
$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
File: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json)
Hash identifier: 8q3KbXIs+Z7/RiUG1TW41zCrlbT5bHxS4Hn6Nbo/G4M=
Subject key identifier: 90:F2:18:F1:B2:27:8D:73:76:90:00:D7:8E:12:27:18:F2:83:E3:99
Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Certificate serial: 46943974AB639AEF50F458E370FE3988DEDF05DD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
Manifest number: 01DF
Signing time: Sat 18 Apr 2026 16:31:14 +0000
Manifest this update: Sat 18 Apr 2026 16:26:14 +0000
Manifest next update: Tue 21 Apr 2026 21:59:14 +0000
Files and hashes: 1: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: x8GA7f+9To0zJWTPLU22XKkbJl3cpNPeZ955m1OcAKM=)
2: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: bwxOBTcYUW4EWWVI4+LMm4RFrct5C93RnNdftz4+WVU=)
3: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: xNJ7kcT79xuTCgJoNY2LlV0p8gctQ3BS6QaupCIi9OQ=)
4: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: SrvCxxwtOAUSUTutTIMfTF6gsLrsVsYaxkHmFerjnWI=)
5: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: hqbmI1+UoUPoz5aHKEefU2aqzgzzxdPZgTYT+n6aATQ=)
6: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: V8HVQOfgmh/cc0nhLeaxvvDoxZedeMVRv4rqy3Nfh7U=)
7: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: n2kJmjfaGbSRfn1pQASrz7hUspqtdNSxVZot/XzEk0w=)
8: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: B1+mJ2NWxCErJO3eSkTT+IRh+1v8gS/UXtodN0rllAY=)
9: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: wmUZdQN9smMnqKDgMvZP3VM5NikSry3YiZ+HF4rDvwk=)
10: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: r7mX7DIOfxP1tvfX/0nO3uk5UJScpK1uxXF4s8uBd2k=)
11: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: ibJZHZEEwuIaueWUBS974XsPSfaJnljHAhKebn2nItk=)
12: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: OfppjjTpXFLmh5Aj/BiOiyknKtfPtzPHg2/eqJ5W1oI=)
13: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: 4fKehzLVKMt4BtIz5yX0ZNeUtM2OU5RTZbzjb0CfeGg=)
14: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: IzPZz6vu3cjWO+ZYwd6eSMpiSKGTjsqFFoCVeTSJVZ8=)
15: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: 4k9C18S/gej3vBFzU0qeNrYGkLmZVXuYXMm+WSQ8DFw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 21:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:94:39:74:ab:63:9a:ef:50:f4:58:e3:70:fe:39:88:de:df:05:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Validity
Not Before: Apr 18 16:26:14 2026 GMT
Not After : Apr 21 21:59:14 2026 GMT
Subject: CN=90F218F1B2278D73769000D78E122718F283E399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:15:64:b5:19:1e:e3:f9:c0:13:1d:80:ea:
e2:e2:a2:83:ec:0f:d6:88:89:1c:49:4e:78:8b:d2:
21:2b:7c:2d:c2:0c:be:3b:27:c0:a3:0f:4b:e6:28:
17:c7:15:4d:87:fb:57:f5:67:b2:bd:79:aa:1c:07:
25:0b:9b:81:61:06:de:ed:58:6e:ff:f3:0a:ed:bf:
db:bb:43:a8:c6:ec:ef:65:2b:38:c2:16:29:42:6a:
69:26:a5:53:78:fb:90:51:7b:42:03:90:14:a6:31:
d6:87:73:30:e2:c7:7d:6b:96:0e:df:77:d6:2e:ce:
6a:b2:8b:00:21:a6:9b:bf:01:c0:af:cd:54:bc:b2:
85:6f:7e:4e:62:a1:cb:9b:8c:81:81:7a:7d:72:52:
4c:67:e6:d9:42:14:4f:85:3d:60:91:38:67:49:71:
ee:a4:e5:c4:5f:54:a3:9d:50:c0:c1:44:e7:ff:a3:
6b:bc:36:78:55:8e:17:e0:aa:7a:68:7e:53:39:72:
21:fd:c0:aa:23:81:d9:98:2d:a8:42:3a:c2:30:ef:
8f:08:dc:3e:c0:31:ea:4a:ba:b7:4e:11:2b:50:0e:
e0:1f:5d:e9:3d:72:f0:8d:94:6b:d2:05:45:a7:ee:
61:cd:0e:45:7e:ba:b2:30:73:8b:43:1c:dc:41:da:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F2:18:F1:B2:27:8D:73:76:90:00:D7:8E:12:27:18:F2:83:E3:99
X509v3 Authority Key Identifier:
keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7e:3f:0e:a5:70:d7:51:25:1a:c5:59:42:74:54:45:32:52:
b9:cf:38:cf:2b:f1:fd:9f:5b:ca:94:5d:1c:d6:37:a9:51:ec:
0c:91:ea:17:2a:73:74:03:58:3e:23:fa:49:f6:27:bb:7c:e8:
dd:b7:51:f0:e0:59:87:4e:7a:33:98:10:57:6e:98:33:c1:60:
cf:c7:32:40:35:8f:0f:0a:35:b5:47:12:ac:17:11:12:05:49:
2d:85:e4:a4:3b:07:6a:02:2c:4e:85:8f:80:ab:94:45:eb:8a:
39:4e:c7:d4:1c:6b:bf:1b:51:a7:40:6a:3b:8c:f1:ff:a6:53:
09:ca:28:1a:51:5e:06:af:77:cd:96:0f:e7:19:98:99:91:63:
4c:7f:12:69:0f:dc:16:fd:67:ae:c5:fd:8e:e0:55:5f:1a:37:
e5:3c:25:25:4c:1b:51:9b:82:b8:e2:be:4e:b3:89:b2:c9:6a:
86:ea:4b:b0:b3:44:38:96:cf:04:e8:cb:68:4a:d6:d7:0a:5b:
c2:2d:f5:3c:df:47:d0:a4:99:aa:5a:bc:19:1d:40:ab:11:5e:
6e:53:dc:18:3f:77:47:1a:b8:60:6c:fe:b7:d2:6b:02:2e:77:
f3:02:80:26:96:c7:5a:42:d3:dd:7c:8d:7f:ef:c8:36:c7:39:
9a:97:c3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:01:47 2026 by rpki-client