
$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft
File: 3BA10823C279932D7573B930625CD2884433C744.mft (raw, json)
Hash identifier: 6fIPVPajKQOObydEUtj9AtAZmPmd6oZrkHNU1QVFkeg=
Subject key identifier: 33:46:A7:2E:71:B7:45:65:7D:65:7E:D2:C3:B4:5B:77:46:69:EC:D1
Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44
Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744
Certificate serial: 4D1507D8F015F4E004D994AD1F605CD0E90F67DF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft
Manifest number: 01D6
Signing time: Sun 01 Mar 2026 19:21:59 +0000
Manifest this update: Sun 01 Mar 2026 19:16:59 +0000
Manifest next update: Thu 05 Mar 2026 03:30:59 +0000
Files and hashes: 1: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: L/T+m/yJ1Buc0w1osVIInT5sZ71zV7/a+aiKjsgJiso=)
2: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: qmdGYePJd+wN/ivsAkmPcsWhCMrqFbcUBgTD/u1jg9I=)
3: 3BA10823C279932D7573B930625CD2884433C744.crl (hash: ZUQuhxEVZDKQUmoba7e6FPiOoUCm6BGRosmsz5INC0M=)
4: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: SKukxQ79pDKG9sTP8P7RFVTK2iNUABU8DA3sUqU7E6U=)
5: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: Q7l9088g74cyAOX6H9IF5efU/M/VWIjoHRjpfnhFTJw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl
rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:15:07:d8:f0:15:f4:e0:04:d9:94:ad:1f:60:5c:d0:e9:0f:67:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BA10823C279932D7573B930625CD2884433C744
Validity
Not Before: Mar 1 19:16:59 2026 GMT
Not After : Mar 5 03:30:59 2026 GMT
Subject: CN=3346A72E71B745657D657ED2C3B45B774669ECD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:70:c7:30:7c:07:3a:36:66:92:04:cc:9b:ba:
a8:a2:50:f8:00:6c:fb:02:22:6c:05:15:be:38:4c:
ed:16:06:13:91:e1:61:32:10:57:97:98:95:c3:13:
db:a2:97:e3:28:e0:33:bf:4d:24:53:cb:af:16:85:
6c:b2:23:57:72:92:26:1b:d8:92:8a:21:fe:77:e7:
6c:ba:a3:ea:a6:95:55:5b:6e:12:1e:3e:47:c6:9e:
63:18:88:07:a6:8d:6e:56:19:dc:84:38:45:1e:f4:
8f:c3:ea:ca:e9:c8:66:b5:6e:98:2e:8c:6f:a8:fb:
c8:bc:1c:05:f8:cb:9a:2b:4c:f9:5b:ae:24:44:a8:
c9:84:70:4b:1d:d8:d2:de:4a:ce:36:b8:6b:54:02:
6a:86:cd:17:de:ac:77:cb:55:a5:b4:c1:54:c6:a4:
5e:7c:43:f5:00:bc:57:0e:9d:21:ca:4b:e4:d3:eb:
95:9c:d9:c5:45:a4:27:1f:1e:d3:29:60:9e:d3:2b:
de:3e:d6:03:8a:e2:c4:24:e6:ce:e3:3d:11:fc:2e:
98:c8:73:2f:8b:3b:bc:1f:42:69:6a:e1:2f:04:33:
0d:0c:c9:2e:da:6e:dc:b7:76:5a:7f:a4:aa:dc:10:
6d:44:ce:b4:e7:86:c0:9c:6b:a8:b8:0e:9e:3b:82:
38:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:46:A7:2E:71:B7:45:65:7D:65:7E:D2:C3:B4:5B:77:46:69:EC:D1
X509v3 Authority Key Identifier:
keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f6:98:d9:5b:48:04:c8:f2:8f:ca:48:a5:4b:bd:57:38:d2:
4a:44:45:e9:11:80:fa:fc:8b:ad:dc:46:18:6e:48:fc:71:91:
37:69:88:36:d3:23:2a:26:cf:a7:1d:08:61:ff:05:37:83:b9:
58:46:f0:31:7f:c1:21:77:dc:b2:d4:42:2c:f2:ca:9e:fd:7c:
97:05:63:ab:ce:a7:ce:8a:0d:5c:c7:49:eb:d1:44:7a:7f:06:
5d:e7:16:2c:a9:98:6d:6f:d9:97:05:ac:cd:f0:08:0c:45:2b:
50:00:33:19:10:bf:7f:f1:79:51:67:72:e4:51:c2:65:ff:36:
73:5b:72:5e:c0:ca:ae:b9:04:ef:df:aa:dd:c2:81:49:ff:10:
d9:b1:5c:02:0b:02:85:4d:11:3f:02:d3:d0:86:bf:90:b3:21:
38:2f:e5:bc:0d:8e:a1:a4:6e:e0:78:63:d9:f9:c1:89:8e:aa:
0e:b1:56:a5:b4:82:3c:1a:43:02:a1:7c:d3:27:bf:25:9c:bf:
8a:59:74:e5:38:50:56:ad:60:72:f0:a1:2b:d3:85:91:a0:02:
ab:a6:20:dd:53:ce:9f:a6:27:fd:cb:10:86:90:b0:cf:fa:1d:
0e:97:5d:1c:90:39:1f:80:d0:ca:6a:3d:4f:1a:82:d1:ee:93:
00:a4:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:26 2026 by rpki-client