
$ rpki-client -vvf repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft
File: B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft (raw, json)
Hash identifier: ZBi+T7+QT2BARxZBgCucdEjmLwojoeUJVBf8S6g3s/k=
Subject key identifier: 3B:E3:2B:96:A4:CA:64:E5:95:E7:C2:F2:3C:8C:0F:B3:8F:D0:AB:6C
Authority key identifier: B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E
Certificate issuer: /CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E
Certificate serial: 31DDEA4CA054327DE591750E932470F8CE81B55F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft
Manifest number: 035C
Signing time: Tue 24 Mar 2026 10:52:08 +0000
Manifest this update: Tue 24 Mar 2026 10:47:08 +0000
Manifest next update: Fri 27 Mar 2026 17:09:08 +0000
Files and hashes: 1: 3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa (hash: g0qXlise9HaMFGbsno6S9nxOreCjvNtFTp/h65NgFw8=)
2: B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl (hash: 1NldGWu2w9JD/skR3/I53gJXyghSQB7jHI9nDdbtIgo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl
rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 17:09:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:dd:ea:4c:a0:54:32:7d:e5:91:75:0e:93:24:70:f8:ce:81:b5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E
Validity
Not Before: Mar 24 10:47:08 2026 GMT
Not After : Mar 27 17:09:08 2026 GMT
Subject: CN=3BE32B96A4CA64E595E7C2F23C8C0FB38FD0AB6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:96:87:6c:af:ad:d9:96:48:ef:15:f6:1d:
e5:ee:fa:d1:d2:09:e5:3a:15:b5:2f:a0:17:aa:e7:
2b:35:8a:95:4b:80:1f:f1:1c:f4:4e:82:28:f9:6e:
19:29:bc:1b:9f:de:12:c2:e6:54:b4:fb:83:10:bf:
27:09:82:c2:9e:b9:c2:5d:8a:d6:14:8f:3b:3a:33:
b8:83:6d:d6:1e:07:9a:b9:33:39:e9:29:47:7f:d2:
7b:d9:7f:78:29:a3:e0:40:08:39:77:81:e5:d7:ef:
eb:66:dc:8c:12:62:7e:c7:be:da:b9:d3:9c:45:ad:
90:51:e1:2a:c1:1f:8f:89:9c:1f:9b:c4:e9:9d:99:
2e:7f:29:73:75:73:d5:d3:a2:74:84:c9:b5:5a:36:
f3:1c:3e:c1:eb:7a:72:40:b7:08:00:cb:f3:e4:ee:
8b:e7:ef:ab:91:49:e5:89:e5:a7:c2:45:2a:e1:d8:
e8:1a:ec:54:cf:4d:55:b0:b1:fd:c0:3d:50:b3:a4:
cf:bd:62:6b:34:8e:bf:2a:cd:06:9c:e7:a4:f2:c6:
92:69:7e:09:7e:4b:e6:37:7d:d0:30:e2:24:7a:6c:
f2:0c:3e:7f:71:0d:8b:4e:a8:93:a0:f6:c2:27:02:
31:3d:20:92:2f:34:93:9e:1f:95:d1:3c:b4:72:94:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E3:2B:96:A4:CA:64:E5:95:E7:C2:F2:3C:8C:0F:B3:8F:D0:AB:6C
X509v3 Authority Key Identifier:
keyid:B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:90:80:c7:43:5f:53:85:63:2d:d2:d9:31:20:9c:7e:ed:07:
a4:9a:15:85:d6:5d:ce:97:1a:05:a9:57:46:cd:7a:8e:b0:87:
08:ca:cb:77:db:1e:7c:ed:9d:dd:af:11:a4:ee:8e:5d:fa:19:
0c:13:66:b4:f2:1e:ae:f2:9c:b7:5d:02:7d:ba:2d:12:fd:ba:
be:c6:ba:3a:72:06:c5:78:73:96:a7:2b:6d:f0:0b:47:20:b5:
90:d2:44:8f:c3:ab:47:ec:0f:91:25:e7:c6:c9:53:01:93:62:
f3:f9:78:7f:a2:c9:83:f3:d2:1b:b3:59:24:b3:25:d6:9c:bb:
83:c5:48:f4:85:d3:48:82:c1:41:04:d7:e5:f4:2f:ca:ed:da:
96:4a:e9:94:9c:f4:3f:63:bf:7c:3a:01:36:68:81:38:28:e8:
80:55:d1:17:29:4c:a5:6b:c9:8d:16:3a:da:4d:39:53:af:41:
39:70:3e:2b:6d:d9:63:9e:0a:89:36:0b:7c:7e:d6:d1:23:cc:
b6:ea:bb:db:36:da:3c:95:54:04:27:10:c4:1e:59:a9:d7:90:
1d:f2:71:32:e1:56:97:cc:04:83:47:2c:b9:b1:56:31:8f:26:
c4:e2:80:15:d6:a7:b9:bd:57:5b:8d:48:0b:b0:8c:a1:bf:0e:
f6:e4:cc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:58:34 2026 by rpki-client