
$ rpki-client -vvf repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft
File: CB8106D827747D008C9DE9181B4EC6739C8EE800.mft (raw, json)
Hash identifier: BNUnLUpuxBzy3SPzyNJiAY46E2vnNlmZkVliQ+eYisE=
Subject key identifier: AF:70:72:E6:8F:1E:69:07:CA:06:A9:8F:2E:95:08:0E:AD:EC:47:28
Authority key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00
Certificate issuer: /CN=CB8106D827747D008C9DE9181B4EC6739C8EE800
Certificate serial: 2B7A8C1101E2910ACFF6D902531576303A8B505D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft
Manifest number: 054F
Signing time: Mon 02 Mar 2026 08:10:59 +0000
Manifest this update: Mon 02 Mar 2026 08:05:59 +0000
Manifest next update: Thu 05 Mar 2026 09:15:59 +0000
Files and hashes: 1: CB8106D827747D008C9DE9181B4EC6739C8EE800.crl (hash: zte4tIJehEYbEo//ebztrKIjUgCoze4NQQbiRLxXgFw=)
2: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: 9V43hWJhD106Qur+e/iXVkOrJHa3wYOoVgiuMpwP8PI=)
3: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: 3L/LuNQCHJ1QppGAGjYDYBbeNVsrf3Si2Cax6eMLnCM=)
4: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: V0+izgb3kW/OtzIxZT6l6U4KDpKCH9ZjxQM8fPyZ410=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl
rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:7a:8c:11:01:e2:91:0a:cf:f6:d9:02:53:15:76:30:3a:8b:50:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800
Validity
Not Before: Mar 2 08:05:59 2026 GMT
Not After : Mar 5 09:15:59 2026 GMT
Subject: CN=AF7072E68F1E6907CA06A98F2E95080EADEC4728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:15:35:f5:0c:03:c9:df:df:b3:b8:40:47:
7d:11:62:87:5c:ea:14:af:6b:10:f6:6e:18:f2:ea:
7b:17:14:01:37:dc:3a:5a:cb:6e:aa:6d:e8:fc:36:
f2:58:ff:87:15:8e:24:90:24:75:c9:1b:f9:72:03:
23:a9:1c:4c:9d:d2:dd:65:79:b3:41:87:3e:6e:9f:
8b:0d:9d:ae:cd:ea:33:fa:a9:dd:05:b0:b1:0b:08:
26:9a:ce:b8:3b:f9:b0:6c:b2:44:54:be:29:3d:3e:
5c:d0:b8:83:3d:3c:ec:80:45:2a:21:ad:26:89:54:
22:de:88:ae:2c:a8:07:e1:ec:ae:21:c6:a9:80:38:
a5:8e:ef:d0:7d:e0:f0:f8:1b:8a:a2:e3:f2:14:61:
b5:57:a1:80:20:f0:32:25:dd:8f:b2:74:24:4e:39:
6f:67:7e:fb:ae:71:0b:cf:9f:02:de:75:18:b8:47:
b5:13:81:9b:01:0b:e2:8e:a5:cb:74:72:46:35:21:
98:1b:20:50:59:19:20:a1:4d:9c:ea:a4:e8:a1:c4:
44:7a:92:7d:fd:c3:94:9c:51:65:96:ac:3c:d5:bd:
eb:33:77:8f:80:10:74:b1:7d:c1:5c:50:d9:03:74:
78:d7:2a:5a:69:2b:16:7f:9c:25:5f:c3:c7:ed:e6:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:70:72:E6:8F:1E:69:07:CA:06:A9:8F:2E:95:08:0E:AD:EC:47:28
