
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft
File: 83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft (raw, json)
Hash identifier: FDrAVwS+yPdzlDAiP8zipX85LOUxtv2+tWCVJEJ4Io4=
Subject key identifier: B1:87:02:DD:65:BE:14:D6:02:D4:20:26:47:BE:34:72:21:B5:2D:95
Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
Certificate issuer: /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Certificate serial: 19EF8DE1A66E1EBF1C801D1FCA4EA2905647782A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft
Manifest number: 0273
Signing time: Mon 02 Mar 2026 02:26:59 +0000
Manifest this update: Mon 02 Mar 2026 02:21:59 +0000
Manifest next update: Thu 05 Mar 2026 09:11:59 +0000
Files and hashes: 1: 3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (hash: Ok/OluvS5h7lKD3sSNYwAY0KsbjVMJ4hxy4FEh3uKmk=)
2: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (hash: y57hfH1lBOVunH6wiRrVTULW7uqhPZnP/h9yu/EhF5I=)
3: 83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl (hash: pxMh2CPiz/+FGDhi85JFVEPAXKJIGjwNl8CboTfhXiM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl
rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ef:8d:e1:a6:6e:1e:bf:1c:80:1d:1f:ca:4e:a2:90:56:47:78:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Validity
Not Before: Mar 2 02:21:59 2026 GMT
Not After : Mar 5 09:11:59 2026 GMT
Subject: CN=B18702DD65BE14D602D4202647BE347221B52D95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:5f:e0:03:d0:c7:8a:a7:44:6d:df:c9:c0:
61:d3:59:37:37:9d:04:68:e7:b0:c0:3f:ae:c6:4a:
05:7a:2a:7f:c6:af:52:27:a1:9a:a7:04:02:cf:04:
f6:da:15:79:e5:04:1d:2b:ef:7f:3f:ec:5a:a8:3d:
ec:1e:23:2d:3b:30:f4:8d:35:d6:44:f2:c2:cc:8b:
a6:d7:15:af:cd:b5:99:67:9c:fa:36:c1:82:ec:61:
de:12:74:e6:e0:ba:ab:ae:d3:6a:7f:d9:1f:11:79:
bd:a4:bb:03:77:a1:f9:72:37:b8:5c:bc:aa:28:c5:
47:d5:bf:f7:56:84:97:9d:b8:72:6e:58:0a:1b:58:
e1:ad:3c:ea:c9:89:e7:59:a9:72:f1:dc:5e:8f:2b:
23:45:a8:98:23:37:69:78:ff:f9:56:c3:07:f3:b7:
0c:94:9b:1b:83:c2:68:86:bf:6c:6e:73:80:5e:40:
37:9c:f1:a5:5d:07:7c:e2:c5:f8:df:a3:72:41:9c:
d1:76:63:41:5f:65:60:eb:26:02:af:bc:de:8b:34:
74:29:72:38:17:ea:8b:e1:18:b8:f8:66:e8:73:16:
08:a2:e1:1a:79:f9:50:66:36:d6:2f:47:0c:15:d3:
5c:fe:0a:37:1c:e3:67:8d:ea:0a:8e:17:8c:b5:1f:
9b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:87:02:DD:65:BE:14:D6:02:D4:20:26:47:BE:34:72:21:B5:2D:95
X509v3 Authority Key Identifier:
keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1d:02:c0:97:0d:b9:5c:cc:3e:43:52:0c:1b:fd:ff:eb:76:
fe:2a:4e:89:1d:ae:4f:fd:cb:4b:fe:17:61:58:16:94:e2:d4:
03:c8:31:ca:7a:58:db:73:b6:28:db:82:cc:5b:57:4d:5d:0c:
19:65:1c:b5:df:04:b5:56:8d:3a:0e:29:c1:98:fd:65:db:34:
9c:94:ec:1a:6d:60:93:7e:10:c6:d6:34:40:b2:c7:ba:59:0a:
2a:49:fb:e0:a5:48:6f:f0:d7:65:e7:f2:58:e4:1e:f4:8a:8d:
bf:29:4a:44:d6:90:f4:9b:95:66:18:be:bb:98:86:ea:59:ad:
0f:ce:2d:eb:8f:5b:e6:40:99:61:2c:f0:da:3e:59:10:de:59:
d5:fe:bc:01:8d:05:77:d8:94:19:6e:65:e6:58:ee:98:ec:dc:
b1:05:35:f7:15:b8:b8:e5:c0:32:26:25:83:19:0b:a5:05:e2:
6b:f3:b2:fe:43:1c:c9:88:e7:a8:30:8c:a7:b5:be:dd:32:8d:
e6:26:af:bc:31:59:d9:17:92:f1:52:70:99:14:68:79:de:7b:
f9:ee:f9:f9:41:b2:70:e5:29:06:14:04:85:6a:73:2a:03:e7:
55:5f:0f:6f:af:57:54:47:8c:34:d2:7f:3c:31:05:e4:17:7c:
19:02:d8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:51 2026 by rpki-client