
$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
File: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft (raw, json)
Hash identifier: PY1Uxeo6XX0f2MsITJt0XBDWxuhoZOfPSdmWYtRwe8o=
Subject key identifier: 9B:85:E3:AB:A0:F3:6D:E0:E0:E3:82:98:5A:39:DD:34:5B:F9:67:CB
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Certificate issuer: /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial: 2071CC773DC947E461CCA9FF22E653CCB6D1F59C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
Manifest number: 0576
Signing time: Thu 16 Apr 2026 16:12:46 +0000
Manifest this update: Thu 16 Apr 2026 16:07:46 +0000
Manifest next update: Sun 19 Apr 2026 17:46:46 +0000
Files and hashes: 1: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: TQgzpMcLfaNgOb2UQ22DmepvwTBX2ZphizKn7sBXlfU=)
2: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: /ZSyzzH4osQQo8OEYTUKDqHS0TOIh680hRVxT7riSK4=)
3: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl (hash: gT+Bqp6+RSLjr8FeZLGhDO30JMK6y2k6V/WWLBd0Vyw=)
4: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: q6kGIkTw1IEwFZ8E1rrhCKF72eKLzmU0iFvN+CMeGms=)
5: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: duzHqAm6QedJQSgIxWwqnRHJ98BpWQZp6Vy/UDaP+2w=)
6: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: WtJvSkSMcWIFCYDWJoeYFOWIHYYIU2e63ZAjyF2Lb8o=)
7: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: sLI9kyH4UUKtJ48DuSDvIEt/kI9PlelTvUCSLOep6GI=)
8: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: a8mTP5wqsK0/6i33hi9F2fx0vcrLrr8F0sXVOsBm+uM=)
9: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: 6r7ytzVqOZCu9ltnazdoDFZyu1sN5kdyWtk6OiFCZME=)
10: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: LN/QrtLQN7eBHDeVxv+de8QzLZrhiGE5e9eCTFW2W9s=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 17:46:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:71:cc:77:3d:c9:47:e4:61:cc:a9:ff:22:e6:53:cc:b6:d1:f5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Validity
Not Before: Apr 16 16:07:46 2026 GMT
Not After : Apr 19 17:46:46 2026 GMT
Subject: CN=9B85E3ABA0F36DE0E0E382985A39DD345BF967CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f7:e2:f1:83:81:83:59:80:fb:e6:84:38:99:
fd:aa:03:be:ad:3d:3e:48:3a:ba:65:a3:9b:a5:6f:
87:41:ce:1d:de:61:5a:29:c0:47:11:b2:6c:13:0d:
cc:a4:ad:7f:02:14:6b:0e:77:02:76:16:58:16:2f:
d2:21:03:03:d7:a6:0c:f5:2d:ea:9d:37:ba:59:5b:
59:2a:59:f7:b6:fd:b6:c5:ab:5b:79:ea:9f:8b:9f:
77:58:50:97:6e:b0:25:a8:6e:bc:f9:3c:0a:bf:a0:
b2:01:20:49:61:cd:eb:32:8a:e6:6d:9f:ef:de:f0:
10:9f:f2:9a:de:7b:cc:08:a6:c3:22:ba:76:8b:c8:
41:72:9e:44:33:a2:fd:c8:db:b4:54:0e:40:c4:01:
80:cc:ae:7f:ad:b1:01:ac:79:1d:26:b4:4e:79:ee:
9f:da:cb:a9:2a:cd:89:73:a3:9a:ac:f8:a3:4b:1c:
37:31:4d:1a:e6:b2:77:0c:fd:70:b5:b3:6a:72:17:
7d:37:4c:dc:bd:e3:a2:0f:e9:67:e4:de:b1:d6:45:
