
$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft
File: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft (raw, json)
Hash identifier: 8h3Vnjvu9UGdiVMiFB9jZ1YezVHx2KQS8EtaIc1R2BQ=
Subject key identifier: 78:28:95:A0:42:77:3A:B4:69:8A:20:65:20:15:A8:1D:9D:73:21:9C
Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81
Certificate issuer: /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981
Certificate serial: 5391DD7DBCAB2461F864580410C885CE91713CD6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft
Manifest number: 0537
Signing time: Sat 28 Feb 2026 16:52:26 +0000
Manifest this update: Sat 28 Feb 2026 16:47:26 +0000
Manifest next update: Tue 03 Mar 2026 22:01:26 +0000
Files and hashes: 1: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl (hash: 85f1XMDChVYbuboBwseqX4mMB6h1znTXgLGrhERsbcY=)
2: 3130332e3134362e3230322e302f32332d3234203d3e20313336303532.roa (hash: 3qk3I2sPJGrqwIZSGGvefDpSgj0jalLHjTWubW6XWCI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl
rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:91:dd:7d:bc:ab:24:61:f8:64:58:04:10:c8:85:ce:91:71:3c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981
Validity
Not Before: Feb 28 16:47:26 2026 GMT
Not After : Mar 3 22:01:26 2026 GMT
Subject: CN=782895A042773AB4698A20652015A81D9D73219C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:2b:be:47:60:49:f1:12:04:96:dc:18:c2:
73:0e:a8:e7:c9:29:1a:d8:bf:c4:8d:b8:2a:fc:13:
db:19:4c:5a:7c:66:ab:86:e8:05:c1:77:3f:8b:eb:
2d:13:e5:53:c9:76:b4:77:94:0e:cf:63:e2:0e:ad:
da:ab:f4:c9:41:1c:30:5a:b8:6a:59:71:c3:99:99:
e6:8a:cd:a7:ab:27:20:a7:b4:b3:7e:39:1d:a7:db:
a1:82:00:44:d5:d0:24:4d:71:d4:4e:cb:a0:c7:6d:
0a:3a:f7:d2:90:02:e3:cc:01:08:c6:55:69:ec:69:
e7:00:f8:2b:63:0f:06:84:7c:00:ea:a5:a2:d1:b3:
dc:2d:c0:76:80:2d:82:80:43:03:81:1d:66:7c:ce:
3f:8b:29:53:55:c7:27:23:4a:5a:e2:2c:bf:b7:37:
d6:b4:8b:11:8b:9a:5e:c4:7e:93:f9:cb:6b:2b:54:
ec:b2:f8:27:ed:e3:ba:78:f6:47:14:72:66:2c:0e:
90:3d:fc:e4:d0:ea:5f:2f:83:04:07:21:ac:5d:25:
b9:8e:ce:2c:e5:60:ae:9b:6e:74:b3:8c:27:c3:67:
25:58:95:bb:c0:f3:ab:ba:04:cc:3b:99:7b:5d:be:
97:17:16:7f:dd:ee:22:8c:dd:d9:fd:8e:9b:55:14:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:28:95:A0:42:77:3A:B4:69:8A:20:65:20:15:A8:1D:9D:73:21:9C
X509v3 Authority Key Identifier:
keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:eb:a6:6b:34:bf:b1:8d:bf:7e:54:a2:cb:ca:ff:0e:d8:f5:
41:6b:e2:bb:64:f8:c7:10:b1:a0:84:c3:26:dc:da:77:d4:10:
5f:ac:7e:24:d5:d3:ea:fa:53:6d:7a:6f:94:be:37:ec:8e:1d:
3a:7c:22:7a:98:24:3f:bf:9e:44:a6:a4:2d:42:d4:d4:6d:31:
6d:e3:5e:34:d2:22:21:11:ea:f1:51:10:99:61:e4:e9:c4:78:
2a:a8:88:22:6a:25:17:dc:00:f9:d1:4c:fb:e3:45:d3:45:07:
49:fd:ae:62:c3:18:ae:8a:0d:25:cd:cd:b1:6e:29:34:8a:17:
8d:bc:83:03:27:cf:f9:ba:79:d4:7c:e9:0a:ad:93:31:91:63:
93:dc:68:1d:05:d6:03:5a:30:91:2c:f9:6d:3d:38:78:78:d2:
9b:30:89:65:50:3f:3f:40:49:0c:ca:96:7d:c1:bc:b5:f3:58:
68:e7:f2:36:5c:c9:40:1c:95:6e:6c:a5:d5:c7:10:64:ec:db:
09:0d:b7:f2:d2:3d:ae:d8:18:df:a7:bf:91:f2:38:60:99:a7:
77:8d:c8:ac:b2:6e:dd:10:b9:78:28:8d:8d:9f:d2:2a:b5:0c:
24:14:79:2c:b1:f3:03:94:af:9a:69:1a:34:07:46:ef:ce:02:
d0:a2:1a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:07 2026 by rpki-client