
$ rpki-client -vvf repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft
File: BF00BBF622014234CC4A26C23F64AC5C143802B6.mft (raw, json)
Hash identifier: CjylmD1jpci7o9jp6zQN8mNnYWObmmM7XPL99jTiBtw=
Subject key identifier: B1:91:BF:15:06:21:30:FD:9B:D1:56:B7:A4:C2:6A:07:E6:B8:78:5D
Authority key identifier: BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6
Certificate issuer: /CN=BF00BBF622014234CC4A26C23F64AC5C143802B6
Certificate serial: 4B4DE6036FEA27D4D0831080ABDBC0DEBD388B74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft
Manifest number: 026D
Signing time: Wed 15 Apr 2026 18:41:49 +0000
Manifest this update: Wed 15 Apr 2026 18:36:49 +0000
Manifest next update: Sun 19 Apr 2026 02:08:49 +0000
Files and hashes: 1: BF00BBF622014234CC4A26C23F64AC5C143802B6.crl (hash: +1Z2GyUXwXwYr5+fxgKTCHBk4hpVB1WUNkvC5GYUSO4=)
2: 3130332e3136392e382e302f32332d3234203d3e20313432333436.roa (hash: VJL9KeDerIzVKUdRVsQD4EqmA/+WAY+83Tr9rvd7sMw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl
rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 02:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:4d:e6:03:6f:ea:27:d4:d0:83:10:80:ab:db:c0:de:bd:38:8b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF00BBF622014234CC4A26C23F64AC5C143802B6
Validity
Not Before: Apr 15 18:36:49 2026 GMT
Not After : Apr 19 02:08:49 2026 GMT
Subject: CN=B191BF15062130FD9BD156B7A4C26A07E6B8785D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:24:e1:6c:ba:6f:89:25:41:98:f1:c3:55:4c:
09:d4:8c:1f:f3:22:95:58:3d:ff:f4:84:6b:ed:c6:
9e:53:28:c5:89:c4:92:67:8f:74:f5:9f:02:7f:a8:
70:7a:26:42:29:f0:23:31:6c:82:42:6d:d0:59:09:
46:95:4d:73:62:3d:a3:30:95:ef:bc:cf:d2:e7:13:
97:ff:9a:1f:dc:ea:1b:20:7f:09:1a:8b:52:0e:62:
cf:47:d5:69:84:d0:05:0b:09:2d:f9:57:2b:4e:8e:
c0:2f:fb:3d:9c:11:52:63:ee:f2:1e:0c:54:3b:77:
59:d3:f5:28:be:65:b1:3f:73:24:5f:35:0f:96:d2:
3f:38:a5:d8:9b:bf:14:76:7d:05:6a:20:81:e6:1e:
f4:27:32:94:d9:f4:49:1f:de:3f:90:44:0b:69:d8:
90:97:89:7b:58:3b:81:88:d8:3b:dc:0a:df:08:02:
3a:98:3d:b7:3b:6e:fe:9c:6c:e6:85:64:4a:3e:d0:
61:09:1c:36:ff:c0:63:71:78:ca:a1:ed:58:70:f7:
39:30:a5:1d:df:a4:b2:83:bd:9e:d7:f3:2c:c1:8b:
2e:b2:fb:93:64:14:51:cf:7e:21:fd:0d:84:ac:84:
64:e2:cc:79:72:6b:e6:c5:1c:ca:32:bd:f5:f8:6c:
ff:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:91:BF:15:06:21:30:FD:9B:D1:56:B7:A4:C2:6A:07:E6:B8:78:5D
X509v3 Authority Key Identifier:
keyid:BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cb:c6:b5:30:21:bd:1e:cb:fe:6b:e4:b0:19:61:e7:b3:40:
e2:53:f9:f5:79:52:62:c0:88:54:9e:03:b5:1a:9d:84:11:99:
80:e2:e7:03:f3:9a:34:db:e1:d2:ec:95:ed:6b:e3:b4:ec:4f:
31:fb:22:2e:a6:64:47:a6:25:0a:80:b3:d0:06:d4:d4:d9:68:
0a:c3:78:35:9e:6f:56:92:f0:8a:d2:1f:2f:eb:cc:eb:47:08:
3e:e6:d2:08:77:f6:fc:c3:1e:ae:8c:a9:98:45:3c:31:a1:38:
33:ed:f6:07:ac:d1:40:d1:3b:ca:c1:56:c9:34:d8:06:fa:fa:
a5:73:77:63:f3:1d:4f:60:c4:98:5c:66:83:4e:21:fd:f6:fb:
7a:0d:f6:57:bf:8f:8a:4f:6f:0c:dc:e4:1e:9a:ae:73:b2:9f:
8a:21:e1:cc:5c:41:3e:06:7e:59:c3:18:88:d2:fd:8b:5c:f2:
84:bb:88:52:cd:0e:a7:8a:4f:0d:bf:a4:e4:6b:1b:55:53:eb:
b0:da:22:96:2e:09:c2:36:7f:44:c3:20:45:fb:37:c4:06:69:
31:90:91:f7:42:c4:be:22:c1:d6:07:9a:d0:ef:3a:3e:87:12:
4e:96:93:45:b2:f7:09:77:67:77:c2:55:bf:7d:61:a3:e7:c6:
25:ae:fd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:24 2026 by rpki-client