
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
File: 1BA1ADD734797C0383628A8723DEBADA827B5B02.mft (raw, json)
Hash identifier: O/UbTIYFsQqmoXFGp63cLBVqFsxn2Eh6yB2n3+nUJ/w=
Subject key identifier: CF:6C:1E:43:9D:77:36:F3:DD:4E:A5:FC:E7:68:41:CA:4A:92:D1:4D
Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02
Certificate issuer: /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
Certificate serial: 210B1DE805A009DC3F4EDDA9983E5FFF617F82E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
Manifest number: 0159
Signing time: Sun 01 Mar 2026 02:21:51 +0000
Manifest this update: Sun 01 Mar 2026 02:16:51 +0000
Manifest next update: Wed 04 Mar 2026 02:55:51 +0000
Files and hashes: 1: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: hjP0N7FVqxd5mdZscYDmp6xMH5tmWzueXb7HkGf6Xog=)
2: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: JKPKSxtNr4roaOU1GUo5PklwixfLAP/k426kY4JyNts=)
3: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: GA6rUIyaqIB58eM6Y3Tv2tAamvlNcofAYPow7jpjhqA=)
4: 1BA1ADD734797C0383628A8723DEBADA827B5B02.crl (hash: Hj2P1CRzfgd5ETqDQtUGtvTb//EqLxU+7MGXRJpHAVk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl
rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:0b:1d:e8:05:a0:09:dc:3f:4e:dd:a9:98:3e:5f:ff:61:7f:82:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
Validity
Not Before: Mar 1 02:16:51 2026 GMT
Not After : Mar 4 02:55:51 2026 GMT
Subject: CN=CF6C1E439D7736F3DD4EA5FCE76841CA4A92D14D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:31:a4:25:3a:e8:50:18:a8:a4:e3:e3:48:
5a:46:2a:f7:55:a7:db:d3:10:27:43:ab:ea:83:22:
7d:de:5a:2a:58:8c:34:eb:97:bf:b6:13:60:4d:a0:
6f:70:93:a7:25:7f:f0:75:1d:ed:6d:74:69:24:b2:
ec:67:d6:35:1d:75:f8:45:9d:90:57:5c:92:7c:0d:
5f:16:b7:6f:1d:70:b8:37:f6:b5:80:81:1f:54:a3:
7b:91:ec:1b:3c:c0:59:0e:7f:18:c9:c9:58:00:24:
86:da:fd:59:84:ed:c5:19:85:8a:e2:5c:b4:bd:34:
eb:99:b6:48:16:0d:f7:18:a5:65:eb:a0:a7:b3:71:
37:25:92:af:50:24:3b:9b:5f:b0:48:33:8e:07:67:
e7:57:c2:4d:64:8f:9f:11:9d:27:58:1e:ad:92:d2:
6e:f2:c7:5c:e5:1a:51:64:c0:95:cc:04:5c:d2:14:
a7:61:52:7b:94:12:56:20:cc:d3:12:4e:4a:ea:5f:
7d:70:b4:66:23:e9:cf:45:bb:5d:51:c5:a5:b2:fa:
73:b5:29:1d:13:e8:cb:8d:44:1c:43:9d:74:37:b8:
17:8b:73:5c:2f:24:4b:28:c2:d2:9e:36:b9:fd:5c:
64:2d:98:76:ac:52:7b:6f:13:a7:a7:20:22:c6:0b:
45:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6C:1E:43:9D:77:36:F3:DD:4E:A5:FC:E7:68:41:CA:4A:92:D1:4D
X509v3 Authority Key Identifier:
keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8a:0e:90:9c:93:97:16:d5:f3:15:b3:ec:42:49:4b:be:32:
25:86:9b:b7:be:6e:ac:d6:28:8f:e4:cf:a6:2a:70:e8:06:76:
12:17:e3:f4:3f:8d:9e:75:c0:e5:47:52:14:da:36:4e:88:57:
df:1d:68:b6:e4:c3:85:a1:9d:28:cd:af:ae:e3:df:84:31:19:
1e:17:03:e3:c4:6a:92:82:09:79:a5:b3:a9:33:b5:c5:c5:5a:
e0:12:c0:5a:1e:0e:f5:4a:42:d8:dd:ef:35:65:91:10:88:08:
9a:88:ad:c0:ac:12:8f:fc:4f:14:da:f4:80:7e:4c:01:b8:d4:
a4:80:a1:a3:97:ef:25:bb:6d:c6:8d:e4:35:26:4b:0e:fe:7e:
40:f6:0e:e4:b8:4f:80:86:33:a1:01:0e:75:b4:29:e9:c1:b3:
13:32:5a:db:87:c8:92:c4:24:0d:87:c6:dc:47:3c:13:49:e6:
7c:17:f3:65:6d:bf:77:4e:4d:a3:72:52:a6:ce:a8:bc:2d:09:
29:c6:51:a0:0c:45:b9:13:f0:67:ff:d2:6c:32:d9:18:45:82:
2c:83:1d:46:8c:5e:06:c9:24:c1:98:48:3f:b3:d1:2e:4e:05:
ab:b3:89:ae:58:f0:96:b6:8f:ec:90:72:0f:f3:35:0e:a6:f2:
3e:64:b8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:38 2026 by rpki-client