
$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
File: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json)
Hash identifier: uF5SKVbTJqqU5EMUg2R6z1qiH0pdWXfFkyazzD4KNQc=
Subject key identifier: 0D:5C:AB:E9:10:D6:64:1F:E8:94:5F:EA:4D:85:23:80:B1:D8:E0:BA
Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Certificate serial: 442572428780B02DA7DF2F590ADC255D54EACEBF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
Manifest number: 01CA
Signing time: Sun 01 Mar 2026 16:41:11 +0000
Manifest this update: Sun 01 Mar 2026 16:36:11 +0000
Manifest next update: Wed 04 Mar 2026 22:39:11 +0000
Files and hashes: 1: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: n2kJmjfaGbSRfn1pQASrz7hUspqtdNSxVZot/XzEk0w=)
2: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: IzPZz6vu3cjWO+ZYwd6eSMpiSKGTjsqFFoCVeTSJVZ8=)
3: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: OfppjjTpXFLmh5Aj/BiOiyknKtfPtzPHg2/eqJ5W1oI=)
4: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: xNJ7kcT79xuTCgJoNY2LlV0p8gctQ3BS6QaupCIi9OQ=)
5: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: sndPJRUlM0bD4PQwWzxnYvvfJ8OtBun9EzQijyPKt9w=)
6: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: wmUZdQN9smMnqKDgMvZP3VM5NikSry3YiZ+HF4rDvwk=)
7: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: ibJZHZEEwuIaueWUBS974XsPSfaJnljHAhKebn2nItk=)
8: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: x8GA7f+9To0zJWTPLU22XKkbJl3cpNPeZ955m1OcAKM=)
9: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: V8HVQOfgmh/cc0nhLeaxvvDoxZedeMVRv4rqy3Nfh7U=)
10: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: 4k9C18S/gej3vBFzU0qeNrYGkLmZVXuYXMm+WSQ8DFw=)
11: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: r7mX7DIOfxP1tvfX/0nO3uk5UJScpK1uxXF4s8uBd2k=)
12: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: SrvCxxwtOAUSUTutTIMfTF6gsLrsVsYaxkHmFerjnWI=)
13: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: 4fKehzLVKMt4BtIz5yX0ZNeUtM2OU5RTZbzjb0CfeGg=)
14: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: hqbmI1+UoUPoz5aHKEefU2aqzgzzxdPZgTYT+n6aATQ=)
15: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: B1+mJ2NWxCErJO3eSkTT+IRh+1v8gS/UXtodN0rllAY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 22:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:25:72:42:87:80:b0:2d:a7:df:2f:59:0a:dc:25:5d:54:ea:ce:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Validity
Not Before: Mar 1 16:36:11 2026 GMT
Not After : Mar 4 22:39:11 2026 GMT
Subject: CN=0D5CABE910D6641FE8945FEA4D852380B1D8E0BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:f7:03:ac:17:84:97:c6:21:cb:06:5b:11:
b9:f6:01:ef:42:de:53:68:be:f2:17:d6:24:d2:c3:
88:0d:f2:76:ba:5b:fd:9b:04:23:db:63:60:8e:aa:
8e:53:ef:6b:12:76:6d:df:0e:6a:28:3f:00:21:5a:
e3:3f:7e:6b:ee:a8:69:3f:10:e0:82:14:3d:10:5f:
b0:9b:ff:fd:97:b8:36:76:0f:86:ba:aa:2c:34:93:
26:41:52:2b:4f:5c:94:dd:1b:5b:9a:a5:fc:78:f5:
76:ed:79:80:2b:4e:2e:4a:f4:48:db:e8:83:f8:41:
cd:8d:82:9f:75:d1:55:3a:ca:f2:29:3c:c7:4e:9a:
