
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft
File: 8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft (raw, json)
Hash identifier: v08tCSZNMq9XZuruWov7coxVOkPHk7bE8CgQ2HdwgPM=
Subject key identifier: BB:7F:D1:C6:90:33:7B:66:73:72:A5:53:7D:81:F2:88:A2:B3:4A:9B
Authority key identifier: 81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD
Certificate issuer: /CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD
Certificate serial: 1C2ED31193952537B0EE62DF73536AB96626C749
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft
Manifest number: 025B
Signing time: Thu 26 Mar 2026 04:50:03 +0000
Manifest this update: Thu 26 Mar 2026 04:45:03 +0000
Manifest next update: Sun 29 Mar 2026 07:16:03 +0000
Files and hashes: 1: 34332e3232392e3234382e302f32322d3234203d3e203435373331.roa (hash: 6QYiowaUHr77b6SHtMm/wFHLHsnE4/CHR6s2UKLu4J0=)
2: 323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (hash: 0Va8dfmQpSBmOg74IAPb4RGOIS0UpCgpkBTTVh/iLok=)
3: 3131332e32302e32382e302f32322d3234203d3e203435373331.roa (hash: 4OyDyZeEQND65aawqOInlxqrAJlZe0Z4Rsi7/2+kKVI=)
4: 3130332e362e35322e302f32322d3234203d3e203435373331.roa (hash: 6tOL4hJTfKy0QTohf2XnIaRbJ/5EvxeyWw/OGANzGm8=)
5: 3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa (hash: HxGB/bUslsxHfeCfoct3SORx0s0Y1RxTBE2WHAbQK5w=)
6: 8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl (hash: ZmHI/BcnQq8T3Vj3tN4oW9ggPfeTpFhuDQAd2HwJ/HE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl
rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 07:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:2e:d3:11:93:95:25:37:b0:ee:62:df:73:53:6a:b9:66:26:c7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD
Validity
Not Before: Mar 26 04:45:03 2026 GMT
Not After : Mar 29 07:16:03 2026 GMT
Subject: CN=BB7FD1C690337B667372A5537D81F288A2B34A9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:a1:ef:a9:31:b4:02:79:82:b1:1b:42:66:
58:7f:8a:21:ae:91:9d:bb:af:b3:7b:49:98:d9:db:
47:44:60:c8:fe:8e:07:85:82:9e:3d:9a:36:22:39:
5b:61:ad:f7:cf:c3:49:71:84:65:cb:34:b6:8e:10:
47:46:ca:69:da:a7:86:c7:1e:0a:ae:95:20:d8:0c:
ae:85:2e:ca:93:9b:5a:a0:62:a4:5d:12:be:50:37:
ba:c3:3f:72:dd:94:3b:49:72:7a:aa:78:cb:0e:bb:
26:1c:11:84:84:2e:1a:3a:1f:20:bf:dc:fb:d5:83:
9f:93:65:d3:b7:20:c7:b2:9e:64:1f:cc:c0:14:8c:
e8:3b:d8:6d:75:d0:93:c3:d5:28:f2:7f:ca:32:6d:
24:ec:1b:bb:0d:6d:eb:ef:1b:d5:8f:a1:01:04:f0:
0b:ff:6a:d2:cd:33:a3:34:ba:ba:ec:d9:ad:2f:d6:
0d:e6:10:34:59:36:de:70:57:02:57:39:54:78:e3:
c4:33:92:5a:85:e0:00:7a:d4:9d:92:a6:d1:c9:11:
63:60:75:5f:f3:b4:db:84:b0:41:c8:42:ee:ac:72:
1f:14:11:fa:d6:0c:9d:f4:2c:1c:26:95:b0:41:55:
48:33:bb:2a:31:64:c9:15:72:4f:61:58:bf:59:ee:
b8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7F:D1:C6:90:33:7B:66:73:72:A5:53:7D:81:F2:88:A2:B3:4A:9B
X509v3 Authority Key Identifier:
keyid:81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0e:61:3a:70:0d:7b:f8:1b:7b:48:e5:12:b2:ef:af:17:f1:
e5:d3:bd:35:53:72:d7:d8:9b:41:32:c2:3c:c2:b2:4e:41:56:
f0:02:95:9f:6f:a0:de:9b:28:e5:da:43:eb:4f:ee:67:a1:97:
3a:fe:48:15:07:3e:e1:92:9d:3b:87:c2:9a:be:42:03:9e:b7:
b1:69:39:fa:18:4f:42:e1:19:24:7a:c5:23:c7:3f:76:d0:4b:
98:4f:34:cb:e3:19:f2:92:77:b5:07:59:b3:98:0b:1f:c1:49:
da:8b:0c:05:95:75:dd:dc:c2:8c:d3:c8:dd:0b:0b:fb:a8:6a:
84:55:30:c6:e8:97:6a:21:5b:2b:a0:2c:10:82:95:83:d9:ef:
a0:dd:8b:e3:f7:96:d8:9e:e8:dc:b6:fe:a4:2d:88:8d:ba:6e:
1c:20:fb:c8:c3:83:8e:84:90:03:ec:d4:26:11:7c:75:2c:f8:
b6:02:06:7f:48:b2:26:72:d3:a0:19:38:da:17:a7:d3:40:9d:
f7:f7:4f:7d:81:13:ad:ef:e8:5f:a9:03:a2:f2:27:79:ad:13:
a1:49:67:9a:0e:00:00:40:12:b1:55:99:52:27:be:c0:9c:df:
b0:a8:4f:b3:2e:b5:6c:df:57:2c:2f:55:ec:ff:d9:6b:4a:7b:
1a:05:e9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:00:43 2026 by rpki-client