
$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft
File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json)
Hash identifier: 893J3nVt4TANeUKzn0KZLlazNmSfapW+cY9IRXxo2Bk=
Subject key identifier: 07:1E:77:AE:EA:9C:3C:F2:9D:A3:06:89:18:E4:65:05:E6:64:32:22
Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1
Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1
Certificate serial: 0C58905B5628F0243B93BC393CC22A14410F94E6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft
Manifest number: 0300
Signing time: Thu 16 Apr 2026 16:30:45 +0000
Manifest this update: Thu 16 Apr 2026 16:25:45 +0000
Manifest next update: Mon 20 Apr 2026 00:08:45 +0000
Files and hashes: 1: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: IZ8Vz9fK5Ay6ROAIBVpmHYq7OxQbFgsxzOQ/UCxGXwc=)
2: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: Hrip94cO74HpeyGLfnNJex6umgoDOwaX6F5+UX0Yo2Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl
rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 00:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:58:90:5b:56:28:f0:24:3b:93:bc:39:3c:c2:2a:14:41:0f:94:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1
Validity
Not Before: Apr 16 16:25:45 2026 GMT
Not After : Apr 20 00:08:45 2026 GMT
Subject: CN=071E77AEEA9C3CF29DA3068918E46505E6643222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:b4:c1:e7:34:6d:f6:f3:9a:48:28:37:5a:
87:82:62:f4:4f:c9:47:bd:c3:11:18:df:7c:57:f5:
b9:f3:46:9f:bc:e5:a8:54:91:bc:36:86:d8:c4:2e:
8c:c7:8d:92:8c:89:7f:de:1d:3c:73:be:3e:f4:3c:
ae:24:cf:8f:96:db:22:65:c8:b0:4f:dc:e2:44:29:
bc:c1:55:33:b4:2d:5a:a2:01:06:fd:09:d2:02:8a:
42:8a:a1:c2:c8:4f:23:c1:ea:d7:c7:b5:7b:2a:30:
81:15:31:8f:0e:a3:d3:db:42:2a:ed:a7:4c:04:79:
40:f4:61:de:53:b6:9c:c9:b6:85:56:43:98:d8:6e:
71:ec:61:d2:27:60:15:e8:9a:e5:7a:ca:27:44:65:
48:08:6c:46:55:ab:f7:18:b2:01:b0:2e:85:f0:95:
50:7b:8b:b5:50:0f:5e:5a:81:65:26:60:e9:b1:c9:
c1:f1:d7:fd:7c:2e:24:ff:20:be:04:52:87:bf:11:
d7:01:4a:80:30:4d:e3:ab:12:a8:9b:77:d6:28:01:
b8:8c:b4:22:59:88:07:a8:60:ae:ba:1b:48:10:8d:
35:f4:0d:e4:f6:62:5a:ce:dd:86:ef:fc:cc:a2:d8:
f4:ee:85:73:35:68:61:34:f9:9d:2c:d6:5c:4b:64:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1E:77:AE:EA:9C:3C:F2:9D:A3:06:89:18:E4:65:05:E6:64:32:22
X509v3 Authority Key Identifier:
keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:31:63:eb:91:e3:6e:38:bb:31:22:59:3a:a9:ab:a4:55:12:
31:17:e5:fe:65:da:f1:19:4e:c6:31:46:35:97:44:c5:f6:14:
04:2d:9e:15:28:31:a2:31:42:52:ab:b7:9d:9d:67:91:3d:90:
90:ee:e5:0e:07:0e:06:8b:cf:2b:d0:d6:75:c7:a2:ac:c7:3e:
27:65:b5:55:c0:8b:91:a7:b8:1a:88:ce:80:8f:a6:a6:1e:df:
ff:7b:56:90:0d:ef:73:81:c7:61:11:0c:d0:0a:03:ff:b7:4c:
10:ae:0d:f6:df:0f:6e:25:1d:74:85:1d:11:d9:99:f7:45:52:
96:ce:b2:1c:e4:bb:e7:fb:07:ce:f6:3e:94:3e:67:75:15:29:
07:6b:7a:ce:85:09:79:56:71:4a:2e:04:24:dd:86:f8:f5:b5:
fe:27:15:0d:e7:d5:40:15:b0:dc:68:6c:da:f6:57:6a:9f:b5:
5a:c8:ad:ba:c0:6b:b4:d0:46:38:a8:62:aa:cf:28:26:5e:62:
98:b6:52:99:ca:e9:7f:5f:d7:d8:92:19:91:85:0a:6f:a5:98:
9c:25:f1:a6:10:bc:40:da:49:b8:cd:29:0e:17:c9:f8:f9:e0:
e4:e4:bd:c2:63:fa:96:ec:0f:e8:c9:d9:29:26:96:a2:43:ea:
f7:f9:52:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:08:49 2026 by rpki-client