1b:72:d7:2c:ea:8b:06:fd:ae:19:1f:fd:7f:c2:4b:
78:b3:14:59:63:2e:86:87:48:bf:10:94:98:4d:43:
18:56:a5:0c:e7:54:ff:14:6b:f0:25:cc:9c:7f:90:
db:c2:47:42:46:9b:f1:36:94:94:9c:78:b4:42:5a:
1f:51:f3:8b:c6:20:2a:e5:37:10:a1:d6:82:64:41:
f3:5d:03:ef:e2:80:25:32:c7:7c:e8:9f:78:ca:dc:
b9:bf:2f:01:8b:d8:b0:b1:c1:f5:0b:59:c6:0d:f5:
e0:a8:12:b7:68:dd:5a:c8:f9:2b:52:9b:91:2e:47:
73:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5C:AB:E9:10:D6:64:1F:E8:94:5F:EA:4D:85:23:80:B1:D8:E0:BA
X509v3 Authority Key Identifier:
keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d7:4b:f3:c3:65:c0:bc:e1:5f:33:45:05:e0:b8:3f:65:2e:
cc:58:d6:66:82:5d:82:cf:60:0d:7b:b3:27:05:81:36:99:c4:
6b:05:9c:5d:68:86:b5:68:ee:1d:12:91:ac:4f:7b:a2:07:c0:
30:96:78:6a:d4:62:8e:17:83:9f:eb:18:c6:2c:ff:88:f1:76:
ad:c5:fb:3d:91:0f:29:37:10:27:3b:11:5f:82:e5:c0:27:be:
e8:16:39:0d:6b:68:eb:78:2a:0a:96:be:73:a7:e8:db:2a:2f:
d0:3b:a7:ee:83:d6:d2:8f:fe:41:b4:f5:11:cd:b5:6f:61:f8:
39:34:42:c4:e6:60:f3:de:83:aa:9f:a8:4d:52:33:44:88:49:
24:c2:70:8f:1e:57:26:21:c9:09:0b:96:74:c6:e7:70:a1:f2:
2e:1b:b2:b5:bd:1c:67:f1:a8:1a:4a:2d:06:c8:90:ca:9d:37:
0f:87:10:b3:21:57:8b:c5:68:a0:aa:67:00:79:7d:a3:51:28:
ed:ce:47:8f:f5:25:eb:49:26:7c:bd:33:b6:f1:39:f4:fc:59:
7e:ba:bb:d7:12:d6:68:ab:bd:25:31:2b:1a:a9:65:20:29:b3:
7b:f4:cb:dd:95:20:82:52:98:57:ea:fe:85:ff:b7:fb:ba:31:
e3:38:35:53
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURCVyQoeAsC2n3y9ZCtwlXVTqzr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2
MDM5NDQ4RjAeFw0yNjAzMDExNjM2MTFaFw0yNjAzMDQyMjM5MTFaMDMxMTAvBgNV
BAMTKDBENUNBQkU5MTBENjY0MUZFODk0NUZFQTREODUyMzgwQjFEOEUwQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPf/cDrBeEl8YhywZbEbn2Ae9C
3lNovvIX1iTSw4gN8na6W/2bBCPbY2COqo5T72sSdm3fDmooPwAhWuM/fmvuqGk/
EOCCFD0QX7Cb//2XuDZ2D4a6qiw0kyZBUitPXJTdG1uapfx49XbteYArTi5K9Ejb
6IP4Qc2Ngp910VU6yvIpPMdOmhty1yzqiwb9rhkf/X/CS3izFFljLoaHSL8QlJhN
QxhWpQznVP8Ua/AlzJx/kNvCR0JGm/E2lJSceLRCWh9R84vGICrlNxCh1oJkQfNd
A+/igCUyx3zon3jK3Lm/LwGL2LCxwfULWcYN9eCoErdo3VrI+StSm5EuR3MjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDVyr6RDWZB/olF/qTYUjgLHY4LowHwYDVR0j
BBgwFoAUG8SX0K0K2oBoOkrRfGC4e2A5RI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NTVhMWE0NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQkM0OTdEMEFE
MEFEQTgwNjgzQTRBRDE3QzYwQjg3QjYwMzk0NDhGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2MDM5
NDQ4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU1YTFhNDQtMzM3ZC00ZGI0LTkw
ZDctNWJkNGYzNzIxNGI4LzAvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4
N0I2MDM5NDQ4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACvXS/PDZcC84V8zRQXguD9lLsxY1maCXYLP
YA17sycFgTaZxGsFnF1ohrVo7h0SkaxPe6IHwDCWeGrUYo4Xg5/rGMYs/4jxdq3F
+z2RDyk3ECc7EV+C5cAnvugWOQ1raOt4KgqWvnOn6NsqL9A7p+6D1tKP/kG09RHN
tW9h+Dk0QsTmYPPeg6qfqE1SM0SISSTCcI8eVyYhyQkLlnTG53Ch8i4bsrW9HGfx
qBpKLQbIkMqdNw+HELMhV4vFaKCqZwB5faNRKO3OR4/1JetJJny9M7bxOfT8WX66
u9cS1mirvSUxKxqpZSAps3v0y92VIIJSmFfq/oX/t/u6MeM4NVM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:19 2026 by rpki-client