
$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
File: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft (raw, json)
Hash identifier: eIQ/r37IKmB0NNEQHSAme0D/K4eN8ZH/vFQi6Sy4RZo=
Subject key identifier: 1A:C1:F4:4F:77:CF:DD:80:CC:09:61:A8:CB:BD:D6:E3:74:23:DC:48
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Certificate issuer: /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial: 0EC45FB9AE2C964D58EB87BDD155CAE0F629D33C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
Manifest number: 0561
Signing time: Sat 28 Feb 2026 12:12:39 +0000
Manifest this update: Sat 28 Feb 2026 12:07:39 +0000
Manifest next update: Wed 04 Mar 2026 00:08:39 +0000
Files and hashes: 1: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: 6r7ytzVqOZCu9ltnazdoDFZyu1sN5kdyWtk6OiFCZME=)
2: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: duzHqAm6QedJQSgIxWwqnRHJ98BpWQZp6Vy/UDaP+2w=)
3: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: sLI9kyH4UUKtJ48DuSDvIEt/kI9PlelTvUCSLOep6GI=)
4: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: a8mTP5wqsK0/6i33hi9F2fx0vcrLrr8F0sXVOsBm+uM=)
5: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: q6kGIkTw1IEwFZ8E1rrhCKF72eKLzmU0iFvN+CMeGms=)
6: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: WtJvSkSMcWIFCYDWJoeYFOWIHYYIU2e63ZAjyF2Lb8o=)
7: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: TQgzpMcLfaNgOb2UQ22DmepvwTBX2ZphizKn7sBXlfU=)
8: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: LN/QrtLQN7eBHDeVxv+de8QzLZrhiGE5e9eCTFW2W9s=)
9: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl (hash: pSOFFPfbsx0ZpQnQNiKj5wWwtvfLQaHgxTKhFdGqYD8=)
10: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: /ZSyzzH4osQQo8OEYTUKDqHS0TOIh680hRVxT7riSK4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 00:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:c4:5f:b9:ae:2c:96:4d:58:eb:87:bd:d1:55:ca:e0:f6:29:d3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Validity
Not Before: Feb 28 12:07:39 2026 GMT
Not After : Mar 4 00:08:39 2026 GMT
Subject: CN=1AC1F44F77CFDD80CC0961A8CBBDD6E37423DC48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:fc:1c:a5:d9:6c:45:9c:9b:a6:d4:31:2b:
cf:9a:7b:f9:fb:d6:5e:25:0e:98:dd:fa:87:8c:04:
50:14:ab:00:4e:e4:1a:48:38:37:7d:ff:8c:d7:1a:
01:2d:d0:e1:ac:e1:6c:3f:32:59:61:78:6e:d8:e2:
3e:6e:6a:fc:ff:0a:fe:d8:6c:b4:1c:ec:15:e6:4a:
20:e4:0a:ee:70:5a:a4:5c:d9:65:49:39:25:1e:b2:
79:c7:d0:b9:36:2a:7d:5d:76:f6:4a:c4:2d:3c:ab:
6d:42:a2:17:c2:36:bf:90:9d:e2:6b:2c:22:d0:ba:
e4:ba:b5:12:b0:a3:20:88:68:ae:93:39:7b:cc:d0:
e0:89:c6:1e:48:06:ee:2c:5f:7c:61:ab:61:b7:c9:
66:2a:2d:91:92:b8:ca:c9:b1:ac:c3:82:99:50:b1:
e6:b6:e0:8e:94:79:a0:de:c0:2a:3d:65:7b:62:e7:
f9:13:b0:87:37:49:23:6a:83:cc:36:4f:d9:96:7c:
a3:ec:8c:4e:17:fe:f5:c5:03:f9:57:e3:39:9f:73:
55:07:83:f5:09:a2:b1:b3:b3:7d:61:e8:a8:0b:a7:
ce:9c:5e:8d:c7:3a:36:c4:ea:15:d9:7a:64:b5:f8:
c1:48:88:2b:e6:74:03:9d:79:20:ed:c1:59:0d:2e:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C1:F4:4F:77:CF:DD:80:CC:09:61:A8:CB:BD:D6:E3:74:23:DC:48
X509v3 Authority Key Identifier:
keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a6:b0:79:43:b1:09:e4:2f:f6:39:4e:58:20:c1:04:04:d5:
23:b7:4e:c3:6d:74:5d:a6:f7:b5:a6:12:52:ef:bf:02:c6:5f:
8b:9c:7a:41:96:44:2b:ed:89:a0:3f:02:9b:78:78:37:bf:e9:
59:fd:8a:b7:22:a5:cb:57:e4:40:ad:aa:c1:28:24:9f:27:23:
c1:62:f7:ad:7e:8b:dc:44:98:79:d6:07:dd:d6:8d:8d:43:5b:
3e:5d:a8:cf:92:0e:c1:3c:0e:57:cb:6a:d9:da:5d:91:ab:c9:
86:df:e6:a4:d5:cc:b9:67:7f:2b:b3:1f:b5:63:90:e5:20:aa:
69:53:c2:e6:82:ff:76:ad:ed:f2:cc:e8:5d:ab:21:b6:75:d1:
ee:4f:1d:9a:a9:6b:d7:dc:12:50:37:e4:23:87:1a:5c:45:d1:
12:5a:78:c0:25:d1:b6:b9:64:9e:d2:4b:7d:42:9a:8d:cf:04:
98:1e:a1:cb:17:bf:d6:a1:72:66:d7:34:82:95:57:86:e0:3f:
31:4d:35:89:cc:b5:ef:99:e5:f2:65:84:d9:34:2a:5d:d3:16:
0d:b6:79:83:17:27:b1:9e:51:6f:18:f3:c4:ed:8a:4b:1f:50:
41:15:64:04:ce:92:38:95:87:19:53:f9:79:a2:8e:aa:c7:10:
14:2f:67:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:25 2026 by rpki-client