X509v3 Authority Key Identifier:
keyid:CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ef:f2:f8:ee:a4:a7:4f:58:f4:5c:de:98:3d:75:a0:de:85:
7a:df:89:7a:52:dd:19:01:5b:e0:bd:41:4c:b0:f0:b4:7f:bf:
6a:b7:25:28:94:d8:4e:76:ae:77:6e:e8:e5:49:04:7a:2a:2b:
2c:c9:8b:03:5d:c3:93:dc:0f:c7:52:21:27:5b:df:e9:88:54:
7a:2e:94:f0:28:79:79:fa:b3:8d:18:d4:46:8d:c7:cb:17:6f:
ba:6f:3c:e7:ff:35:f7:7b:ef:9a:b0:a3:2a:58:15:c4:af:c7:
5e:76:13:e9:45:ad:a4:ce:9b:7e:67:16:80:69:15:4f:15:11:
b9:88:f9:19:3d:fb:81:8c:b5:8e:91:12:d4:26:54:43:ee:0b:
9d:c9:64:df:8b:54:6e:dc:d3:52:43:e6:19:9f:52:b2:50:01:
56:81:92:cb:49:ea:17:3a:41:3d:05:12:91:a8:de:0d:40:a7:
67:2e:2f:06:4b:39:00:3d:0a:f5:65:0c:7a:43:91:c0:69:9a:
55:8f:ef:e0:a3:aa:84:ea:8c:fe:e6:42:7d:59:d2:2c:2d:d5:
97:d8:b2:0b:0f:d8:96:b0:24:4e:ef:6f:4a:6a:f0:3f:8a:b3:
da:fe:6f:93:7c:3d:bc:71:f9:78:26:26:78:6b:6d:91:c3:46:
88:f1:29:7b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUK3qMEQHikQrP9tkCUxV2MDqLUF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5
QzhFRTgwMDAeFw0yNjAzMDIwODA1NTlaFw0yNjAzMDUwOTE1NTlaMDMxMTAvBgNV
BAMTKEFGNzA3MkU2OEYxRTY5MDdDQTA2QTk4RjJFOTUwODBFQURFQzQ3MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19BU19QwDyd/fs7hAR30RYodc
6hSvaxD2bhjy6nsXFAE33Dpay26qbej8NvJY/4cVjiSQJHXJG/lyAyOpHEyd0t1l
ebNBhz5un4sNna7N6jP6qd0FsLELCCaazrg7+bBsskRUvik9PlzQuIM9POyARSoh
rSaJVCLeiK4sqAfh7K4hxqmAOKWO79B94PD4G4qi4/IUYbVXoYAg8DIl3Y+ydCRO
OW9nfvuucQvPnwLedRi4R7UTgZsBC+KOpct0ckY1IZgbIFBZGSChTZzqpOihxER6
kn39w5ScUWWWrDzVveszd4+AEHSxfcFcUNkDdHjXKlppKxZ/nCVfw8ft5rQhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUr3By5o8eaQfKBqmPLpUIDq3sRygwHwYDVR0j
BBgwFoAUy4EG2Cd0fQCMnekYG07Gc5yO6AAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMC9DQjgxMDZEODI3
NzQ3RDAwOEM5REU5MTgxQjRFQzY3MzlDOEVFODAwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5QzhF
RTgwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi
OWQtZjc0YjQ5YzZhNjU1LzAvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2
NzM5QzhFRTgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHrv8vjupKdPWPRc3pg9daDehXrfiXpS3RkB
W+C9QUyw8LR/v2q3JSiU2E52rndu6OVJBHoqKyzJiwNdw5PcD8dSISdb3+mIVHou
lPAoeXn6s40Y1EaNx8sXb7pvPOf/Nfd775qwoypYFcSvx152E+lFraTOm35nFoBp
FU8VEbmI+Rk9+4GMtY6REtQmVEPuC53JZN+LVG7c01JD5hmfUrJQAVaBkstJ6hc6
QT0FEpGo3g1Ap2cuLwZLOQA9CvVlDHpDkcBpmlWP7+CjqoTqjP7mQn1Z0iwt1ZfY
sgsP2JawJE7vb0pq8D+Ks9r+b5N8Pbxx+XgmJnhrbZHDRojxKXs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:36 2026 by rpki-client