
$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft
File: B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft (raw, json)
Hash identifier: 5mITDizZM1KmDlpr21i7Lh6jyfg26YpHf4sVVeC1uHk=
Subject key identifier: BD:5A:16:98:23:62:0E:2F:B0:0A:C3:DA:6C:BC:AF:17:DC:12:20:FE
Authority key identifier: B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F
Certificate issuer: /CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F
Certificate serial: 30D08747DC7B2FB55A468AC2247E2A62DF556C5E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft
Manifest number: 03E4
Signing time: Wed 15 Apr 2026 17:51:35 +0000
Manifest this update: Wed 15 Apr 2026 17:46:35 +0000
Manifest next update: Sun 19 Apr 2026 03:19:35 +0000
Files and hashes: 1: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: 0qtvESVyNKD7Aha3YGc7JQ2v09wcRG3LvxHILCYb604=)
2: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: 7lt/Pu+263UL3s6kz24cYhGTnyx1FA6xGEj7++kkFpc=)
3: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: gi32RXV8JZ3+geKXJ775zfQ6NviF8gztZ4frnl7zPLc=)
4: B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl (hash: kxrVN9Jma0PfOdAYrvlKBDVUQ1kEWfeOurZRN8b6W8U=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl
rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 03:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:d0:87:47:dc:7b:2f:b5:5a:46:8a:c2:24:7e:2a:62:df:55:6c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F
Validity
Not Before: Apr 15 17:46:35 2026 GMT
Not After : Apr 19 03:19:35 2026 GMT
Subject: CN=BD5A169823620E2FB00AC3DA6CBCAF17DC1220FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:2a:4a:64:c3:c1:84:f4:f9:a3:09:4d:a0:
1f:ac:52:19:37:f2:b2:4c:b2:90:20:54:fb:61:ce:
45:0f:8c:26:a3:48:42:3d:7c:f2:ff:db:f3:a4:75:
2b:76:d6:3b:7d:ce:4f:c2:99:98:6e:18:af:4e:df:
79:c8:52:4a:98:0b:26:eb:2e:4f:4b:2b:ba:c8:b1:
33:cd:3b:6e:b7:b2:02:3d:a8:bf:bf:51:c0:cf:de:
a1:d4:90:c3:2b:66:b1:7b:7d:47:bc:f9:33:55:81:
f4:80:b3:19:4e:9e:75:20:db:67:84:71:8c:cb:8e:
f4:82:c3:ac:b8:a1:99:93:5e:b3:6b:6c:a9:e6:25:
e4:a8:97:01:f2:6b:c0:f8:98:da:0b:23:52:9c:6e:
33:e2:95:3d:96:da:9d:63:22:78:2e:f1:f0:cc:eb:
cf:35:13:d8:c4:12:d0:b6:e9:cb:f3:28:9d:e9:4f:
2b:c4:73:e6:9b:ae:3a:eb:b0:df:c3:c4:1b:cf:0c:
e4:f9:c7:0d:78:7e:a6:5c:1f:bd:15:ea:0a:91:ee:
fe:5d:35:79:b1:a1:d6:a3:04:b5:63:52:9b:af:00:
2d:85:f1:07:e1:be:3f:6e:2e:80:1a:04:39:27:e4:
81:19:15:bd:67:f3:ba:42:ea:48:d3:16:25:ca:3d:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5A:16:98:23:62:0E:2F:B0:0A:C3:DA:6C:BC:AF:17:DC:12:20:FE
X509v3 Authority Key Identifier:
keyid:B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b0:9e:d6:6c:ad:bd:49:a1:9b:8b:08:cf:f3:dd:62:1f:95:
dd:36:d9:05:89:6c:64:60:99:97:61:6e:92:4c:d0:ad:e6:18:
27:f8:96:e8:73:84:f9:6b:64:d9:0a:0f:2c:83:bc:52:a2:5c:
9b:5a:8a:34:ba:5c:78:1a:a5:f8:ae:79:a7:16:b9:f3:f9:9e:
65:03:df:3b:0d:1e:47:9a:98:86:12:2f:b3:34:2e:d5:81:cd:
8c:45:6b:8d:55:41:e7:33:f4:98:a4:54:12:5e:e2:28:f2:f5:
09:1e:22:34:28:66:39:d2:87:b2:66:5e:a4:1e:cd:57:4e:c9:
02:a3:7a:89:47:ed:e9:a0:73:d9:ff:0f:75:05:6b:53:88:cc:
ca:a7:8b:85:5c:3d:5a:92:a4:6e:63:52:ea:62:93:84:de:17:
8b:71:33:bc:04:0f:b4:f4:f8:ed:75:19:1e:a1:1d:e2:03:a9:
a6:60:aa:4d:92:38:da:13:67:0c:ae:c8:7b:75:ea:86:28:98:
29:a0:27:fd:29:80:28:24:96:24:f5:52:02:b9:5b:b2:c6:04:
c9:e2:eb:d9:87:fa:8a:27:2f:59:4c:65:d6:3d:9e:23:4d:ea:
2e:90:52:67:6e:09:13:18:5b:ee:30:d5:91:31:da:4c:d1:6d:
7d:ea:93:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:10:27 2026 by rpki-client