
$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft
File: B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft (raw, json)
Hash identifier: yR/sZ1stSa41V2rMauxt2ZLqz5hp7Sryi6vbORdZUCc=
Subject key identifier: 30:6B:7E:5B:52:E3:9F:2E:8F:17:2B:D7:AD:23:2D:9F:83:BB:51:E8
Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0
Certificate issuer: /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0
Certificate serial: 5CBB6202D4042F966FDEEE7785D12A0429524369
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft
Manifest number: 055C
Signing time: Tue 24 Mar 2026 02:01:16 +0000
Manifest this update: Tue 24 Mar 2026 01:56:16 +0000
Manifest next update: Fri 27 Mar 2026 08:47:16 +0000
Files and hashes: 1: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: nDJsXQF4hqhJpcR0lg3wt+EWX7mJLFJQ/flot1hEV/U=)
2: B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl (hash: 3MD5qzOac3rvttXkP/J2CtvGprZWuHwW9AHUqlWpujU=)
3: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: BnRp094CwKD0wwlckS4UWOO+QLVyTBF/UCeVs1CPJ7o=)
4: 323430353a336663303a3a2f33322d3332203d3e20313339343031.roa (hash: nFTgph+YloLgW+6sxuKRYCRq1ouvahd5GZWPN5dkEg0=)
5: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: ToIgM0jAxY4WS16atQIWn5JwGnfQgFyIoACDw/eMgWU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl
rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 08:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:bb:62:02:d4:04:2f:96:6f:de:ee:77:85:d1:2a:04:29:52:43:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0
Validity
Not Before: Mar 24 01:56:16 2026 GMT
Not After : Mar 27 08:47:16 2026 GMT
Subject: CN=306B7E5B52E39F2E8F172BD7AD232D9F83BB51E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:e1:a3:47:62:c3:21:26:db:47:54:ee:9f:
e5:e7:2a:50:ac:e2:9e:46:50:ec:57:b7:ab:11:ae:
58:81:02:98:66:89:ce:7e:63:5a:c2:d2:0e:06:de:
f6:c0:48:f5:93:1b:9b:9a:78:d7:23:6e:f8:e2:ba:
07:32:f3:f7:48:24:96:b0:31:77:63:22:4c:b1:db:
32:20:a6:58:f3:91:7d:6a:bc:3d:00:61:86:97:4f:
ae:a7:d7:9f:36:07:c9:3d:c2:29:e7:c7:d1:bd:25:
93:eb:99:e4:5b:6e:71:48:00:a6:03:fa:a8:11:e4:
dc:3b:35:6b:df:d5:a1:6a:d2:26:bc:a4:43:67:6e:
21:97:a8:61:c0:76:6c:62:3b:46:8f:2c:7a:bb:7d:
30:4a:fb:68:d6:0e:68:7a:c3:9b:17:b2:38:e2:b6:
34:26:99:1e:52:94:3e:fc:2c:fc:ec:ac:93:84:25:
62:fc:4b:b7:3a:36:6c:86:ab:17:e2:2d:12:2b:24:
04:5d:f6:00:75:d2:9b:93:a0:03:b7:84:1a:42:1a:
fb:ae:48:ef:2e:84:84:b6:a3:e3:02:2d:9c:fd:66:
77:b9:f9:ad:ed:ba:db:e9:37:4d:5c:26:7a:c2:be:
9d:cf:a0:8f:f7:da:17:fb:44:8d:a9:63:0b:76:a6:
3b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6B:7E:5B:52:E3:9F:2E:8F:17:2B:D7:AD:23:2D:9F:83:BB:51:E8
X509v3 Authority Key Identifier:
keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3f:ce:7f:62:50:7c:1e:57:28:9c:6e:0d:e5:60:1c:ef:e8:
bf:f9:77:fd:6b:af:fa:cc:cc:70:8f:83:72:f3:dc:d7:2a:8f:
c6:b1:f7:26:e5:29:04:c6:31:0d:25:9c:98:73:11:cf:6c:8f:
0f:5d:7b:7c:4d:04:54:93:6d:d2:fc:79:88:5b:c7:a8:1d:6b:
81:7e:b7:48:68:77:ca:8a:83:8b:2a:b9:86:79:b9:a6:6a:74:
a7:2c:1d:04:cc:de:ee:a3:11:a0:20:60:b2:d2:15:16:ed:b5:
ab:fd:8c:ad:3e:6d:dd:47:4e:30:51:b6:60:06:d2:3b:87:73:
21:24:cc:c0:81:6b:ae:25:44:59:4f:7a:37:ef:0d:4b:ed:90:
0d:26:8a:b1:fb:68:f6:59:1c:3a:4a:cc:73:d2:b4:8a:d4:33:
be:60:2d:e1:79:38:ed:d2:2d:78:26:db:7f:66:1f:13:e3:e2:
11:aa:58:10:d7:e0:f6:45:f3:af:10:41:63:31:0a:23:de:f7:
66:d3:c1:b6:21:ea:87:dd:ec:71:d4:ea:67:15:49:9b:00:a9:
64:81:21:b6:40:2b:53:9e:2f:30:70:17:39:e3:14:87:af:f1:
59:a0:be:a0:33:03:92:96:d9:37:73:fb:39:9c:8d:fc:79:7c:
31:d3:3f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:25:45 2026 by rpki-client