
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft
File: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft (raw, json)
Hash identifier: tiGaPvG/eh0AjUEU6fyHadiSH1/PbrtQimDeYuxMdw0=
Subject key identifier: 32:9F:AA:C5:5B:C1:36:74:69:4C:44:60:D8:35:49:EF:40:E3:2E:1F
Authority key identifier: B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8
Certificate issuer: /CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8
Certificate serial: 77DB0E2032CED37A696195DEB676618237F771BC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft
Manifest number: 056B
Signing time: Sat 18 Apr 2026 09:00:57 +0000
Manifest this update: Sat 18 Apr 2026 08:55:57 +0000
Manifest next update: Tue 21 Apr 2026 13:15:57 +0000
Files and hashes: 1: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: gCxomhlXPqJzdF7SJ3iSXnHHdDE1CzdM3fX39z9NSbw=)
2: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: DZlWR7tuLnpwDkeYEthZYN05oc1IXglcFF75rJ6G2+c=)
3: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl (hash: BaVw3u64iP0o4kinc93TtJlBkGri+tnj62Xgn00F22k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl
rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 13:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:db:0e:20:32:ce:d3:7a:69:61:95:de:b6:76:61:82:37:f7:71:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8
Validity
Not Before: Apr 18 08:55:57 2026 GMT
Not After : Apr 21 13:15:57 2026 GMT
Subject: CN=329FAAC55BC13674694C4460D83549EF40E32E1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:62:44:ad:07:da:99:fd:e6:ce:a1:f2:ed:
27:fe:db:8e:7a:aa:4f:21:9b:b3:a3:7e:36:60:18:
0a:02:45:36:8a:e9:11:58:a3:05:9a:ec:89:a7:c6:
e4:1b:77:5e:1a:d9:1b:2e:9f:cc:19:bc:96:4f:2f:
26:c8:37:6d:1a:b3:ca:e4:a7:e0:bc:b3:c4:ad:65:
5c:64:02:ee:f5:27:43:72:39:3e:f4:84:65:10:4f:
3b:41:8d:8f:4f:19:23:cd:89:46:72:04:e4:c3:9b:
8d:d6:5c:f6:6f:2b:17:33:6b:22:a9:56:26:c4:cc:
26:68:4b:03:7f:bb:eb:56:06:61:4b:c8:a0:7d:9e:
47:f0:a9:a7:b2:15:eb:9a:a1:12:e0:1d:0e:a9:8e:
60:1f:24:e0:c1:61:db:4a:f5:61:87:c9:78:19:74:
60:1e:c1:3d:eb:e0:df:52:08:35:1a:3c:49:8c:3a:
37:dc:ec:a9:8e:4a:05:7b:cb:41:49:58:99:c3:09:
e4:1f:b6:e7:a5:13:f2:62:6b:aa:4f:32:7a:95:af:
07:5a:42:62:d9:70:6d:00:27:f3:2a:ca:ae:ad:2f:
7d:6b:91:65:ec:c0:b9:85:05:4c:24:61:a4:a1:e6:
9d:d2:84:a6:6c:a2:07:d8:e1:4f:e5:be:01:15:75:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9F:AA:C5:5B:C1:36:74:69:4C:44:60:D8:35:49:EF:40:E3:2E:1F
X509v3 Authority Key Identifier:
keyid:B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:85:ad:8a:12:ed:8d:20:bb:38:89:40:d3:d9:98:26:4b:21:
1a:1e:fa:19:09:ce:2b:7d:cd:79:33:7e:dd:ec:eb:be:66:53:
ae:be:6f:d4:f1:7b:2f:25:17:e1:01:10:d7:51:03:ef:87:0a:
04:ff:9b:7c:df:7b:6c:44:ed:47:3d:9f:ed:93:3b:4a:da:ec:
7f:4b:ec:02:8e:5e:c3:7b:3f:aa:1c:f2:b2:c6:29:79:6c:4e:
8e:9d:07:e0:e4:1c:3f:23:99:51:d9:93:f2:24:73:4b:04:c5:
ea:ad:63:4f:71:92:7b:fa:a3:92:ab:af:66:df:6d:4e:bd:c6:
8e:db:da:0f:22:fd:e0:c4:f3:ae:bd:44:bc:08:29:d7:8d:94:
c6:c7:59:72:72:83:98:52:26:db:ba:0e:34:d3:c9:a5:2d:92:
47:7e:32:dc:ca:fa:cb:13:87:97:86:c2:24:ea:6f:d9:ea:eb:
9d:0f:1d:17:4b:7c:a5:bc:eb:90:2f:5e:d8:aa:87:11:e6:35:
84:b1:38:3c:13:ce:50:35:d9:da:1a:68:fe:96:96:fc:13:d0:
fb:a8:d6:37:4b:e2:54:05:b8:31:08:7b:ca:ab:ac:a6:43:ee:
70:af:62:50:b8:68:8d:61:c7:fc:ae:ee:cc:e6:0f:29:98:b1:
52:49:8d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:45 2026 by rpki-client