
$ rpki-client -vvf repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
File: B126A372835801BBB738696C56DCF255D032D42F.mft (raw, json)
Hash identifier: fW4aIqsJav0yAZYXLyXU8BvrWwr4u4cFcD25WViF8wE=
Subject key identifier: AD:16:17:3E:CB:81:3F:FF:E5:68:10:05:E8:F6:E2:4C:2E:40:3D:31
Authority key identifier: B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F
Certificate issuer: /CN=B126A372835801BBB738696C56DCF255D032D42F
Certificate serial: 0F893F477DBD9F7044C5DFC9C09962189F190781
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
Manifest number: 03D2
Signing time: Sat 28 Feb 2026 11:32:05 +0000
Manifest this update: Sat 28 Feb 2026 11:27:05 +0000
Manifest next update: Tue 03 Mar 2026 19:17:05 +0000
Files and hashes: 1: B126A372835801BBB738696C56DCF255D032D42F.crl (hash: BFaCHPQqyLmFRR+pOpk2yxsXIk1i/hmKY1Y37EOyfns=)
2: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: Nmtn3LlfweyxwcAEh/9aYsa4vVfStr8hvIJSQMmS8CI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl
rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 19:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:89:3f:47:7d:bd:9f:70:44:c5:df:c9:c0:99:62:18:9f:19:07:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B126A372835801BBB738696C56DCF255D032D42F
Validity
Not Before: Feb 28 11:27:05 2026 GMT
Not After : Mar 3 19:17:05 2026 GMT
Subject: CN=AD16173ECB813FFFE5681005E8F6E24C2E403D31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:60:5a:63:97:9c:ac:3f:c4:15:02:48:46:90:
5a:3c:f9:b7:6e:50:76:22:4c:9d:e9:ea:29:03:64:
57:bd:01:41:2b:96:1c:71:4f:82:f8:6e:56:d1:38:
59:9f:48:eb:02:60:53:b5:0f:2a:9b:35:c3:27:0e:
42:5a:b3:39:62:83:37:8b:e5:59:e7:c8:cb:25:1b:
34:76:76:b7:d7:fa:17:95:15:bf:1d:e0:11:4a:7f:
37:c4:f4:04:2a:46:7f:66:39:b8:e3:83:9e:1d:bb:
58:34:91:27:b9:0f:8d:23:32:99:04:4b:b3:99:e5:
70:aa:82:b4:a9:fc:26:5f:2e:48:5b:c5:40:a5:b6:
83:ca:7d:c2:77:f7:08:31:5b:4a:ce:16:d0:46:22:
68:e8:4a:7c:94:0c:e5:1b:76:a1:f7:ea:1f:41:72:
7e:66:3a:5e:65:00:38:5f:d2:af:ba:61:3d:8b:04:
60:40:87:4f:3b:5b:fc:34:a6:06:2e:90:a8:4a:dc:
ed:90:ef:09:9d:f6:b5:8f:5f:3c:c0:f3:7d:ff:60:
f6:8d:e9:34:61:e6:96:b5:03:d6:51:db:41:27:b9:
31:f9:9c:e3:3e:93:62:0a:1c:5c:62:9a:5f:6f:9c:
f6:60:eb:f1:2f:3a:52:c2:f6:c8:5f:92:84:6e:a1:
d9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:16:17:3E:CB:81:3F:FF:E5:68:10:05:E8:F6:E2:4C:2E:40:3D:31
X509v3 Authority Key Identifier:
keyid:B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:71:4e:0b:be:57:58:fd:4d:8f:39:52:4c:75:36:07:51:5e:
71:a8:9d:51:b7:cc:4c:d5:73:15:b8:7e:1d:5d:a5:ab:75:6f:
49:e8:00:82:b6:7f:5b:e3:2b:70:07:26:4a:db:5b:31:0e:ca:
81:ca:38:00:72:88:7f:da:a1:76:e0:53:54:59:86:a9:c3:65:
5b:ed:a7:08:2e:46:9b:5f:50:0c:f8:f4:09:95:23:93:b4:97:
e4:50:91:b1:17:52:fa:84:51:4a:ec:94:2e:9a:39:80:ab:9a:
58:db:a7:ba:a6:20:e1:a3:11:72:a7:e1:61:eb:da:de:26:e8:
30:6a:99:76:b1:50:40:2f:2b:9a:14:da:0b:96:a7:0f:c2:5c:
da:eb:4f:b2:73:21:73:7f:87:e1:f2:24:61:23:2b:75:2e:7b:
c0:f5:2d:5e:b9:6b:74:12:60:e7:59:b4:65:05:67:bd:ba:b5:
49:2d:2b:74:ef:0f:34:19:1d:49:49:1f:53:d5:d6:86:55:66:
c9:cf:61:80:a6:20:fc:b2:a9:a2:5e:6b:d6:10:26:50:a6:11:
72:8b:c5:0a:b4:0e:7b:25:91:dd:ee:6f:84:db:9f:72:58:9c:
76:08:b9:9f:72:c8:c8:0b:91:35:9d:0c:5d:03:87:26:41:54:
96:90:67:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:34 2026 by rpki-client