
$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft
File: B2650BD2D997B6C198A4B362B7395AC364683312.mft (raw, json)
Hash identifier: 6BtUgFrQ3psA0Q6UKaSLobTg70/NkcPHLma5bwv14tI=
Subject key identifier: 26:D1:3E:BC:4B:B5:56:DB:8C:B0:B4:1C:42:9E:8D:FE:0E:AA:B3:28
Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12
Certificate issuer: /CN=B2650BD2D997B6C198A4B362B7395AC364683312
Certificate serial: 1C7D2AE936409E699C0955A6BF8BC2BD0F3C84E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft
Manifest number: 022C
Signing time: Sun 01 Mar 2026 16:01:03 +0000
Manifest this update: Sun 01 Mar 2026 15:56:03 +0000
Manifest next update: Thu 05 Mar 2026 02:28:03 +0000
Files and hashes: 1: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: Din5W7YK7LMJbRJUi9wsZasS4GJU6jj09R0J09VzjXg=)
2: B2650BD2D997B6C198A4B362B7395AC364683312.crl (hash: MnKysPa6s9QjmpkLcJdjLx341FCk+4CKp3sxgE2C+dQ=)
3: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: IFrFNgL9nGnkBy6pVhjob4v5DLOWZyxcdQ+rkKOm7OM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl
rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:7d:2a:e9:36:40:9e:69:9c:09:55:a6:bf:8b:c2:bd:0f:3c:84:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312
Validity
Not Before: Mar 1 15:56:03 2026 GMT
Not After : Mar 5 02:28:03 2026 GMT
Subject: CN=26D13EBC4BB556DB8CB0B41C429E8DFE0EAAB328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:1d:39:e6:a4:6e:7d:76:87:22:fb:c9:71:
ee:a1:c5:5c:2f:8b:5e:02:7f:2d:65:51:ef:ff:8a:
33:e8:31:ad:14:e6:a2:5a:56:47:4b:82:a0:93:11:
ce:c4:54:8f:5b:5a:2a:b6:e2:1a:2f:3a:be:7d:11:
64:e1:82:f8:59:1e:0b:5c:33:4f:72:a4:ff:49:f1:
f4:2d:0b:72:59:ff:5f:d9:1b:66:fa:cf:7e:34:2d:
da:6c:fe:4a:c3:9e:76:9c:3b:3a:b8:b7:f1:ba:4c:
93:e7:fe:22:91:7c:09:01:d6:15:00:62:eb:10:56:
53:22:90:7b:c7:8a:bd:b9:9c:51:0e:f1:47:b6:a8:
3a:19:bd:7d:b1:b1:91:04:6f:37:09:9d:ec:ad:94:
b2:be:2c:17:5c:c7:04:8b:ca:73:fd:d0:c8:f5:6e:
e1:1d:15:63:34:5f:77:b4:25:8a:54:c6:8e:86:24:
5e:7e:e0:5b:01:4c:e0:d4:54:09:92:a3:61:d7:ed:
49:3d:97:bf:eb:50:61:b4:da:89:00:db:ea:b0:d6:
81:ea:5d:10:38:1c:e8:71:2f:02:70:1c:6a:f0:d6:
6c:ac:ec:41:71:dd:dc:e6:6b:55:5b:19:03:56:1d:
be:f1:78:8f:97:04:4a:e6:db:51:ef:e8:b4:d9:10:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D1:3E:BC:4B:B5:56:DB:8C:B0:B4:1C:42:9E:8D:FE:0E:AA:B3:28
X509v3 Authority Key Identifier:
keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f4:33:f3:82:38:cb:1e:d1:dc:3e:7d:07:3a:7a:e5:72:68:
