
$ rpki-client -vvf repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft
File: B247FB55BE5739FCE4EBBD20B84542267C15D192.mft (raw, json)
Hash identifier: hLEmm8xaGHXlC5VgeEjQZjB+qbqohPn+beqPCnevUgw=
Subject key identifier: E2:A7:30:8F:8F:98:8A:1D:A0:CA:C6:54:2E:F1:2C:57:7F:AF:2B:30
Authority key identifier: B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92
Certificate issuer: /CN=B247FB55BE5739FCE4EBBD20B84542267C15D192
Certificate serial: 358CAADD4508E89E3591454272DB6976081DFC17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft
Manifest number: 02D7
Signing time: Sat 28 Feb 2026 23:01:32 +0000
Manifest this update: Sat 28 Feb 2026 22:56:32 +0000
Manifest next update: Wed 04 Mar 2026 03:24:32 +0000
Files and hashes: 1: 3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (hash: EI6CAFKMozCEfiPKGQcvscTjTfj7/nkyBcwcx/XBDg8=)
2: 3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (hash: 9BKuqPMpOCYVLDkVIwaFy+U4SgMn8wYu59t+XyUcQfg=)
3: 3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (hash: d9cbbbtThqmuG/xJdZo1TGQBdB4nFux+YrQhFEnoj1g=)
4: B247FB55BE5739FCE4EBBD20B84542267C15D192.crl (hash: B8dbOz7vE6Cw8l2GFPv8tVcR67xzJ3Y4RaRL/mFBii8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl
rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 03:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8c:aa:dd:45:08:e8:9e:35:91:45:42:72:db:69:76:08:1d:fc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B247FB55BE5739FCE4EBBD20B84542267C15D192
Validity
Not Before: Feb 28 22:56:32 2026 GMT
Not After : Mar 4 03:24:32 2026 GMT
Subject: CN=E2A7308F8F988A1DA0CAC6542EF12C577FAF2B30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:bf:6f:96:cc:fb:bb:86:e6:8f:d8:e4:24:
4f:32:39:03:50:41:97:48:27:50:1a:a2:eb:f6:d8:
0c:05:0d:e6:ec:19:80:0a:dd:2a:71:f2:01:e5:a4:
58:1c:ad:e8:eb:b8:0a:3a:7a:d6:f2:4e:56:a6:0a:
c9:a9:38:90:96:2e:eb:c1:34:ad:a2:3a:a7:ec:5d:
be:71:86:3a:e8:f5:c8:3b:47:0e:ce:d4:72:43:c0:
d9:fe:e1:b7:e0:0b:9e:d0:2d:d4:5d:41:34:b1:2f:
0d:69:63:81:a2:a8:05:d1:a0:f2:70:d3:e5:ee:d1:
95:85:19:ee:52:ce:2c:0e:dc:19:72:7a:5a:79:77:
fb:59:1c:c9:5f:b5:52:7e:a7:dc:68:8c:75:a9:20:
0b:33:ea:e1:1f:d2:ec:03:6e:ab:34:25:79:97:8b:
f3:9a:0c:8f:c8:fe:6b:2d:6a:37:e7:65:47:a9:8b:
fa:07:85:c0:af:a2:27:a6:e6:d0:bd:28:54:78:b2:
10:88:55:50:59:e0:36:61:f9:cd:42:25:69:37:64:
42:db:9f:e5:79:a4:9e:00:92:52:7d:21:bd:9f:e8:
bd:98:6b:61:05:23:76:7c:5a:0d:83:3d:91:94:e2:
b2:b7:22:ba:8a:63:6f:fa:3c:ca:d3:36:ea:4f:49:
81:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A7:30:8F:8F:98:8A:1D:A0:CA:C6:54:2E:F1:2C:57:7F:AF:2B:30
X509v3 Authority Key Identifier:
keyid:B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0e:e1:4e:e9:8e:1d:f9:18:ae:c5:14:3d:ce:bc:e6:c0:31:
c5:d0:d8:47:25:d5:bc:37:e1:4e:ba:26:0c:9a:25:63:e0:ec:
df:9d:c0:8e:63:55:61:fa:d2:42:4f:83:14:fa:e6:82:e4:df:
06:0e:74:10:ea:1e:ef:ca:fe:6f:c7:c7:79:ca:7e:7e:6a:66:
73:fb:8e:86:a4:7b:4a:d3:42:29:d3:4f:44:16:08:36:bb:44:
9d:36:34:bd:7a:36:8a:eb:17:ab:e5:35:98:60:5a:d9:2c:08:
f0:e4:ab:22:4c:42:3e:1f:36:dc:bd:3e:5a:76:2a:02:f6:d4:
a8:a9:d6:34:73:5c:8f:70:ba:3e:c1:df:9b:e2:7f:a4:15:21:
28:78:ac:4e:95:e5:94:36:79:f9:32:47:dd:89:e2:3d:89:8b:
77:f3:c0:b8:64:a5:7b:65:5c:37:5f:98:5f:f6:95:85:99:11:
ab:f0:d3:02:f3:16:d5:b3:49:82:d8:ce:5d:54:a1:6f:8a:d6:
d1:c1:58:ea:2a:57:87:79:ed:72:d0:21:b9:87:b0:ad:fa:b1:
43:e2:33:03:81:c4:37:1d:14:64:62:8e:fe:83:6a:66:99:24:
42:2c:67:67:fd:aa:d9:fb:c9:13:78:e7:70:2d:9e:58:f4:70:
9d:e5:11:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:37 2026 by rpki-client