
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft
File: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft (raw, json)
Hash identifier: 7ubPkkYqJckpiVGBnc9gWzEoxqBM08VAYy4ZWKHRl4A=
Subject key identifier: C2:5C:96:E6:30:EE:35:C0:87:35:B5:12:DB:FD:93:44:6F:20:5C:B7
Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D
Certificate issuer: /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D
Certificate serial: 58D08860CEAC6B4C9BCA1ADFD0168ED478216FFF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft
Manifest number: 024E
Signing time: Sat 28 Feb 2026 19:50:00 +0000
Manifest this update: Sat 28 Feb 2026 19:45:00 +0000
Manifest next update: Wed 04 Mar 2026 05:13:00 +0000
Files and hashes: 1: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl (hash: wy25lw7AZi75q0uzw+kcJ0ZnYTeWk/zH9D+WqZCRX4g=)
2: 3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (hash: dEnaKQdLZdizpCqpcJnXth7f6FKcdGy1/gEWNghJ+nU=)
3: 3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (hash: ULVDgV6Ym293ne4NjwFyx9fV7GwDIsvmtft/evHC1jQ=)
4: 3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa (hash: KgdQImSFXI48JOCLFSTKKPItTv1rC7N1MfwzWNtz7zI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl
rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 05:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d0:88:60:ce:ac:6b:4c:9b:ca:1a:df:d0:16:8e:d4:78:21:6f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D
Validity
Not Before: Feb 28 19:45:00 2026 GMT
Not After : Mar 4 05:13:00 2026 GMT
Subject: CN=C25C96E630EE35C08735B512DBFD93446F205CB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:f5:a1:97:dd:d1:96:59:cb:e0:a3:aa:a8:
95:a2:6c:26:f6:db:87:a6:70:40:12:22:2b:55:eb:
81:30:e4:73:67:9b:e1:be:86:88:6e:e4:92:1e:af:
01:d0:ba:bb:db:bc:37:86:da:cb:1f:7b:34:7e:e2:
ad:3a:db:71:de:a5:9c:06:c1:39:d3:c6:6b:4e:dc:
6c:f5:e4:a3:d0:7f:c9:e8:66:1e:5e:cc:93:22:a9:
61:ae:5c:54:91:c0:17:d4:b5:11:f8:29:ad:7e:a9:
d1:d3:14:de:ea:84:61:33:dd:e4:6f:a6:45:26:34:
d8:81:95:66:70:62:e9:b2:01:f1:20:ad:3c:cf:94:
5a:66:67:a3:e2:91:62:6e:ac:97:27:27:eb:c0:6b:
65:44:96:3a:2a:5f:8f:65:19:a4:65:60:3e:84:63:
9c:8d:ff:3b:e4:25:75:6b:dd:e5:52:d8:cb:1a:66:
59:e2:cf:10:51:91:3a:d7:9f:78:93:0d:4a:8a:fe:
5e:3d:66:2f:e3:4f:9a:4a:ed:f9:92:a2:c5:95:88:
19:6b:c2:68:9f:1a:92:47:a3:46:3b:73:ae:85:9d:
83:00:1e:5c:b3:94:a2:2d:ea:ed:1c:48:bc:dd:6b:
28:e8:ba:7c:c4:66:dd:8e:b0:07:e8:26:44:d2:a5:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5C:96:E6:30:EE:35:C0:87:35:B5:12:DB:FD:93:44:6F:20:5C:B7
X509v3 Authority Key Identifier:
keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:03:73:20:a6:52:c5:4b:cd:de:ad:9c:c4:47:9c:29:d3:a5:
9c:cb:b0:b7:ef:d5:a0:80:8b:ad:7e:bb:b5:2f:5b:c2:fe:9b:
55:f8:1b:68:12:d9:4f:29:d4:17:ee:4c:09:eb:74:7b:f5:d6:
79:3b:ce:df:1a:65:4b:07:56:a1:65:3a:1a:dc:cb:9b:7f:c4:
27:71:82:41:0d:46:c0:fa:97:10:e5:e8:b1:0a:3e:b1:b0:02:
07:d6:82:d2:16:ff:a8:d4:aa:69:d8:e1:00:93:64:11:56:7d:
b0:c2:40:10:d8:c4:c1:38:64:ef:3d:78:e4:01:29:23:26:93:
cb:fa:85:e2:05:cd:1c:f6:55:23:88:ab:91:eb:46:92:55:d0:
f8:b5:09:af:44:b5:36:fb:c9:4f:a7:85:07:52:88:4e:62:ea:
ac:0d:5c:83:ae:3f:80:22:a1:cf:8b:d7:a8:e6:05:76:b6:24:
f6:5e:db:45:f7:b5:01:6e:31:f0:d9:14:cd:b9:51:eb:1d:34:
12:8e:0b:ad:4c:a5:74:39:62:e4:cb:53:ce:b7:f7:ba:58:d9:
b6:ab:aa:6c:81:35:61:d2:2b:fe:79:cb:7d:3e:1a:8d:90:68:
2f:27:f1:66:89:47:22:ef:60:6a:f4:00:26:3c:a8:8f:20:fd:
6e:c0:83:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:52 2026 by rpki-client