
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft
File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.mft (raw, json)
Hash identifier: 1Hvp9XNe9NTZDG5yicYgBNGLHh9c/3RLZLuA1hRmwtA=
Subject key identifier: B9:1A:02:5F:DC:8C:78:23:06:D2:09:35:A8:74:64:E3:67:26:C4:F9
Authority key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79
Certificate issuer: /CN=3B276288FD701E3EC497C2BCC17831BA188BAF79
Certificate serial: 180929A57F946172386E2CC12A763DF3B5A32D61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft
Manifest number: 0261
Signing time: Sun 01 Mar 2026 19:32:24 +0000
Manifest this update: Sun 01 Mar 2026 19:27:24 +0000
Manifest next update: Wed 04 Mar 2026 22:08:24 +0000
Files and hashes: 1: 3130332e3138312e3133392e302f32342d3234203d3e20313439333833.roa (hash: oQF2g29fJ1rphB8ZnKarTHkHJW/AbS8xJ9Z8slQV/e4=)
2: 3130332e3138312e3133382e302f32342d3234203d3e20313439333833.roa (hash: sheURZ1JlOCQlhALUs8LQPX0wKHQXpBd6sjNcfxqeow=)
3: 3B276288FD701E3EC497C2BCC17831BA188BAF79.crl (hash: rFTo6osEesOAruSjBB0ZCtXB+mxZL9DzJY6zmWL9ZtI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl
rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 22:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:09:29:a5:7f:94:61:72:38:6e:2c:c1:2a:76:3d:f3:b5:a3:2d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79
Validity
Not Before: Mar 1 19:27:24 2026 GMT
Not After : Mar 4 22:08:24 2026 GMT
Subject: CN=B91A025FDC8C782306D20935A87464E36726C4F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:50:b5:b0:24:7e:0d:99:18:e1:d9:7f:f1:
2f:9e:f8:28:cd:19:35:b9:59:15:05:2e:3d:df:00:
10:13:e3:87:a7:87:0e:97:7a:2a:b2:80:f2:41:ee:
9b:e6:a4:6a:74:c2:f7:3e:bb:03:8a:da:fb:0c:5b:
ff:20:13:49:40:45:f2:ab:be:46:70:56:42:35:c8:
e8:fc:f7:4a:8a:f6:41:f4:9b:df:1a:57:71:e7:d4:
c7:1b:30:7f:0e:7d:f3:3f:ea:42:38:00:a8:42:42:
81:ed:1c:bc:a1:5e:2f:70:b9:a9:fc:10:6d:d7:26:
36:d6:38:6f:c1:c8:38:5a:90:17:9e:53:02:57:c8:
b4:50:ed:68:2e:0a:3d:b8:76:cb:fd:de:87:05:39:
58:ae:4c:92:94:58:0a:ed:93:c0:6b:27:89:8f:b0:
03:de:a2:f8:da:5c:b2:cf:e1:78:ee:c8:2f:ae:4f:
40:6d:a8:7a:45:f0:3c:17:6b:36:7d:90:b1:fa:2d:
e2:f1:98:a6:56:d2:ec:7a:ba:16:1a:7a:6f:d1:ef:
9b:dc:cd:49:b4:4d:85:96:e8:21:ae:d4:07:3c:43:
27:39:c4:c5:38:82:51:82:2d:fc:eb:40:51:08:df:
e2:7b:b2:96:03:58:64:99:59:c5:1a:2f:7b:f8:24:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1A:02:5F:DC:8C:78:23:06:D2:09:35:A8:74:64:E3:67:26:C4:F9
X509v3 Authority Key Identifier:
keyid:3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a8:42:60:34:90:c4:d7:89:d9:72:51:9c:65:28:c6:25:66:
f2:77:92:d7:bf:48:c5:7b:9e:43:fb:19:13:43:9e:ee:a6:62:
64:b6:6f:3f:9c:8d:43:fa:6c:5c:ad:39:4c:79:48:65:05:3e:
ef:5e:fa:1a:72:2a:a3:14:81:b8:e6:54:8d:b6:8d:f3:d8:6f:
2e:8c:d5:ed:76:16:e1:6b:e0:a1:46:44:be:43:99:1e:73:08:
e3:01:d2:88:a0:a8:29:c9:67:4c:74:5d:8b:ca:d8:40:64:75:
fa:db:d6:71:aa:98:76:20:47:fa:34:d2:67:50:23:8f:56:b7:
41:9b:b6:3b:7e:c0:60:fe:19:5b:8e:26:c8:99:d5:28:2f:fe:
5f:20:c0:da:ff:04:15:9b:38:99:6c:3d:94:f2:be:f0:10:d4:
e7:9b:6b:58:67:19:ea:6b:4a:36:36:42:e1:c4:52:b9:18:43:
4f:2d:45:b3:5a:25:82:7d:b7:42:a5:aa:88:33:c4:b6:21:82:
01:d8:4d:c2:fb:98:d0:a7:dd:e0:cf:ef:e7:c9:23:8f:0e:d8:
1c:37:57:54:60:53:fd:b9:6a:47:04:d6:3a:cf:49:26:74:c4:
98:93:12:85:95:02:17:f7:44:5c:91:ea:c6:e7:41:81:5e:a1:
bf:26:c2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:27 2026 by rpki-client