
$ rpki-client -vvf repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft
File: B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft (raw, json)
Hash identifier: jnV/5l3yJnt4DTRRqxIteqB5nE7On8GcbOP10zgpznA=
Subject key identifier: 7F:BB:4C:66:B2:8E:FE:B3:97:B7:D1:A6:88:C4:82:A7:78:63:A0:F2
Authority key identifier: B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A
Certificate issuer: /CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A
Certificate serial: 31E0A9969B71B2A1B0159C15C86EB7755C907BFA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft
Manifest number: 0551
Signing time: Sun 01 Mar 2026 18:01:24 +0000
Manifest this update: Sun 01 Mar 2026 17:56:24 +0000
Manifest next update: Wed 04 Mar 2026 19:04:24 +0000
Files and hashes: 1: B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl (hash: DtZrrFqHaWfmIwLHRnhFrLTd+QTXnbt3bBON6mEKT14=)
2: 3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (hash: NXiX7VHYL2V/PG5eFGBukXkPCYGw4lMLoRT1ir2CDOE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl
rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 19:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e0:a9:96:9b:71:b2:a1:b0:15:9c:15:c8:6e:b7:75:5c:90:7b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A
Validity
Not Before: Mar 1 17:56:24 2026 GMT
Not After : Mar 4 19:04:24 2026 GMT
Subject: CN=7FBB4C66B28EFEB397B7D1A688C482A77863A0F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:c1:8b:1f:f0:be:0f:97:c0:0c:8a:ed:58:
eb:3f:d7:dc:41:5c:ef:26:4b:6f:b8:f1:d2:a0:49:
a7:b2:e7:11:b1:c0:a7:91:d2:33:1c:d9:4c:e8:64:
b8:1c:17:69:e1:56:01:1b:b0:7d:16:8c:b7:5a:f5:
b7:1e:c9:78:de:45:d7:41:50:3f:30:e8:c0:65:31:
85:97:41:9b:9d:4f:f9:c0:05:f8:0a:63:54:f7:55:
b8:dc:ce:b1:52:31:b0:f6:ce:52:17:b0:70:09:38:
ff:5b:48:01:9a:aa:d1:12:49:00:1f:48:3c:0b:70:
88:48:3d:56:42:7b:01:89:3d:76:66:6f:44:8d:05:
bd:c3:df:0d:84:43:65:49:41:14:26:b4:3c:43:d2:
aa:51:85:d5:8a:f9:cb:ee:ca:59:0c:b2:c9:f5:14:
00:0f:cc:13:b0:c1:fe:1d:b8:fb:33:12:f0:57:8a:
de:6a:7e:c1:47:b4:b0:67:10:a6:12:b2:e7:42:c2:
44:fc:8b:ed:5b:79:8a:38:ed:50:b3:ce:a0:fd:9d:
ce:a4:f5:9c:b9:ea:1c:7f:2f:e4:ef:d2:af:62:e8:
72:bb:ba:be:a2:a8:55:f6:cc:6f:42:ad:99:1d:ac:
93:58:75:ad:de:be:0d:cf:f8:e6:cc:14:94:01:45:
71:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BB:4C:66:B2:8E:FE:B3:97:B7:D1:A6:88:C4:82:A7:78:63:A0:F2
X509v3 Authority Key Identifier:
keyid:B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c3:a4:5a:a3:a9:2a:03:be:8e:a0:34:5c:9b:07:40:57:e3:
a8:92:ac:27:4f:a6:33:da:ef:99:ff:26:d2:81:66:bb:0f:3b:
92:30:b9:63:36:fd:73:9e:32:ca:18:e3:ae:58:87:ab:c8:ef:
ed:58:bd:b8:a4:57:99:0a:5e:8f:48:a9:5c:c7:d2:da:92:9a:
44:b1:ad:03:f9:00:00:42:ef:72:33:6c:8e:d6:4a:c5:16:1e:
fd:d7:80:53:1d:64:53:68:e7:92:2a:c1:6b:5a:a0:a7:78:56:
94:f0:fa:b3:6d:eb:57:9f:00:84:c5:fe:f4:b6:db:1a:34:9f:
3b:0e:05:a6:8b:c2:0e:37:83:6b:06:4c:a5:70:2b:a0:57:16:
82:1b:bf:84:3a:5c:a1:15:89:e1:7e:69:3b:22:1d:6c:be:b5:
a2:ba:5d:fc:64:2d:5f:bb:c2:a9:ca:e6:91:d9:fc:dd:39:db:
86:89:bc:b4:6b:69:46:2d:a4:2b:a1:c6:16:b7:14:85:6f:1b:
ee:1e:d4:ec:d5:d2:29:73:6a:89:91:65:cc:46:bd:42:84:66:
65:92:48:44:6a:21:9b:85:11:53:7b:61:39:39:1c:f7:19:7f:
c6:62:d8:71:92:c2:46:07:fb:93:5e:90:bd:52:b7:3a:de:3a:
57:84:ec:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:43 2026 by rpki-client