
$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft
File: B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft (raw, json)
Hash identifier: +UeX3Nba5pFl/PL0lySOL3/giuh6V6ZlIgbibrlXAKc=
Subject key identifier: D3:80:FF:B2:6F:B5:50:73:48:1B:F5:24:5C:BB:03:1B:53:21:AF:1C
Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19
Certificate issuer: /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
Certificate serial: 7A1FF128DC0BE3F87875D34B4D28C6E61EB4E83E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft
Manifest number: 01F3
Signing time: Mon 02 Mar 2026 01:21:42 +0000
Manifest this update: Mon 02 Mar 2026 01:16:42 +0000
Manifest next update: Thu 05 Mar 2026 12:45:42 +0000
Files and hashes: 1: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: 8XPZdSOWhiN4sDNWCAz5bAh63j/+nMyIzLXNoiqYe4I=)
2: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: m7KnWwAi9Wa3iEU4N72OuT0qFvC4fal0YR1U67/6bgk=)
3: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: qlt9XTkJ4F0GfOW5becHUk3LV0da9rpuvfoDawVXZZE=)
4: B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl (hash: BVO9ej6C9tFFv+3sPPvZ21PKNpQwqB1WLunv5+HeXQU=)
5: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: dGH13Oomieqd64n8363u8ec1lNW9Om122vPQ7Gk+LN4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl
rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:1f:f1:28:dc:0b:e3:f8:78:75:d3:4b:4d:28:c6:e6:1e:b4:e8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
Validity
Not Before: Mar 2 01:16:42 2026 GMT
Not After : Mar 5 12:45:42 2026 GMT
Subject: CN=D380FFB26FB55073481BF5245CBB031B5321AF1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7f:b1:00:dc:69:23:5d:31:3a:e4:93:cb:b0:
85:b9:ed:31:c4:63:99:0a:09:66:6c:4f:a1:04:d1:
9c:37:72:ba:2f:d7:a5:dd:82:7f:d2:e0:96:7c:e4:
cc:d9:02:ff:70:75:b0:61:64:76:bc:30:a8:0c:24:
34:94:8e:1e:ce:c0:30:09:90:1a:07:fa:a4:73:6b:
33:22:e7:68:fb:fb:1e:2b:a9:41:df:25:b3:b3:d4:
b9:f1:a2:1c:8b:28:3b:e5:e1:72:62:67:55:b5:e0:
90:a5:2d:89:22:62:34:2c:17:d8:b9:cf:2f:2d:53:
75:65:91:f9:47:80:91:50:ea:c0:88:80:9b:f2:b1:
b0:4d:a6:08:7a:7d:be:12:e5:db:11:df:02:86:b4:
39:06:f4:62:45:2f:7f:b6:60:6b:16:df:ea:ed:2e:
e5:f0:a4:e1:2c:27:9d:42:0a:e5:c5:5c:33:cb:50:
67:13:c5:f9:c5:07:5a:e0:c7:de:a2:d6:0c:48:0c:
2e:1a:50:c9:52:e7:bb:a8:a5:da:23:3b:25:a3:8d:
b7:27:da:c7:fa:63:ec:65:d4:ec:8b:ec:ab:8d:44:
64:52:d0:19:a3:23:fc:7b:73:72:f6:5e:9f:fe:b8:
ec:57:31:1f:c5:7b:a4:29:1c:a8:39:4a:14:a8:d5:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:80:FF:B2:6F:B5:50:73:48:1B:F5:24:5C:BB:03:1B:53:21:AF:1C
X509v3 Authority Key Identifier:
keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5f:f9:7f:db:30:d4:57:b7:e5:be:18:f4:67:00:58:68:63:
76:c4:70:17:47:46:81:27:eb:d8:31:79:e1:39:2e:6e:87:4b:
ff:8b:7f:b6:ae:e1:c6:3e:97:24:a4:29:fb:4d:e0:95:56:2e:
b1:a4:54:b3:3d:39:8e:ff:2b:19:00:44:ee:e0:32:e4:5a:ec:
06:c7:8e:82:27:79:c1:aa:ab:b6:1f:37:e0:66:c4:7f:5a:8f:
36:4d:bc:8e:60:01:69:03:d7:76:1e:17:c4:72:72:34:04:3c:
4e:4a:28:c0:76:e8:31:df:01:54:15:44:0f:91:69:cf:99:8a:
99:52:7c:e1:8e:13:da:93:ef:1b:6f:c9:b9:5d:3d:bc:9f:40:
d8:e9:7d:bd:fc:40:44:b3:16:fa:69:44:64:7f:d5:ee:de:8d:
46:9d:15:08:f3:ac:30:f2:d7:a1:ab:18:b4:10:5a:4c:7d:c6:
e7:22:72:a1:7f:8b:52:58:5e:cb:f4:0b:ef:f5:2a:87:8c:29:
cf:11:15:f8:f2:f3:b4:2b:62:34:a2:57:43:99:c3:3f:79:17:
3a:99:bc:b8:d7:1a:ed:9e:86:ad:6b:5d:6a:8d:f7:78:77:30:
ac:7a:9b:98:17:cd:fb:db:fc:9f:fa:f7:bc:ca:5d:f3:b8:45:
48:af:ac:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:52:57 2026 by rpki-client