
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft
File: B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft (raw, json)
Hash identifier: 2NLcAC3PthCDK49UJw4s0zgEOmihxHuM4e8AkJ5+SW0=
Subject key identifier: 09:78:C9:B2:01:01:53:FE:82:09:65:3C:33:13:10:C9:27:C0:2B:98
Authority key identifier: B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10
Certificate issuer: /CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910
Certificate serial: 4812FA579F508DACA93A085FC35F1A94F8FF8670
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft
Manifest number: 0183
Signing time: Wed 25 Mar 2026 23:11:35 +0000
Manifest this update: Wed 25 Mar 2026 23:06:35 +0000
Manifest next update: Sun 29 Mar 2026 05:19:35 +0000
Files and hashes: 1: 3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (hash: Lmf9Da9j85YcfNYeEFfKaXIaWC1krFrSr92XELTEqhs=)
2: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (hash: AIJ0j0Aq9CMXFN6w7WVU0mj1+YJAf4nV9FCI3W971zc=)
3: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (hash: 7AeF/hZA331ui0AxYNl+UaJERQ0zt8cfqxeWUU2JfUw=)
4: B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl (hash: ia4GlrpWyt8+cJHGPw5PukeFuBmTo6zbXeqJ2mVoKM0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl
rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 05:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:12:fa:57:9f:50:8d:ac:a9:3a:08:5f:c3:5f:1a:94:f8:ff:86:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910
Validity
Not Before: Mar 25 23:06:35 2026 GMT
Not After : Mar 29 05:19:35 2026 GMT
Subject: CN=0978C9B2010153FE8209653C331310C927C02B98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a8:c5:8a:83:9d:91:b0:19:e3:67:0a:63:e1:
9f:e8:e1:cd:f7:8d:1b:68:f0:c8:5b:85:e0:92:a7:
75:9b:38:6d:3f:e4:1a:04:9c:a0:ca:d9:b9:8d:18:
cf:22:fe:3b:9a:80:48:03:6e:b3:cf:ba:9f:df:fe:
2f:f6:be:4f:a3:21:e4:ce:61:26:6e:d0:03:86:37:
5d:7e:cc:50:9c:11:c1:cf:16:fa:3a:d5:0d:ff:0a:
ad:17:b2:7e:22:e2:d6:5f:78:6e:3b:28:49:7d:a3:
77:d1:b6:cb:b1:36:6e:db:cc:7a:31:8e:29:29:44:
db:b7:3a:42:62:9c:fc:46:94:6c:94:e5:6c:bf:fe:
59:ed:66:97:bb:9e:a3:f5:c3:54:c5:25:da:8c:a7:
75:0e:98:c3:ef:56:d5:a4:66:a9:e2:0d:04:dd:40:
87:68:b5:ee:e4:e2:1e:a4:e5:0b:2e:e9:e6:9c:71:
41:29:ad:f6:d2:58:79:12:35:fc:6d:ab:55:eb:ab:
8d:18:fb:b8:63:ce:d9:e8:a2:31:12:8d:62:b9:fb:
27:4f:ed:f4:ca:6d:ed:87:52:01:91:30:4b:c5:81:
04:e1:42:70:35:c9:eb:b1:ca:31:21:46:f8:04:47:
8b:43:eb:6f:29:bc:7e:55:ff:43:a0:5b:84:62:e1:
e7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:78:C9:B2:01:01:53:FE:82:09:65:3C:33:13:10:C9:27:C0:2B:98
X509v3 Authority Key Identifier:
keyid:B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:77:96:68:be:74:83:5d:81:33:04:56:d3:99:e4:a8:d3:65:
71:b6:18:3c:73:28:02:a1:be:9a:23:d0:ff:18:71:d5:b9:ea:
c2:fb:dc:51:55:7c:46:4e:06:c8:70:e1:87:af:8c:f9:07:87:
ce:d9:c1:58:ae:52:73:b3:95:1e:3a:54:16:af:8e:7e:3a:33:
28:ad:e8:a4:bb:50:5c:d1:94:78:55:c8:cd:9e:32:5b:a5:85:
c8:23:d0:bb:a1:43:49:7b:61:7a:ee:cf:fa:b7:a4:85:b7:d3:
69:eb:94:10:f6:db:d0:f4:e7:f8:86:4e:9e:e8:02:02:a5:de:
31:cb:9e:db:c5:ac:58:95:6c:22:b4:2c:70:be:c9:c5:df:ab:
a0:58:a5:3e:0f:5c:c6:5d:62:71:77:e0:7d:3b:7e:20:52:82:
53:6b:24:84:32:a8:c9:4e:d3:c0:c0:90:24:06:5b:6a:2f:97:
76:77:2b:87:86:41:a3:59:63:fd:7b:00:dd:11:1f:a3:47:51:
e8:4c:1b:16:2b:29:e5:14:e0:60:9b:90:89:92:44:4f:4d:50:
1e:01:97:80:21:0f:8c:fc:71:da:64:86:57:57:83:a7:a8:8b:
a5:58:12:85:21:ab:97:cc:af:00:3e:31:a7:60:b8:e9:37:1c:
08:86:3e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:24:41 2026 by rpki-client