
$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
File: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft (raw, json)
Hash identifier: c2zkpuRyZiq3Zn9bdabVnv/mLJrK2EwwTRG0TbHZlj8=
Subject key identifier: 02:98:AD:62:F8:67:D3:F8:CA:10:F1:0F:FE:62:A2:4B:C7:33:B1:7F
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial: 367C663A64EA5FCDDE9107DEE6E1E4E48DF0D1F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
Manifest number: 01FA
Signing time: Sun 01 Mar 2026 11:20:05 +0000
Manifest this update: Sun 01 Mar 2026 11:15:05 +0000
Manifest next update: Wed 04 Mar 2026 19:00:05 +0000
Files and hashes: 1: 3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (hash: FBwLiD7U4sCYynBhJGjAu+VAe5YUj9+FUjVO+L+zaEo=)
2: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: vo3txQHD1GP/JznijvlkQTtQaeBbi729kAiguRxIkyE=)
3: 3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa (hash: p/6KK4JMbgCv5VkdanC2JpAp7VpmlbyPcWCjqL4KniM=)
4: 3131342e3134312e39352e302f32342d3234203d3e20313338383138.roa (hash: qVIOTxzkHoMtUEEPyvvgBkFKT9oB5BtmkPkZiQLq0ng=)
5: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 31rqAW06+FuDJELvsb/0uxq0ocORo684ERfMQVWzj54=)
6: 3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa (hash: YqkCvMl0PPv/SjM86CmSE7YV2BzpnMMQxQbEuJOY7ws=)
7: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl (hash: iGOo1YCh2bN3YzsOKDykMSoypckCK+6EEbN5w7HWA40=)
8: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: rfAEDfb98EmJrbbYSOsJh0R3GKeVtrdV920jQ6JYXXk=)
9: 3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (hash: 8bb25AjKY+CfhaHD2T35vRoSHcpGFrksD2snYFX7/PA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 19:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:7c:66:3a:64:ea:5f:cd:de:91:07:de:e6:e1:e4:e4:8d:f0:d1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Validity
Not Before: Mar 1 11:15:05 2026 GMT
Not After : Mar 4 19:00:05 2026 GMT
Subject: CN=0298AD62F867D3F8CA10F10FFE62A24BC733B17F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:33:fc:f0:65:7d:56:6a:29:68:bb:04:17:
9b:23:70:22:f6:57:20:e9:a0:2d:48:29:c0:c1:71:
ba:11:16:f3:cb:32:5c:43:5d:a6:de:d0:ed:34:1a:
44:c5:6a:ee:49:51:e0:9a:f3:e5:d4:ad:78:93:89:
76:ec:ba:26:3c:e4:c1:b7:47:3f:e6:57:8f:be:47:
84:3c:11:83:6c:2c:bf:c2:c8:76:43:59:60:df:90:
de:33:89:4c:b8:e7:e0:6f:7c:31:16:09:65:d4:d9:
90:59:23:9f:a3:90:43:98:7b:ca:ad:f8:b9:cf:c1:
3e:8e:5c:38:eb:73:72:77:51:7c:58:5c:ff:54:a9:
14:c1:33:23:ba:c9:a9:a7:d5:e7:a2:5f:96:5e:59:
f3:11:f4:e6:fa:46:85:3f:45:5f:51:4b:0b:1f:a1:
4e:35:2f:e4:3e:e3:28:8d:13:fe:03:2d:95:9d:72:
f9:b7:5f:31:d2:d0:68:79:a2:b4:dc:2d:66:55:f9:
2b:18:5b:8f:fc:d2:8d:7b:ed:74:fb:57:35:53:ca:
a2:82:ab:ef:bd:c0:6c:76:c0:d6:43:7b:45:62:2c:
9d:41:fe:a2:7e:0d:a8:72:6b:01:73:3b:e8:e5:11:
a1:46:62:74:06:27:87:b6:5c:c5:b1:0e:46:e1:33:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:98:AD:62:F8:67:D3:F8:CA:10:F1:0F:FE:62:A2:4B:C7:33:B1:7F
X509v3 Authority Key Identifier:
keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7e:02:83:b0:ce:73:6b:c4:33:a1:a8:c0:b4:29:e9:67:3c:
49:93:5f:9b:11:d1:45:6d:27:20:fd:ea:be:f8:79:1c:e2:5b:
11:58:bd:f8:ee:29:02:2a:70:53:72:ed:d2:90:27:da:02:ec:
19:d3:f0:fe:b0:7d:22:5b:25:39:f3:89:a8:56:2a:d4:fb:9a:
7a:e0:17:1f:45:c1:9e:e2:0a:7a:e9:8a:1b:fb:71:99:b9:cf:
8e:1d:e2:b3:e1:94:7d:87:19:3f:45:ef:79:f2:4b:82:5e:12:
a5:8e:6f:33:71:d0:11:25:a6:2a:70:6c:fb:cd:e9:38:2f:f2:
f0:51:07:83:65:bb:72:82:1a:a0:14:fe:f6:8d:52:a3:c1:2d:
93:2d:c2:94:fe:e9:76:a7:76:e3:3b:89:a1:bd:eb:1a:08:71:
4f:33:e2:be:6c:5d:fd:f4:50:6e:61:26:d9:b5:34:71:4a:78:
9c:36:b2:d2:db:99:3b:fc:1f:f1:6d:e5:c3:d5:e6:10:53:b6:
4f:13:56:8a:ff:b4:0e:66:58:6a:55:11:20:82:7b:3c:b7:b0:
ce:05:a1:70:79:46:6c:66:c0:38:19:29:f9:6e:89:74:8e:4c:
97:d4:52:8d:12:2d:b6:d3:19:1b:b2:3b:18:cf:3e:e8:9b:7d:
d7:b9:43:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:23:30 2026 by rpki-client