
$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json)
Hash identifier: wDSlRBftB/xH2LpedKITaQd7k/oUGMag+jMuRde3bxs=
Subject key identifier: 1E:EB:C9:BF:E7:3E:E9:D0:18:76:9D:F4:1C:CF:8C:90:E8:C4:A2:35
Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB
Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB
Certificate serial: 139416EE39FB25C2B8D7B4B38F34112C7BC5C19C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
Manifest number: 02B2
Signing time: Sat 28 Feb 2026 00:11:42 +0000
Manifest this update: Sat 28 Feb 2026 00:06:42 +0000
Manifest next update: Tue 03 Mar 2026 08:06:42 +0000
Files and hashes: 1: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: RB48u90jCmSAuHMoldHnYtFTtD6Wg83J1LPjvY81Roo=)
2: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: WglNMON1uFXdqdZO+92FBvvihsTNbskJIYYFQnplXHc=)
3: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: yVV5dswPF/JJinXwT/AnHMY4w0AFsBRTFOmucBW2KiU=)
4: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: csPdkdJcUUCAtCT9DXQEOSSDc2dcYO076Q+UqLNYO0k=)
5: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: xBq4u83ia6TOjUP4DGj4goi5YscW5lbRAoeEejloPEM=)
6: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: Oqn/4hUIUai1+mMhRgpHuJU5fSEKD5vusBmxtK4Q6/8=)
7: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: 1xj2l1iw+yAigEZVfk6qr5RUAjnT+Wu5eRzm3bKESvg=)
8: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: Zz17TQa2NJzEsR1WGPakO7j3yFYvZxiFyfeaOkhhBlE=)
9: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 8wTO/tBBvlV50rqLL/FsgrieuqraT8M5ri1ZF8sxwQY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl
rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 08:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:94:16:ee:39:fb:25:c2:b8:d7:b4:b3:8f:34:11:2c:7b:c5:c1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB
Validity
Not Before: Feb 28 00:06:42 2026 GMT
Not After : Mar 3 08:06:42 2026 GMT
Subject: CN=1EEBC9BFE73EE9D018769DF41CCF8C90E8C4A235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:f6:97:be:ab:c0:98:55:e2:c9:b9:b9:9c:
05:51:87:96:0d:83:1a:93:c0:c1:c4:66:be:32:fa:
b5:60:71:28:8a:6c:e3:d3:35:e3:5b:40:4c:d9:10:
5f:34:b0:c9:e4:4e:4e:ac:83:d9:61:fa:b4:06:69:
7a:13:7d:23:33:7a:b8:1f:e0:91:5b:ee:c5:30:77:
84:a7:3b:c8:6a:76:1d:e1:74:22:7b:b5:6e:ce:87:
f5:bb:e5:23:ec:c7:0b:bd:b1:05:06:c3:f0:56:d5:
49:fb:99:1b:a5:2d:7e:a1:c6:14:aa:08:3d:e0:b8:
73:c3:39:e3:b1:c2:fc:4c:76:a9:b0:9b:cc:2f:c8:
f9:08:8c:e4:a5:59:77:09:07:5e:df:11:9e:15:b9:
f0:a8:94:93:aa:5a:46:15:3a:fb:e9:a0:89:f3:f8:
f7:e7:8f:e0:57:84:e2:3a:e8:da:d1:38:92:8d:f0:
02:bb:4d:97:e2:ce:a6:30:cf:de:af:e0:fc:08:bc:
7a:5e:37:2c:88:bf:7f:31:4c:ef:d4:f0:cf:e4:e9:
90:77:87:6c:e8:94:1f:f4:09:b2:88:60:10:f2:45:
2b:20:28:05:72:89:ef:db:c1:b9:25:d6:78:e1:a7:
c5:0e:fe:5e:80:65:d6:d8:61:56:a6:04:83:70:a8:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EB:C9:BF:E7:3E:E9:D0:18:76:9D:F4:1C:CF:8C:90:E8:C4:A2:35
X509v3 Authority Key Identifier:
keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b6:da:84:72:6c:a1:35:25:69:5d:fb:41:9f:ec:5b:fe:f9:
bd:59:fe:55:ef:6e:b1:86:d0:15:e0:f9:c9:b2:03:76:76:4d:
9e:65:04:e5:cc:0a:2d:30:41:6b:ad:76:68:b4:bb:4f:98:5a:
ca:b7:d4:9d:2d:df:55:a9:a7:75:21:cd:44:4f:22:f7:60:a0:
05:c9:4c:0e:f9:0e:22:b5:f1:a8:cb:d6:c1:9f:48:c2:b6:96:
fd:df:3e:fc:4f:d0:0c:a9:91:41:5c:71:98:f5:ca:4c:69:87:
eb:ef:8c:b9:d6:ad:c1:5d:32:8b:2b:7d:40:20:34:13:7e:29:
85:28:3a:0a:55:c3:90:6e:a4:85:2d:e4:c4:0f:46:9e:2a:46:
1d:c4:a6:20:88:5a:73:af:2e:e4:41:be:02:7c:8c:29:57:01:
48:39:a9:8d:df:6b:71:05:2d:e5:74:1d:2a:1a:44:7b:35:5e:
ee:a4:ca:45:52:69:21:c7:d4:f4:3d:6e:30:e2:be:1b:5d:a1:
66:02:6b:6c:96:22:81:ff:f8:6f:29:6c:77:78:6c:92:c3:fb:
23:2c:e2:58:33:6f:23:4c:0f:71:16:51:b5:e6:a9:7e:1a:6e:
36:52:d1:1b:ee:36:c8:46:83:d2:bc:65:1c:7d:c0:ec:3d:3c:
bd:0d:e8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:14:44 2026 by rpki-client