
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft
File: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft (raw, json)
Hash identifier: 4wz8kMpsfuvglvSO11Eva7tp7KWEVBa/yJelVdDpo9c=
Subject key identifier: 23:34:CC:39:16:7C:D4:2F:3B:C7:3E:F6:98:EF:0E:14:5B:C5:D6:40
Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6
Certificate issuer: /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
Certificate serial: 763785BE670C3A10883545613B64BAE7717245BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft
Manifest number: 02B9
Signing time: Sun 01 Mar 2026 08:30:51 +0000
Manifest this update: Sun 01 Mar 2026 08:25:51 +0000
Manifest next update: Wed 04 Mar 2026 19:46:51 +0000
Files and hashes: 1: CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl (hash: Z5MXcyIyFbNHT1SyXMKrXTYfR8BvxWR2LubPdxBR6Jc=)
2: 3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa (hash: kunQ1kMqm5dCsvOsI1+HGGCtiZ5NKsilDdmi0e2JkQE=)
3: 3130332e3130382e3234302e302f32322d3232203d3e20313336383535.roa (hash: 7eJhfA1U72MfmI6Gl9X8Bc7KFQEL+NhfB3ZqMIqrEaA=)
4: 3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa (hash: 3PkfuBqgUsXvYP/cBasxl1kYosVT98po9pZBDusnWb4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl
rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 19:46:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:37:85:be:67:0c:3a:10:88:35:45:61:3b:64:ba:e7:71:72:45:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
Validity
Not Before: Mar 1 08:25:51 2026 GMT
Not After : Mar 4 19:46:51 2026 GMT
Subject: CN=2334CC39167CD42F3BC73EF698EF0E145BC5D640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:2b:86:28:c6:89:a9:c9:31:cd:70:99:fc:
83:4b:df:86:a6:f7:05:0b:a0:01:13:ea:fb:e4:13:
b0:a7:f7:05:49:95:89:45:8e:00:09:71:11:b0:d8:
79:a4:38:93:a1:85:3a:7a:d2:08:2a:07:b5:88:6f:
31:1c:2d:ca:96:27:c6:c9:9b:38:85:5c:11:45:25:
88:e3:bd:69:09:4e:a7:ae:5a:9d:b0:94:a2:ad:c5:
2f:e0:ab:5c:5c:ce:7e:65:35:86:40:d2:ca:df:86:
98:5f:d5:30:1d:62:24:08:65:08:a7:00:b2:61:6e:
8e:02:9b:35:75:39:a4:2f:1e:03:a0:70:26:f0:ae:
09:ca:94:a2:d5:d0:26:ab:5b:4e:37:bd:0f:9b:bf:
7b:f9:22:d5:e9:5c:d1:7c:e9:3b:19:cb:0a:33:d2:
87:26:26:bb:39:24:5c:d4:f9:6b:a0:91:d7:a4:4e:
21:0a:9c:f8:97:6e:0d:bc:cf:1a:75:78:a3:20:d0:
7d:2a:69:55:e8:b9:f5:87:25:5a:f3:dc:4a:ad:94:
a6:86:61:69:45:0b:1e:9b:15:e3:11:6d:50:03:57:
2d:5e:c4:b6:5c:dd:0c:ae:7e:9e:fd:02:cd:a7:da:
42:03:af:e9:a6:8e:bf:c5:de:bd:ca:a2:0a:c6:6a:
08:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:34:CC:39:16:7C:D4:2F:3B:C7:3E:F6:98:EF:0E:14:5B:C5:D6:40
X509v3 Authority Key Identifier:
keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:df:32:41:fe:c6:ec:43:a1:a0:5f:2d:6c:3d:1e:07:42:e8:
84:f4:48:80:0c:7d:6c:2a:cc:85:3a:b1:3d:e8:fd:91:1c:b7:
ee:a5:e3:f5:74:12:9c:40:82:6d:50:e1:30:eb:87:9a:2f:89:
0b:6d:1c:cc:34:bf:93:6e:e2:5a:eb:ae:54:27:d6:60:63:4e:
81:4c:62:9d:57:a4:ec:80:7d:1a:9f:bb:1d:de:d5:a4:1e:81:
4a:da:7f:35:a4:5f:96:13:81:a8:6c:50:fa:2e:6d:a3:c6:20:
08:94:88:25:4b:3c:ec:c7:6e:72:25:5c:82:30:19:42:81:a9:
7d:18:3d:50:98:d0:0f:dd:d3:14:36:e9:25:e3:f5:28:08:5f:
2f:c5:ce:2b:20:3e:3b:7d:bb:b4:f5:7c:b2:f7:11:0d:c9:3f:
ce:36:9b:d5:58:6e:12:97:1b:6a:02:5f:a6:e1:77:ae:f7:ad:
82:ea:77:f9:4f:74:fe:d0:78:ec:b1:de:9d:0d:10:c5:14:35:
47:3c:22:10:2d:b0:41:6a:69:da:01:ed:f5:b1:7d:35:72:1f:
b6:c0:ed:0c:0b:ef:18:0e:1e:4c:e5:80:da:96:5c:01:8d:bb:
1a:6d:de:d9:ae:2c:4e:5e:0a:78:0e:c6:97:b1:71:40:4a:11:
99:04:7a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:50:05 2026 by rpki-client