1e:b3:88:87:5e:49:9b:b1:0c:9e:25:b9:8f:a3:a5:4c:c6:2e:
e4:19:0f:42:4c:c2:0d:35:a1:a3:d6:ad:89:5f:fb:8f:e7:0e:
5f:dc:b0:85:93:e7:ed:a5:2e:c0:b2:52:55:ad:5e:56:77:2d:
47:c0:c6:ea:6d:f5:11:5a:ce:20:13:8d:9e:86:db:85:0b:af:
4e:61:fe:49:03:bc:56:66:db:fa:cf:80:be:df:9e:7e:4b:ab:
59:f3:3a:be:16:c9:e5:91:0c:57:25:19:ab:b2:5b:d1:ee:33:
2d:63:1f:98:f0:66:8f:8e:82:62:95:0e:cd:4b:21:37:5e:65:
5d:09:24:a3:f9:e4:a8:29:19:80:80:bc:0a:50:60:b3:2a:8b:
e9:b1:4f:f3:77:09:43:c4:7c:d2:a0:e6:b6:d0:fc:d2:41:e3:
34:5c:77:52:27:da:9b:65:7a:58:b6:8c:26:67:33:c5:ca:62:
50:b6:b4:45:7a:fc:51:82:47:35:cf:47:c3:c9:c1:2d:9a:fe:
b3:9e:17:1b:75:12:c1:51:65:2b:a6:c0:14:1b:0c:c6:d0:74:
9d:76:77:e1:3e:df:87:3d:0b:25:0c:ba:22:aa:d4:e7:0d:ce:
59:37:db:ef
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHH0q6TZAnmmcCVWmv4vCvQ88hOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2
NDY4MzMxMjAeFw0yNjAzMDExNTU2MDNaFw0yNjAzMDUwMjI4MDNaMDMxMTAvBgNV
BAMTKDI2RDEzRUJDNEJCNTU2REI4Q0IwQjQxQzQyOUU4REZFMEVBQUIzMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbcx055qRufXaHIvvJce6hxVwv
i14Cfy1lUe//ijPoMa0U5qJaVkdLgqCTEc7EVI9bWiq24hovOr59EWThgvhZHgtc
M09ypP9J8fQtC3JZ/1/ZG2b6z340Ldps/krDnnacOzq4t/G6TJPn/iKRfAkB1hUA
YusQVlMikHvHir25nFEO8Ue2qDoZvX2xsZEEbzcJneytlLK+LBdcxwSLynP90Mj1
buEdFWM0X3e0JYpUxo6GJF5+4FsBTODUVAmSo2HX7Uk9l7/rUGG02okA2+qw1oHq
XRA4HOhxLwJwHGrw1mys7EFx3dzma1VbGQNWHb7xeI+XBErm21Hv6LTZEIvBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUJtE+vEu1VtuMsLQcQp6N/g6qsygwHwYDVR0j
BBgwFoAUsmUL0tmXtsGYpLNitzlaw2RoMxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YjkwNTc2Ni00NDBlLTRiY2ItYWU3Mi0zZTc4ODMxY2U5ZGMvMC9CMjY1MEJEMkQ5
OTdCNkMxOThBNEIzNjJCNzM5NUFDMzY0NjgzMzEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2NDY4
MzMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl
NzItM2U3ODgzMWNlOWRjLzAvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVB
QzM2NDY4MzMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIX0M/OCOMse0dw+fQc6euVyaB6ziIdeSZux
DJ4luY+jpUzGLuQZD0JMwg01oaPWrYlf+4/nDl/csIWT5+2lLsCyUlWtXlZ3LUfA
xupt9RFaziATjZ6G24ULr05h/kkDvFZm2/rPgL7fnn5Lq1nzOr4WyeWRDFclGauy
W9HuMy1jH5jwZo+OgmKVDs1LITdeZV0JJKP55KgpGYCAvApQYLMqi+mxT/N3CUPE
fNKg5rbQ/NJB4zRcd1In2ptleli2jCZnM8XKYlC2tEV6/FGCRzXPR8PJwS2a/rOe
Fxt1EsFRZSumwBQbDMbQdJ12d+E+34c9CyUMuiKq1OcNzlk32+8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:10:59 2026 by rpki-client