
$ rpki-client -vvf repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft
File: BA0937086D03009DB3422C9809596F09C430C76E.mft (raw, json)
Hash identifier: gRSqE/v8yljt6McFaxpRC1RhsGy5UO9er6W0zS7TyjM=
Subject key identifier: E2:56:9D:DA:3B:81:67:42:8E:79:C0:53:98:84:C6:1D:B6:F1:0A:D7
Authority key identifier: BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E
Certificate issuer: /CN=BA0937086D03009DB3422C9809596F09C430C76E
Certificate serial: 01BD54E769C8A95C83F9892FC75284B1A3F0D534
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft
Manifest number: 03C0
Signing time: Mon 02 Mar 2026 00:50:56 +0000
Manifest this update: Mon 02 Mar 2026 00:45:56 +0000
Manifest next update: Thu 05 Mar 2026 06:54:56 +0000
Files and hashes: 1: 3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (hash: R8X143yfbaXKUXHLJV/lqOf4AKY5dTtB+7zp9CImTLI=)
2: BA0937086D03009DB3422C9809596F09C430C76E.crl (hash: khJcWWJ9Od/JLOrs1HkjexkbFIHHq0QjooBF5SU0VF4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl
rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:bd:54:e7:69:c8:a9:5c:83:f9:89:2f:c7:52:84:b1:a3:f0:d5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA0937086D03009DB3422C9809596F09C430C76E
Validity
Not Before: Mar 2 00:45:56 2026 GMT
Not After : Mar 5 06:54:56 2026 GMT
Subject: CN=E2569DDA3B8167428E79C0539884C61DB6F10AD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:25:5a:ac:92:e6:d8:4f:ec:fb:c0:6c:28:
c3:f7:45:03:12:c3:7d:83:fd:a7:03:ff:16:a6:6b:
b0:cc:ee:51:c7:34:bd:82:7e:59:75:7a:86:57:41:
8d:81:6c:cd:a6:d0:14:ed:7e:7a:d6:e1:a1:3a:f1:
84:15:66:ac:17:ff:f2:58:2e:20:cc:01:9b:a9:f1:
b7:57:f2:ef:a6:9b:1a:71:c7:a5:b3:6a:a1:8a:d8:
d3:b7:20:de:91:55:18:8c:50:38:2f:bd:d9:f3:62:
c7:ea:04:02:d7:fc:fa:14:13:e4:ac:f7:26:3c:73:
00:3a:68:dd:71:07:67:29:9c:90:17:7b:56:50:0b:
eb:3d:a3:98:31:3a:e3:d4:30:d4:c2:95:ee:b4:e3:
f5:1f:3c:86:ca:99:93:e2:21:23:e4:a4:ab:81:ae:
59:f5:36:50:e8:50:4b:80:c4:54:11:40:d7:62:8c:
5e:ce:12:e9:1f:26:d6:04:36:9a:1f:85:8a:4f:4c:
59:61:d2:4f:3d:55:d0:5a:f9:2c:aa:37:cc:88:fb:
bf:56:c0:ce:8c:f5:a9:ce:14:42:3d:aa:c7:f7:08:
95:ad:e8:ab:c4:b2:6d:1c:11:ec:ac:89:10:e5:9f:
13:f9:4c:63:e4:32:8d:85:dc:a2:78:cc:db:05:85:
80:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:56:9D:DA:3B:81:67:42:8E:79:C0:53:98:84:C6:1D:B6:F1:0A:D7
X509v3 Authority Key Identifier:
keyid:BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:24:95:0d:89:a5:e1:88:b0:fc:ad:88:9e:52:4d:80:a1:46:
fc:8b:d3:4b:11:f1:81:ad:8a:b3:62:c3:d2:0b:10:50:92:da:
c2:ac:8b:8c:7f:64:56:c5:d0:a4:98:c6:0f:dd:7e:84:4a:26:
67:f6:2e:9e:51:fc:02:00:30:04:49:da:fc:a6:2b:56:0b:3b:
48:17:4a:1a:b4:92:22:95:48:1e:ed:da:5f:6f:93:44:a7:de:
fc:5e:3f:32:a3:2d:21:32:3d:7e:7b:5e:33:d3:12:4d:76:d7:
24:f3:d4:90:bb:3e:d9:c4:17:5a:53:5a:b0:12:f9:fa:b2:c8:
82:ca:e5:ef:d1:77:49:36:bf:ff:c4:e7:37:ba:42:6e:66:f3:
d6:31:d9:80:7b:ee:01:4c:a8:14:4e:e8:ec:fc:ec:44:3e:f2:
43:bc:b2:c1:86:ab:a6:3b:fc:b0:4a:b3:e2:51:da:e8:ae:c2:
9f:d9:a2:c6:62:45:c9:e8:a3:db:10:70:12:43:b8:da:99:be:
32:9e:74:85:50:75:9a:4f:5f:23:f1:c4:4e:ae:9e:67:79:d9:
ac:ba:4e:d6:14:f0:aa:ae:d7:08:ad:49:78:23:3d:2e:7f:35:
b7:b3:c2:ac:e6:97:21:c1:ee:11:69:6a:dc:3d:6f:cd:1c:ff:
33:01:c1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:05 2026 by rpki-client