
$ rpki-client -vvf repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft
File: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft (raw, json)
Hash identifier: wwvI4mUS5h4Ur24DMkM0FQdZ1dXe/nw4zOxZ8oYyqDk=
Subject key identifier: A8:47:96:CC:40:3F:99:20:72:59:44:A2:D9:B2:99:1F:8D:84:FA:8D
Authority key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A
Certificate issuer: /CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A
Certificate serial: 7C3C50BBE79A061B99CF11E483E82340E563BBB7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft
Manifest number: 0246
Signing time: Sat 28 Feb 2026 18:10:43 +0000
Manifest this update: Sat 28 Feb 2026 18:05:43 +0000
Manifest next update: Wed 04 Mar 2026 04:53:43 +0000
Files and hashes: 1: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl (hash: cX7kjqEA8RlnfbdfvUUKodo0IeHt3PDdsDIIcPkG2tM=)
2: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: aIp2Ip0KA7a4+VvE23OSDrVGb4sJGrWUPloeyjyWxtA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl
rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 04:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:3c:50:bb:e7:9a:06:1b:99:cf:11:e4:83:e8:23:40:e5:63:bb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A
Validity
Not Before: Feb 28 18:05:43 2026 GMT
Not After : Mar 4 04:53:43 2026 GMT
Subject: CN=A84796CC403F9920725944A2D9B2991F8D84FA8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:4b:4b:f9:87:70:0e:53:02:57:56:dd:a6:
96:4a:d2:04:6d:08:db:50:58:7b:65:17:f5:6e:bc:
c0:6c:2b:4d:aa:d3:61:bf:38:30:f4:5d:dd:eb:0a:
a2:c9:1d:c4:ca:40:a1:2b:88:6d:4e:f3:8a:ff:42:
2f:e0:55:76:f4:41:86:45:c6:ce:4b:09:df:f7:65:
8b:73:d8:15:07:4d:86:fd:15:1c:d8:96:7d:8b:06:
0e:ba:8c:56:25:28:c9:ad:4a:ab:c8:3f:f5:38:18:
bf:4b:13:36:a6:1f:80:97:f6:f0:e5:74:ae:db:27:
42:89:93:2b:1d:ef:db:37:5f:6c:88:ef:85:0a:b1:
4a:76:59:5e:2c:ae:00:5f:c6:a5:0c:2e:42:d0:23:
00:ee:ce:ac:00:cb:a3:e3:a9:33:2f:ba:2f:37:85:
81:33:48:9b:28:0e:e6:68:2c:8c:f8:96:93:56:13:
57:ce:73:c7:e3:2d:dd:2e:83:e4:7c:dc:49:40:3a:
58:bd:62:04:b2:c1:e8:72:b1:0d:eb:d4:68:a3:4b:
57:58:b8:35:0c:e6:0a:81:59:7d:ac:f0:a7:3a:ba:
35:ba:3d:cb:de:00:ef:47:e9:0c:88:9b:69:d5:44:
75:b6:19:1f:76:b6:59:9e:ab:05:2c:6f:57:44:9a:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:96:CC:40:3F:99:20:72:59:44:A2:D9:B2:99:1F:8D:84:FA:8D
X509v3 Authority Key Identifier:
keyid:B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:4c:33:43:e2:97:f7:b8:39:e7:07:36:c7:d9:35:2a:8c:9c:
f6:e2:ba:73:fd:8b:bf:74:8f:03:b8:38:2d:36:d0:6b:c5:11:
8e:8c:37:b2:b0:7c:7e:c6:16:81:f0:fb:55:4b:4e:8d:f5:f4:
4a:f8:0c:94:a5:c4:0a:c9:96:82:a7:71:00:78:21:f2:bb:d5:
c0:f0:92:11:6b:7c:59:1b:88:14:a6:cb:db:89:03:ae:d1:8b:
a4:92:25:79:eb:3a:24:2e:bd:20:36:bc:c0:f3:b6:9f:af:66:
86:a5:ae:e5:e3:4a:dd:15:93:dd:e4:b0:54:f8:4d:73:d5:c7:
62:db:95:32:ca:50:e5:71:42:79:f3:01:b9:3b:68:32:8d:de:
62:32:a4:ea:4d:23:f4:1a:87:58:d8:96:99:08:16:69:68:47:
c3:bf:b0:54:12:df:34:6b:77:36:97:4c:7b:a1:d1:c2:21:37:
bb:2b:e5:97:a1:b1:8c:be:04:bb:51:d1:f0:fb:ed:33:c1:13:
51:84:09:0a:30:cb:8b:53:ae:f1:11:7b:d6:bd:9d:02:03:23:
0d:a9:23:e3:7f:c4:80:37:a6:21:af:85:68:5f:34:1e:fb:0c:
d0:65:38:91:ff:36:07:a8:a5:ba:75:c6:2d:de:5b:c5:e9:69:
d9:2c:dd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:55:13 2026 by rpki-client