57:ef:a8:d7:c3:c3:bc:3f:96:97:5a:57:1f:dc:01:
c8:38:e0:9e:d3:47:e1:4e:c2:95:85:26:0e:59:b6:
ae:85:52:6e:1c:1f:bf:4e:a0:e3:d6:28:c1:f3:56:
dd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:85:E3:AB:A0:F3:6D:E0:E0:E3:82:98:5A:39:DD:34:5B:F9:67:CB
X509v3 Authority Key Identifier:
keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:31:17:4b:af:4c:fa:11:af:84:d3:59:2d:99:5c:dd:46:a6:
4f:69:98:f7:eb:a7:c5:72:ec:d3:62:6c:41:1e:2c:7f:7a:19:
cc:f8:45:44:6c:70:61:94:b2:d5:d9:79:b6:45:41:a7:0d:91:
8e:f3:e0:85:f7:19:a0:e9:9a:90:90:85:87:e5:36:e4:c1:25:
d5:17:a6:d2:97:9e:fc:75:58:3e:00:1d:5d:59:57:d7:1a:7a:
9d:77:45:ea:93:56:15:d2:d5:4c:3c:7c:dc:41:4b:f8:c3:85:
e0:a6:fd:a6:47:d1:ec:4c:ce:7b:92:fe:6a:46:eb:13:3f:e6:
4c:38:c0:21:7e:61:9b:0d:b4:90:60:7f:b0:7f:de:c9:70:e0:
39:3c:d7:ab:63:3e:84:25:47:9a:ed:24:05:2f:31:ac:35:a2:
0f:85:76:d1:45:65:e8:b9:a2:b6:f2:8e:68:0f:f8:98:03:52:
44:25:69:ef:63:de:0f:b1:1a:3d:6f:f6:fc:40:ee:53:f3:8b:
3a:17:5c:c4:02:1e:3d:60:2b:f5:cb:36:90:25:36:5f:4e:df:
c6:81:99:0e:70:6c:2c:8e:b4:f2:bd:bb:89:dc:e2:cf:e5:6a:
17:b8:d6:9b:1d:fb:fe:3b:b1:cf:d3:7e:c5:5e:f0:11:9d:86:
c9:f5:97:ce
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIHHMdz3JR+RhzKn/IuZTzLbR9ZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJB
RkU4QUEyQjAeFw0yNjA0MTYxNjA3NDZaFw0yNjA0MTkxNzQ2NDZaMDMxMTAvBgNV
BAMTKDlCODVFM0FCQTBGMzZERTBFMEUzODI5ODVBMzlERDM0NUJGOTY3Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm9+Lxg4GDWYD75oQ4mf2qA76t
PT5IOrplo5ulb4dBzh3eYVopwEcRsmwTDcykrX8CFGsOdwJ2FlgWL9IhAwPXpgz1
LeqdN7pZW1kqWfe2/bbFq1t56p+Ln3dYUJdusCWobrz5PAq/oLIBIElhzesyiuZt
n+/e8BCf8pree8wIpsMiunaLyEFynkQzov3I27RUDkDEAYDMrn+tsQGseR0mtE55
7p/ay6kqzYlzo5qs+KNLHDcxTRrmsncM/XC1s2pyF303TNy946IP6Wfk3rHWRVfv
qNfDw7w/lpdaVx/cAcg44J7TR+FOwpWFJg5Ztq6FUm4cH79OoOPWKMHzVt0xAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUm4Xjq6DzbeDg44KYWjndNFv5Z8swHwYDVR0j
BBgwFoAUvwduokpozxUsMjx6Pf0/kq/oqiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTBkYTQ0Ny1hMTM4LTQ2MjUtYTQyMC1hNzExYWMyNDM1MTkvMC9CRjA3NkVBMjRB
NjhDRjE1MkMzMjNDN0EzREZEM0Y5MkFGRThBQTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJBRkU4
QUEyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUwZGE0NDctYTEzOC00NjI1LWE0
MjAtYTcxMWFjMjQzNTE5LzAvQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNG
OTJBRkU4QUEyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACYxF0uvTPoRr4TTWS2ZXN1Gpk9pmPfrp8Vy
7NNibEEeLH96Gcz4RURscGGUstXZebZFQacNkY7z4IX3GaDpmpCQhYflNuTBJdUX
ptKXnvx1WD4AHV1ZV9caep13ReqTVhXS1Uw8fNxBS/jDheCm/aZH0exMznuS/mpG
6xM/5kw4wCF+YZsNtJBgf7B/3slw4Dk816tjPoQlR5rtJAUvMaw1og+FdtFFZei5
orbyjmgP+JgDUkQlae9j3g+xGj1v9vxA7lPzizoXXMQCHj1gK/XLNpAlNl9O38aB
mQ5wbCyOtPK9u4nc4s/lahe41psd+/47sc/TfsVe8BGdhsn1l84=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:49:10 2026 by rpki-client