25:B5:9F
Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6
Certificate issuer: /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
Certificate serial: 683BDEFEBC358F2DDFD9D5C90350858E59611C41
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft
Manifest number: 01B3
Signing time: Sun 01 Mar 2026 09:32:21 +0000
Manifest this update: Sun 01 Mar 2026 09:27:21 +0000
Manifest next update: Wed 04 Mar 2026 20:19:21 +0000
Files and hashes: 1: 3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa (hash: xRhm+ztLVPsT2+vuoKMwBZMT/FF6d5r60ZpTwX3FlUw=)
2: B88116E180F32C03362804A81CB0CF2EB0C261B6.crl (hash: OTOXViPteCOno77njm+kisArt7WTQM2NV9V/sEdzPKU=)
3: 3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (hash: 0WXWQlb4tMBzSZgjns1zengdeTcdVp1QSefZx39KHLE=)
4: 3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (hash: pzNE22UpG1Jt2+Owlsq87q7swwQXq2gUn384QTqpP2M=)
5: 3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (hash: 61PqzbefMCe104GH4tvsaNnjc51GZYX3PE2lw6vf/AE=)
6: 3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (hash: CIgXNrGi+SDH5ijMaMYNAYeOpi7DzjTKmeB4Y5/uAfQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl
rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 20:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:3b:de:fe:bc:35:8f:2d:df:d9:d5:c9:03:50:85:8e:59:61:1c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
Validity
Not Before: Mar 1 09:27:21 2026 GMT
Not After : Mar 4 20:19:21 2026 GMT
Subject: CN=9BE56DB4DAF124A8E124D9F7032B67F05B25B59F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9e:31:6f:1b:57:1b:05:46:ae:4f:aa:17:4d:
fa:10:cb:32:c9:47:34:67:b6:a6:f5:a2:0a:ba:ec:
4a:21:54:f8:0c:82:eb:e5:74:a7:6f:36:e4:b9:a4:
62:36:4c:5b:15:bf:67:7a:c8:5a:37:cc:3a:6f:8f:
89:ef:6c:ca:84:40:1d:26:5b:46:6b:57:d1:6e:8a:
a3:03:25:84:fd:15:51:83:8e:e1:3f:26:f7:6c:40:
b9:bf:20:d1:8c:12:27:48:99:97:db:45:96:54:3d:
bd:4a:66:14:d5:4e:49:ae:f3:a4:ff:bb:24:ab:21:
e5:1c:93:28:66:a3:2c:76:8f:0b:f4:fe:e5:7c:2e:
67:49:f6:9e:ea:9c:6f:4b:50:39:cd:52:5b:03:7f:
06:a6:c4:1f:71:78:f5:13:ba:06:b1:ff:2e:27:b7:
6f:1b:94:ce:f2:1c:59:20:4f:e1:6e:3b:e9:42:0a:
f3:eb:e8:ca:ab:9c:b6:1f:7d:ad:13:57:8a:91:d6:
a9:f7:e2:22:3c:45:69:4c:ec:a0:21:75:ef:80:0f:
6c:07:af:10:9a:15:ef:b3:25:20:69:c2:fd:3c:ef:
f7:e4:14:00:de:d3:9e:17:1b:a2:c6:2e:55:a8:5c:
2d:95:f9:14:f4:d9:7b:94:b5:f4:ac:3d:b7:62:6b:
63:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E5:6D:B4:DA:F1:24:A8:E1:24:D9:F7:03:2B:67:F0:5B:25:B5:9F
X509v3 Authority Key Identifier:
keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d7:a9:70:57:e8:7d:ec:f9:66:91:9f:75:92:51:68:5e:e2:
63:cc:b6:65:9b:08:c5:79:df:cc:83:50:8b:d0:1d:0d:ff:38:
de:13:97:a9:54:2d:ea:62:a3:30:74:a9:c3:a6:e8:dc:de:dc:
a2:e5:6d:89:32:7d:28:5b:53:c7:4e:cc:11:7a:27:54:85:ad:
02:4c:a2:c5:c5:18:fe:e1:c3:8c:17:a0:a1:bb:9c:af:35:d8:
af:42:a4:fb:85:33:7a:37:b0:b2:43:6a:4e:c8:51:a0:2b:02:
c1:40:50:5b:50:41:e2:ef:ce:1f:58:7a:63:c5:fb:d0:f0:13:
8f:df:9e:91:e4:12:ce:0a:8c:8f:a9:96:3a:31:cd:27:55:4f:
12:65:13:6d:5b:d2:60:88:f2:28:4a:f8:ac:47:7e:3b:85:12:
e2:69:ea:fa:5f:a7:04:b6:f6:13:74:ef:0f:2c:6c:ca:98:5d:
e8:32:83:42:cf:a4:b9:44:1c:83:6d:55:b9:c2:59:ab:33:be:
41:7d:f4:07:ba:82:54:c4:d7:bc:58:1f:db:3e:73:61:ab:30:
3e:e8:f7:74:98:ba:a9:f9:54:24:04:e4:ed:0b:8a:3c:55:20:
3c:07:d9:2d:3b:90:da:0c:b2:19:46:9d:e6:3d:f9:ef:ae:4e:
3c:62:b3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:50 2026 by rpki-client