
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft
File: 82BBF3364DDD646942F4CAE0579F132D84194FE2.mft (raw, json)
Hash identifier: eBH8TCcocFGvDJFyPcS2ghhC+i1jngT5p8ra9iqu4e0=
Subject key identifier: 57:CE:2C:64:10:08:54:23:4F:0C:16:F9:21:19:B5:D8:22:DC:B5:96
Authority key identifier: 82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2
Certificate issuer: /CN=82BBF3364DDD646942F4CAE0579F132D84194FE2
Certificate serial: 4D89293F92DE86B7C33FA9483B1F21F0C4CB9995
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft
Manifest number: FA
Signing time: Sat 28 Feb 2026 10:01:04 +0000
Manifest this update: Sat 28 Feb 2026 09:56:04 +0000
Manifest next update: Tue 03 Mar 2026 10:21:04 +0000
Files and hashes: 1: 82BBF3364DDD646942F4CAE0579F132D84194FE2.crl (hash: JBLUjptdW7xgCTJkox/Lpw3u9NSpOq6sViVOyLgSkQY=)
2: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: ANxlrE1JSxdjlT4kZZgX9Az8PSjhsbf6pSdaY8P2LXE=)
3: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: peJ67ixLv6wOxbNwTzpazMnzEKzYxMtdAI8w89zlkC0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl
rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 10:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:89:29:3f:92:de:86:b7:c3:3f:a9:48:3b:1f:21:f0:c4:cb:99:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82BBF3364DDD646942F4CAE0579F132D84194FE2
Validity
Not Before: Feb 28 09:56:04 2026 GMT
Not After : Mar 3 10:21:04 2026 GMT
Subject: CN=57CE2C64100854234F0C16F92119B5D822DCB596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4b:35:4c:4f:5a:24:ed:1a:92:52:e4:09:64:
12:c5:ed:ae:3a:ef:76:26:6c:51:1a:3c:ce:0e:26:
6b:af:97:84:1d:bb:4d:06:b4:4e:54:40:9b:5f:df:
56:e6:d4:e7:ec:a7:0e:8b:da:85:23:20:2d:27:31:
ae:0d:aa:1b:64:1a:ec:9f:fd:55:8e:25:88:34:4c:
25:7d:f4:08:8d:89:b3:58:c1:3b:88:fb:a9:58:ed:
ab:1b:a0:6f:b8:78:b3:54:9a:09:19:24:0a:82:42:
da:ed:74:f1:1f:a9:0b:fc:9b:94:c4:af:11:00:67:
7b:81:bc:44:ab:dc:5d:c6:47:5c:8a:9c:39:a3:32:
d3:6b:dc:c2:a7:2e:ba:98:73:f1:97:7e:59:4c:0b:
98:8e:7f:f3:37:8e:3a:aa:6d:f8:4d:47:9b:90:cc:
fe:db:8d:ba:d4:59:3d:27:f3:79:07:d1:aa:84:84:
4b:1f:06:8d:73:c3:99:50:ff:a5:bf:60:e7:d2:16:
0a:4e:b5:73:c1:61:c2:4d:bf:6c:a2:a5:5b:6d:32:
ab:d3:1e:86:56:c5:64:ee:86:d4:e2:fd:4f:29:db:
4b:70:ee:b5:24:e8:a2:0d:10:6d:de:40:00:c8:21:
07:76:f9:58:c9:0d:c6:db:81:b4:99:8e:e4:54:1a:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CE:2C:64:10:08:54:23:4F:0C:16:F9:21:19:B5:D8:22:DC:B5:96
X509v3 Authority Key Identifier:
keyid:82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:05:55:95:98:47:1b:a6:d1:29:c7:a0:f0:94:ec:3c:de:e6:
b9:bc:be:0f:a4:e4:5d:90:44:bb:23:15:b7:7f:5b:32:b1:e7:
a4:0d:47:a8:d7:9c:ed:79:cf:a9:7d:89:46:65:6f:30:76:ab:
4f:8c:60:81:ea:07:7b:4e:a7:4a:dd:d3:dd:d4:c6:7c:68:1f:
64:87:4b:7a:7a:a9:72:89:9b:44:4a:73:ee:f3:66:ed:e9:15:
8a:85:a0:dc:71:cb:9a:3a:08:13:dd:cb:f8:d8:e0:84:74:cd:
83:fc:71:19:68:75:a9:7b:07:df:0e:19:79:2c:00:32:0a:d3:
79:80:1c:67:0d:68:37:11:b0:16:eb:99:f4:fd:54:b2:6c:0e:
88:49:bd:d4:2f:3f:65:07:44:5e:03:0a:8d:30:a7:57:11:a9:
6b:49:07:2d:0a:40:68:0b:2f:7e:1c:cc:42:14:85:10:ab:48:
a4:c0:38:82:12:e7:ae:6d:ea:00:ea:47:f8:af:ad:6a:5b:4a:
2e:58:fb:cc:38:c3:46:c5:93:5a:ed:65:68:59:f4:da:d9:f5:
50:b4:2a:18:13:98:76:bc:d5:a9:29:94:a5:ce:a5:d5:e8:ff:
ab:cf:19:52:7b:b2:4e:25:32:87:a1:eb:eb:64:eb:b0:3e:51:
89:3f:bc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:39 2026 by rpki-client