
$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft
File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json)
Hash identifier: XKH+VHKD5R7xQjlFOgnUXqg9XvEq3yVrwkBqlSLqiU8=
Subject key identifier: 1B:50:66:A1:51:A8:2D:D8:97:63:5A:28:E1:81:FB:7D:2C:48:EF:9C
Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB
Certificate issuer: /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB
Certificate serial: 46240F224716FAE310BC63A23D6C07F117F983DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft
Manifest number: 0307
Signing time: Wed 18 Mar 2026 21:02:44 +0000
Manifest this update: Wed 18 Mar 2026 20:57:44 +0000
Manifest next update: Sun 22 Mar 2026 08:51:44 +0000
Files and hashes: 1: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: I50L6fLYk4CKuNs+dzvTjSNTTF0/j4bYQTnbTFUipPQ=)
2: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 3wek+JTR4Gr3DKmUDawbdf/x7TASEspEnmo4iHcCsdk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl
rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 08:51:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:24:0f:22:47:16:fa:e3:10:bc:63:a2:3d:6c:07:f1:17:f9:83:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB
Validity
Not Before: Mar 18 20:57:44 2026 GMT
Not After : Mar 22 08:51:44 2026 GMT
Subject: CN=1B5066A151A82DD897635A28E181FB7D2C48EF9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:1e:06:16:1c:ae:52:4b:a9:12:de:80:56:
e0:4b:3a:a8:15:5d:4a:7c:4f:70:49:bf:b4:70:da:
b4:58:db:a0:3a:fe:f6:10:30:b2:50:ac:c3:4c:90:
80:70:3d:fb:8a:5f:e7:15:a2:4a:08:41:89:5e:71:
26:1b:cd:61:3e:90:28:9b:ca:43:f4:75:bf:ae:f2:
08:74:8c:7b:3b:8c:36:f2:31:ce:1b:c1:dd:ad:ee:
ef:0d:74:8e:c2:84:f7:00:9f:95:7c:a6:2b:1d:96:
73:04:cb:e1:e9:da:cd:42:25:fb:dc:89:bc:c8:cb:
7c:a1:b6:4b:b2:5f:72:48:9c:78:4c:ce:13:08:52:
0d:49:6e:29:88:31:2c:5b:1b:01:d5:50:ce:38:cb:
65:44:e3:a4:9a:c6:5a:f5:31:7b:6b:ff:07:ce:9d:
cc:53:22:49:72:90:f7:0f:d0:5d:cb:fc:af:cf:69:
04:59:37:84:9c:93:8b:0e:7b:87:da:41:07:e1:33:
90:00:b9:94:c5:56:4a:cc:40:01:3e:8e:62:54:51:
c0:f2:f9:ee:a0:87:42:e1:5a:fb:58:88:a7:2a:0f:
04:f3:72:d0:99:a6:ba:86:0f:60:00:4f:4c:91:71:
ae:d9:a6:a2:92:c3:60:bd:30:ce:63:c3:f1:6a:21:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:50:66:A1:51:A8:2D:D8:97:63:5A:28:E1:81:FB:7D:2C:48:EF:9C
X509v3 Authority Key Identifier:
keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:db:36:d8:20:f1:8e:fa:69:e3:ab:29:bd:99:7e:27:ce:69:
9a:42:b7:b7:48:fb:1a:7f:db:61:3b:49:d6:9c:af:e5:bf:63:
f8:68:52:5d:50:00:04:f9:92:1a:e4:2e:5e:d3:62:a6:db:1f:
a3:47:63:a4:29:19:b0:89:4c:73:4c:e7:ac:7a:0e:58:00:1c:
56:2f:d7:86:10:30:12:4f:9f:a9:21:0d:92:85:8f:a1:20:77:
6e:e7:74:3c:27:8c:60:3b:8c:9a:97:0a:97:9b:6c:c0:a3:69:
d9:39:07:1e:42:b6:12:26:85:1f:8f:da:ad:f1:4b:8a:77:3f:
15:63:ad:b3:e3:80:6f:55:24:87:25:09:9b:47:82:00:24:db:
3b:43:1a:80:e8:b9:3b:f7:a3:f9:d3:d5:f6:8a:2c:82:b8:16:
ec:14:75:ea:2e:18:c4:77:3f:dc:08:11:7f:ed:eb:23:f0:49:
52:fc:ea:f2:43:63:9f:13:4f:8f:b0:d0:ed:d0:0f:4c:cb:bd:
33:9b:61:58:9b:35:7a:9a:2b:5e:76:95:a6:c7:fe:68:bd:b0:
5d:92:03:29:c7:b4:9e:93:01:be:cc:2a:63:a5:ec:a5:48:0e:
af:2d:86:4f:cb:08:e1:29:de:98:c0:e5:bb:8f:fa:ff:10:8e:
d8:2c:21:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 21:57:57 2026 by rpki-client