
$ rpki-client -vvf repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft
File: B70932ED6C688D58897E32E1D5C990B20910FF02.mft (raw, json)
Hash identifier: o/JqZV9m2ndnmYxuZjvBn38TZFBMblch2dQ63sRdXtA=
Subject key identifier: 4D:4B:E8:D2:FF:B8:FD:C9:61:42:B5:A2:D2:31:AB:C9:DB:05:19:C1
Authority key identifier: B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02
Certificate issuer: /CN=B70932ED6C688D58897E32E1D5C990B20910FF02
Certificate serial: 60B6119322CE87BCC6FECD63AEE1792DB2EC634A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft
Manifest number: 01F6
Signing time: Mon 02 Mar 2026 18:32:28 +0000
Manifest this update: Mon 02 Mar 2026 18:27:28 +0000
Manifest next update: Fri 06 Mar 2026 00:00:28 +0000
Files and hashes: 1: B70932ED6C688D58897E32E1D5C990B20910FF02.crl (hash: yL3VNcypO+UN5bFw18ehJMdJAVzT5Ulsj05T5HMta0w=)
2: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: uz+mWVTVia+vitlv373HGRqQqyhynrWuHzLw/EVOgos=)
3: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: DU0fCsxoRXxLuGIvLie3IhsmUfNJhRn0zykqF5A0jpc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl
rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Mar 2026 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b6:11:93:22:ce:87:bc:c6:fe:cd:63:ae:e1:79:2d:b2:ec:63:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B70932ED6C688D58897E32E1D5C990B20910FF02
Validity
Not Before: Mar 2 18:27:28 2026 GMT
Not After : Mar 6 00:00:28 2026 GMT
Subject: CN=4D4BE8D2FFB8FDC96142B5A2D231ABC9DB0519C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:2c:87:01:a4:b2:6a:bd:f9:a3:96:69:72:
fd:5d:8e:32:0e:d2:34:11:0d:dc:13:79:b8:79:87:
11:fe:40:bf:7d:f9:6e:c1:b4:29:f2:51:99:e1:a5:
58:d9:e4:9a:5a:5e:a2:6a:e8:61:1a:08:07:d4:6e:
0f:63:a0:75:96:fa:a4:de:05:47:d1:98:70:27:cc:
77:2f:9d:ea:00:97:6e:49:75:39:2a:6a:51:4a:8c:
51:2c:ae:26:03:08:ac:b5:9a:f0:21:f5:df:df:9f:
ff:8c:0f:e6:3c:22:b9:d2:9e:f4:87:92:9f:4d:f6:
ee:c0:df:19:ba:26:b0:70:2c:7a:b9:ee:71:02:3c:
de:ee:35:36:81:63:d4:98:42:83:36:5b:dc:34:99:
87:aa:a2:60:aa:2e:70:4c:7a:c9:c7:2b:76:4f:32:
bb:5a:d3:9e:95:69:f4:f8:57:76:3f:7c:73:e5:a8:
1f:b7:5a:27:e8:4c:d7:58:c9:db:60:d9:d8:d1:16:
1b:df:9f:96:32:74:e6:5c:c6:0a:dd:82:29:3f:18:
86:ad:c8:8b:73:43:e6:fb:55:12:24:e5:99:50:47:
f2:11:f4:4c:4c:5c:a4:7c:6f:1b:ad:43:26:a1:8e:
00:84:b0:40:dc:7c:38:c9:a5:58:17:70:23:43:82:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4B:E8:D2:FF:B8:FD:C9:61:42:B5:A2:D2:31:AB:C9:DB:05:19:C1
X509v3 Authority Key Identifier:
keyid:B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:de:54:7b:57:42:e9:6f:ae:53:0d:74:81:71:e7:70:be:63:
08:bf:97:44:5c:b5:3d:a4:10:66:35:4d:bd:97:bf:ea:de:13:
43:d1:5a:48:72:42:ee:cc:d8:0a:a4:73:7d:66:39:51:9d:01:
d0:bd:a8:bb:fb:cc:0c:36:c2:95:c0:01:80:8d:33:cb:b0:2d:
f1:c4:57:18:9a:41:0f:2a:75:e7:1a:ed:0f:78:e5:df:fd:ee:
ca:05:39:94:9f:1c:9d:99:53:4b:97:3d:b0:ae:72:d3:73:0b:
e7:28:80:92:e7:a8:8e:7f:8d:1a:86:db:1d:65:7b:19:81:0f:
71:8d:54:de:08:73:c1:3c:df:75:81:94:75:04:5d:29:9f:36:
09:99:fa:c7:c4:f2:17:e6:fc:b5:dc:df:54:17:0d:bc:02:f4:
e2:2d:8f:c2:14:9d:cb:08:2e:b1:25:0c:e5:55:52:f5:42:46:
d1:cb:b0:c0:1d:91:1f:d9:24:2c:b3:c7:a8:58:56:b4:3d:fa:
a2:68:0e:21:ab:04:6e:55:04:c4:15:aa:70:fe:63:3f:a8:87:
63:29:1d:71:36:74:d1:5d:a5:94:3b:3c:4e:7d:63:1f:52:7c:
d0:ea:4e:ec:c1:e2:4f:12:a6:9b:81:77:ef:bb:9a:8e:37:bf:
c7:b9:aa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:31:14 2026 by rpki-client