
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft
File: 82BBF3364DDD646942F4CAE0579F132D84194FE2.mft (raw, json)
Hash identifier: 9E1pigllbR43H3yHKl6QMBjsUeHoYuDBrUPBEJvYwjU=
Subject key identifier: 36:6F:8A:A3:0D:F5:66:DC:6A:23:2F:0F:91:AF:55:8B:DC:9D:B3:20
Authority key identifier: 82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2
Certificate issuer: /CN=82BBF3364DDD646942F4CAE0579F132D84194FE2
Certificate serial: 6E79CF7F6BA5135F276623D90FCD15885AC0E914
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft
Manifest number: 0105
Signing time: Wed 25 Mar 2026 12:21:08 +0000
Manifest this update: Wed 25 Mar 2026 12:16:08 +0000
Manifest next update: Sat 28 Mar 2026 17:02:08 +0000
Files and hashes: 1: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: peJ67ixLv6wOxbNwTzpazMnzEKzYxMtdAI8w89zlkC0=)
2: 82BBF3364DDD646942F4CAE0579F132D84194FE2.crl (hash: +obv7sX0+29ZITlJImgDetS+rx6aC7JxiT9GsbZIsnY=)
3: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: ANxlrE1JSxdjlT4kZZgX9Az8PSjhsbf6pSdaY8P2LXE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl
rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 17:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:79:cf:7f:6b:a5:13:5f:27:66:23:d9:0f:cd:15:88:5a:c0:e9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82BBF3364DDD646942F4CAE0579F132D84194FE2
Validity
Not Before: Mar 25 12:16:08 2026 GMT
Not After : Mar 28 17:02:08 2026 GMT
Subject: CN=366F8AA30DF566DC6A232F0F91AF558BDC9DB320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:97:6f:20:ea:fb:a0:f5:ef:99:e0:73:93:
06:1d:2e:30:ca:a0:f3:65:99:9a:6e:9d:fe:9e:23:
37:6a:a7:b5:6d:d1:77:96:8f:0c:95:d5:7f:9d:0a:
07:27:0f:39:6c:10:c1:55:6f:6a:56:c5:82:81:e1:
72:3b:52:89:ff:29:36:6f:e4:12:86:05:f8:c6:44:
d7:79:3d:17:fc:93:96:0a:bd:e5:fc:41:9a:de:d5:
2f:02:97:a6:56:1d:ff:a5:53:87:8d:d1:01:62:ee:
5b:4e:17:11:a6:50:07:f4:42:3f:a2:48:59:4d:1c:
ac:87:30:22:af:e1:c8:11:9b:c2:b1:fd:9d:08:78:
39:d4:bd:4b:f8:8a:a1:cc:43:e0:82:cd:c0:3d:19:
5c:43:41:54:62:1b:1a:58:8e:21:16:64:8d:99:35:
c5:ff:8c:cc:1c:62:09:01:5a:a4:bb:62:dd:b5:ac:
95:b8:11:3b:d7:a0:00:87:75:dc:a0:f2:e9:5f:a4:
e3:86:2a:68:88:1c:f6:31:3b:87:48:1f:19:e4:09:
c7:36:7f:aa:c3:07:04:52:13:d6:c5:18:3f:4a:9b:
6f:74:55:ee:11:ef:52:92:7d:21:1e:b1:c4:66:3d:
4d:4d:31:bc:3f:28:db:3d:24:08:7d:a6:2a:cd:54:
cb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6F:8A:A3:0D:F5:66:DC:6A:23:2F:0F:91:AF:55:8B:DC:9D:B3:20
X509v3 Authority Key Identifier:
keyid:82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8e:48:7f:4b:0c:22:8b:46:7f:62:ff:81:67:09:24:e2:cd:
41:bb:75:c6:92:fb:80:49:72:dd:f8:93:d5:34:6f:e9:82:cc:
cd:cd:b3:9f:da:e3:47:f0:e7:9b:11:7c:36:bf:c2:d5:6b:c4:
09:0b:73:c1:cb:25:a5:c4:65:0e:29:1f:0b:65:5f:e3:04:14:
45:ca:f5:f4:13:01:bc:51:98:f1:b3:20:b3:56:74:db:54:b0:
fd:83:c8:49:c6:b8:66:80:56:53:90:11:ac:d1:bf:9f:a6:30:
dd:9b:e3:29:dd:ad:b9:e8:3d:cd:e4:18:ff:95:d1:10:38:04:
31:ec:3d:8a:cb:ca:e3:8c:9b:21:9f:13:0a:b9:87:72:6c:48:
ef:a6:22:05:9b:fb:df:96:86:04:23:fb:ba:7b:fc:92:87:07:
f1:91:f9:fc:8b:70:89:ec:5d:98:f4:e5:da:7e:3b:d7:af:43:
ba:03:b5:0a:01:4b:68:fa:a3:f3:2b:7f:4d:fa:73:32:82:bf:
9a:09:45:43:7e:b9:20:45:d0:96:dd:f9:35:6e:9f:67:31:13:
b8:95:76:f4:c4:5d:8c:20:9d:40:b9:1e:c7:f4:28:df:c3:d7:
07:de:69:8c:45:8e:e3:83:8f:75:b2:69:14:56:fe:e7:a3:88:
3a:c1:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:02:24 2026 by rpki-client