
$ rpki-client -vvf repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft
File: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft (raw, json)
Hash identifier: 8IemsGk6nTQ61Wb1gzOWlWb60XhreFA4LozaUMBhFps=
Subject key identifier: 40:82:37:9F:BE:33:44:A3:0E:6C:C4:0D:9F:E1:64:30:F3:76:99:62
Authority key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16
Certificate issuer: /CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16
Certificate serial: 0F808FA6FDB0AE2623B77B8FBDAEF934EFB03BA6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft
Manifest number: 0550
Signing time: Sat 28 Feb 2026 10:11:50 +0000
Manifest this update: Sat 28 Feb 2026 10:06:50 +0000
Manifest next update: Tue 03 Mar 2026 20:07:50 +0000
Files and hashes: 1: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: O/T9Xztwa1eZpftLg0Xl5KOsLOQM47dFO4VcGsJ1wDg=)
2: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: J9nhXOhW6jatN3t2cMwD6dQ3cCJrOL1soCUmU7Ehehg=)
3: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl (hash: GFFXxjP+Lka8y9gXeBqmTQ7s18gxQsOAUwdjYSxmmKs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl
rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 20:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:80:8f:a6:fd:b0:ae:26:23:b7:7b:8f:bd:ae:f9:34:ef:b0:3b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16
Validity
Not Before: Feb 28 10:06:50 2026 GMT
Not After : Mar 3 20:07:50 2026 GMT
Subject: CN=4082379FBE3344A30E6CC40D9FE16430F3769962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:2d:53:26:d9:6a:af:d2:82:16:d4:89:eb:
b5:b1:d9:ed:49:32:f8:1e:2c:db:48:0e:82:fa:50:
51:95:60:78:26:e5:4b:fd:8c:b6:46:ab:11:cc:9c:
84:14:16:84:86:a6:6f:ce:44:7d:dc:00:8c:9b:f2:
3c:ad:3a:0d:0d:f8:dd:6b:0f:a6:bc:fd:bc:83:e8:
08:5f:c8:b0:cf:00:4e:21:79:f5:54:56:9a:3b:bd:
a6:bc:71:92:f9:a4:26:e0:72:60:e0:7b:0a:00:ac:
1d:1e:52:a9:de:1b:b9:dc:4d:43:5f:8e:53:7d:20:
41:69:e0:38:a8:73:99:e7:ca:13:6a:79:e2:d9:a6:
e6:0c:a5:75:13:b7:51:61:5d:9b:10:52:88:b1:90:
2c:f6:08:ce:c4:cd:73:3b:41:a0:84:37:db:d5:43:
ca:07:67:25:7c:75:30:fb:a7:3e:ae:78:af:fc:e2:
a6:2a:c3:51:f5:ba:4a:fb:37:07:ec:ef:dc:a8:e1:
19:a3:3a:1d:8d:8d:60:18:f6:bf:3a:fa:f9:df:9c:
00:c0:e0:90:b3:8a:e3:f0:60:91:94:e3:5a:f4:c2:
5e:a1:96:2f:a4:cb:57:9d:ce:63:67:29:88:b5:fe:
64:cd:64:2e:0f:97:5f:82:95:d8:64:d6:40:c0:2f:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:82:37:9F:BE:33:44:A3:0E:6C:C4:0D:9F:E1:64:30:F3:76:99:62
X509v3 Authority Key Identifier:
keyid:B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d0:d9:56:58:78:99:11:51:29:23:24:e2:02:2f:4b:86:ca:
a7:e7:0a:03:a6:39:0b:d2:ef:e7:68:71:1f:fb:9c:f6:4b:c6:
27:e3:f2:a2:b2:ef:fa:fb:0a:2c:73:0b:02:a2:17:83:a7:92:
ea:bf:0c:ad:a9:4c:05:3c:8d:b6:7d:14:6d:cd:59:3b:5b:dc:
b7:4d:be:a4:fa:63:ba:4f:29:3b:16:b4:e6:d2:84:01:29:17:
9a:85:b3:64:70:29:af:08:4f:de:c9:d6:b6:44:3b:55:d2:af:
46:3d:39:ac:6b:dc:8f:37:88:ca:b1:9e:64:fe:53:32:a3:f0:
28:5b:98:c2:99:4a:19:b7:79:e8:90:63:e2:89:00:fe:d0:77:
89:27:39:e5:be:de:b1:f0:bb:c4:88:82:d1:9d:2e:36:5a:cf:
67:3d:46:16:15:a8:36:32:aa:26:6c:eb:81:1d:35:7d:12:40:
cb:42:0c:ce:5a:b2:71:bb:6e:04:f7:9d:74:45:df:37:da:3e:
31:b7:c1:2f:46:b7:dc:8b:ef:8e:4a:01:43:9e:82:17:f5:63:
12:5c:ff:50:b0:be:ad:15:4d:87:c8:1e:8f:9f:47:06:c6:c1:
da:6d:74:33:1f:83:f2:75:06:2b:77:15:3c:d5:1b:88:21:57:
84:cb:a8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:56 2026 by rpki-client