
$ rpki-client -vvf repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft
File: 82FB9CE597D61EC382BA2D63909426959C43F18F.mft (raw, json)
Hash identifier: O0ndNqvk6oZwOG+DBW7ti0Iwi4uYij6Yb8XjgGBED44=
Subject key identifier: 95:8C:88:C6:BD:FF:8D:60:88:03:EB:D8:B1:CE:1A:1F:B2:65:A3:FB
Authority key identifier: 82:FB:9C:E5:97:D6:1E:C3:82:BA:2D:63:90:94:26:95:9C:43:F1:8F
Certificate issuer: /CN=82FB9CE597D61EC382BA2D63909426959C43F18F
Certificate serial: 1D22B2387161AE7735C2CF767029EDCF8C36610A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft
Manifest number: 017C
Signing time: Sun 01 Mar 2026 12:12:39 +0000
Manifest this update: Sun 01 Mar 2026 12:07:39 +0000
Manifest next update: Wed 04 Mar 2026 19:04:39 +0000
Files and hashes: 1: 3130332e372e3130352e302f32342d3234203d3e20313531353933.roa (hash: +Rw2T75m1ati4oVfQCR6RiMANt/qU5P03srE51mQwtg=)
2: 3130332e372e3130342e302f32342d3234203d3e20313531353933.roa (hash: 3uNfdf5OyBJLpmZT75dt2srrC7nbkL5sTgGA5ZUxCD8=)
3: 82FB9CE597D61EC382BA2D63909426959C43F18F.crl (hash: WP+OshHFTKvaoTDLkZ70JWNLNiA9OmOuzKlIEPLvVSE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.crl
rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 19:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:22:b2:38:71:61:ae:77:35:c2:cf:76:70:29:ed:cf:8c:36:61:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82FB9CE597D61EC382BA2D63909426959C43F18F
Validity
Not Before: Mar 1 12:07:39 2026 GMT
Not After : Mar 4 19:04:39 2026 GMT
Subject: CN=958C88C6BDFF8D608803EBD8B1CE1A1FB265A3FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:61:fd:6a:96:bf:05:ed:be:40:af:a4:2f:51:
c7:9e:09:dd:2c:24:59:2e:08:29:91:a7:4f:24:b9:
d5:9a:c4:2c:9a:55:05:b3:77:b8:2b:db:86:74:bc:
6e:58:83:ff:b9:b5:cf:c1:08:ae:cd:6e:74:52:37:
87:ea:6b:94:70:2f:27:b0:f7:24:2d:24:fe:1b:38:
88:5f:2f:7e:a1:4d:cc:37:00:06:13:3b:22:67:07:
62:c5:d3:94:59:05:d1:ee:63:14:37:f5:3f:90:dc:
0c:e4:fa:0d:9f:57:bb:7d:d0:bd:9d:ef:f1:ba:03:
a6:79:ac:81:d5:fb:65:7a:de:c3:42:3b:a0:10:1a:
c4:6c:79:b3:12:28:e8:35:01:81:15:99:46:f4:f2:
32:02:24:ec:32:60:25:2b:02:f4:7b:88:f8:91:08:
22:aa:8c:5f:4a:09:9a:9b:00:8b:70:0c:47:41:2d:
52:34:e6:d4:4f:3b:12:05:2c:88:33:34:c7:80:31:
15:2b:cf:33:99:e8:a7:7d:f4:00:d8:cc:96:68:30:
b4:b0:14:1f:ea:ce:b7:02:c4:84:b6:70:39:8f:7d:
3f:a4:dc:2e:73:58:22:50:ce:77:10:66:de:60:89:
5d:57:79:51:15:ae:1a:5d:ae:40:0a:43:74:0d:c3:
ee:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8C:88:C6:BD:FF:8D:60:88:03:EB:D8:B1:CE:1A:1F:B2:65:A3:FB
X509v3 Authority Key Identifier:
