
$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft
File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json)
Hash identifier: +Z0as1y65LDKX8fKNLDyxOhCKMjh+TLzeg2U5YuwvMo=
Subject key identifier: 51:89:6D:BE:FC:B6:CB:C2:6B:D6:B1:D7:58:B6:5F:70:D8:F5:D1:2E
Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC
Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC
Certificate serial: 713777299FC92F9A39374396495DEDDDEE8C754D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft
Manifest number: 0375
Signing time: Sun 01 Mar 2026 00:32:40 +0000
Manifest this update: Sun 01 Mar 2026 00:27:40 +0000
Manifest next update: Wed 04 Mar 2026 04:08:40 +0000
Files and hashes: 1: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: VSwmKbWt2mj/4Xnvw/p95KrSyYtbtzdvXf2hu0E4abA=)
2: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: 3oi6AXzyUonN7K7ESu/wGWhpe7mBt7feti5Iv+RyohQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl
rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 04:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:37:77:29:9f:c9:2f:9a:39:37:43:96:49:5d:ed:dd:ee:8c:75:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC
Validity
Not Before: Mar 1 00:27:40 2026 GMT
Not After : Mar 4 04:08:40 2026 GMT
Subject: CN=51896DBEFCB6CBC26BD6B1D758B65F70D8F5D12E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:a0:3e:06:a2:88:c3:ea:ae:74:67:1b:43:
aa:b7:9f:bb:94:05:e7:94:b3:69:89:bf:4d:fd:55:
39:96:82:6c:cb:e6:2a:ce:f2:e4:35:f3:05:7e:96:
26:28:df:1e:3c:09:04:a1:04:a1:89:1b:cb:e9:fd:
80:82:dc:f6:d8:2c:87:9c:18:e5:7b:54:d7:f7:2d:
ff:f3:ee:c9:d4:5b:9f:57:c6:79:8e:00:b6:0a:5c:
9e:98:5a:c2:75:f9:28:33:72:e5:80:0f:a1:37:01:
dd:fd:49:7a:ac:1f:a3:4d:b5:3e:4c:3b:50:d0:6d:
df:2c:7b:93:56:99:ff:01:a8:05:70:74:46:f9:ee:
70:ea:14:3b:4e:53:ae:9f:7a:c2:a6:4d:82:45:a0:
aa:d6:61:6d:8b:ff:bf:ea:24:d3:6c:29:e1:38:d4:
9e:a4:02:58:31:89:af:13:b7:32:d2:e6:f5:de:6f:
71:a6:d3:e1:7a:d6:9c:6e:f3:bc:1b:d8:d6:95:a2:
36:c3:ea:d7:06:0b:37:3b:26:b8:0f:48:d4:fd:89:
76:96:a2:55:bb:2a:dc:a2:1e:61:29:5e:06:7c:d0:
e0:ed:3e:45:c0:e7:89:d0:7b:43:2f:dd:d6:8e:76:
6c:28:51:f7:de:c4:fd:29:ae:cb:39:d4:f6:d4:8d:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:89:6D:BE:FC:B6:CB:C2:6B:D6:B1:D7:58:B6:5F:70:D8:F5:D1:2E
X509v3 Authority Key Identifier:
keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:f5:0e:5b:34:ce:d8:82:c6:f0:ba:de:d0:c4:de:2e:56:b6:
18:e2:58:71:6c:be:96:19:38:00:42:78:d1:6d:60:ab:e2:29:
14:ba:a3:a3:3b:55:86:9f:fa:27:16:90:ce:02:26:fe:7f:4e:
59:fb:85:b3:1d:64:49:ab:a4:44:4d:c6:41:65:15:4a:63:1c:
4b:91:f6:d1:d4:65:4a:c3:b2:d6:f3:d9:6c:34:4b:65:98:d3:
83:12:db:7c:94:71:df:96:50:dc:66:0f:fb:04:93:f6:9d:8a:
ff:82:6c:35:0b:2b:79:8e:32:b3:b1:c3:32:09:92:d8:86:c0:
f0:40:ff:6e:5d:dd:f1:d6:27:c9:23:b6:3f:22:00:f3:45:c2:
11:39:d0:79:c2:a4:3f:f0:ec:de:3e:e1:99:38:4d:38:d8:99:
fd:e5:c5:36:bc:79:84:10:c1:57:07:29:ca:b3:0f:77:5a:9e:
70:7e:dc:57:ac:ce:7b:85:82:73:55:e0:35:fb:ab:ee:b9:6f:
24:cb:df:8c:da:0e:fc:a7:4f:99:0c:34:73:24:71:53:42:23:
4d:d1:db:b1:96:e6:5c:17:66:80:e6:36:5f:cc:5c:df:be:d6:
be:02:68:2c:ce:c9:b3:09:5a:22:79:09:b0:19:b2:7b:20:6f:
43:53:49:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:23 2026 by rpki-client