keyid:82:FB:9C:E5:97:D6:1E:C3:82:BA:2D:63:90:94:26:95:9C:43:F1:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8c:c1:77:63:ee:dd:45:75:3d:72:a6:b7:d9:ee:cb:13:12:
06:fc:fe:2b:ad:48:1e:7b:38:83:03:dc:37:f6:9d:d8:4b:76:
40:82:a5:b5:30:64:a7:00:30:1e:7f:10:88:18:c7:a6:2b:0e:
29:c5:16:cd:26:b3:9a:77:d7:f8:56:34:3d:60:4c:16:e1:0a:
ad:dc:97:1d:bd:10:58:cd:60:09:89:f3:f5:34:53:ad:a6:e6:
e0:5d:ff:44:ed:b1:5f:f5:a6:d5:a3:8f:e0:d5:10:f2:41:b9:
cb:c2:9c:5f:ba:ad:e6:06:1b:55:a8:ac:2c:85:65:26:75:9f:
93:a9:6a:b8:4c:8d:ad:24:6e:13:03:93:45:d9:24:06:52:aa:
d0:c3:76:03:17:e5:8b:62:39:8a:54:0a:4f:de:46:0a:f7:a5:
cd:d0:89:a9:b7:d0:44:a0:b3:83:0c:b1:e6:2d:b3:86:37:5e:
79:c7:68:24:d6:a1:73:29:cd:a4:bc:08:44:f2:03:99:fa:65:
2d:84:2a:f4:d2:fa:fd:44:95:30:55:e0:91:3b:32:b1:8f:90:
da:33:a7:f7:ba:07:d8:ea:8f:0c:f9:a7:2a:f2:0a:21:05:b2:
7e:8c:4b:44:ac:46:14:de:d9:15:df:75:47:b1:6d:71:b8:d6:
f8:2e:1e:49
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHSKyOHFhrnc1ws92cCntz4w2YQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJGQjlDRTU5N0Q2MUVDMzgyQkEyRDYzOTA5NDI2OTU5
QzQzRjE4RjAeFw0yNjAzMDExMjA3MzlaFw0yNjAzMDQxOTA0MzlaMDMxMTAvBgNV
BAMTKDk1OEM4OEM2QkRGRjhENjA4ODAzRUJEOEIxQ0UxQTFGQjI2NUEzRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhYf1qlr8F7b5Ar6QvUceeCd0s
JFkuCCmRp08kudWaxCyaVQWzd7gr24Z0vG5Yg/+5tc/BCK7NbnRSN4fqa5RwLyew
9yQtJP4bOIhfL36hTcw3AAYTOyJnB2LF05RZBdHuYxQ39T+Q3Azk+g2fV7t90L2d
7/G6A6Z5rIHV+2V63sNCO6AQGsRsebMSKOg1AYEVmUb08jICJOwyYCUrAvR7iPiR
CCKqjF9KCZqbAItwDEdBLVI05tRPOxIFLIgzNMeAMRUrzzOZ6Kd99ADYzJZoMLSw
FB/qzrcCxIS2cDmPfT+k3C5zWCJQzncQZt5giV1XeVEVrhpdrkAKQ3QNw+6zAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlYyIxr3/jWCIA+vYsc4aH7Jlo/swHwYDVR0j
BBgwFoAUgvuc5ZfWHsOCui1jkJQmlZxD8Y8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NzZjNzgyNS04YjNkLTQ2NmMtYmEwYy05OTU1M2MxZDczZWEvMC84MkZCOUNFNTk3
RDYxRUMzODJCQTJENjM5MDk0MjY5NTlDNDNGMThGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODJGQjlDRTU5N0Q2MUVDMzgyQkEyRDYzOTA5NDI2OTU5QzQz
RjE4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2Yzc4MjUtOGIzZC00NjZjLWJh
MGMtOTk1NTNjMWQ3M2VhLzAvODJGQjlDRTU5N0Q2MUVDMzgyQkEyRDYzOTA5NDI2
OTU5QzQzRjE4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABGMwXdj7t1FdT1yprfZ7ssTEgb8/iutSB57
OIMD3Df2ndhLdkCCpbUwZKcAMB5/EIgYx6YrDinFFs0ms5p31/hWND1gTBbhCq3c
lx29EFjNYAmJ8/U0U62m5uBd/0TtsV/1ptWjj+DVEPJBucvCnF+6reYGG1WorCyF
ZSZ1n5OparhMja0kbhMDk0XZJAZSqtDDdgMX5YtiOYpUCk/eRgr3pc3Qiam30ESg
s4MMseYts4Y3XnnHaCTWoXMpzaS8CETyA5n6ZS2EKvTS+v1ElTBV4JE7MrGPkNoz
p/e6B9jqjwz5pyryCiEFsn6MS0SsRhTe2RXfdUexbXG41vguHkk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:23 2026 by rpki-client