
$ rpki-client -vvf repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft
File: B1F0A7585ED1882783C6AF802B826607ABB92671.mft (raw, json)
Hash identifier: Yk6bfkBqi/AAnj5Kvwc8SjAQJ1evBRy7g0HFEK0yw04=
Subject key identifier: 7B:0E:51:B6:E7:D6:F0:AC:AB:08:E1:B8:A4:DF:BB:E8:39:47:A2:D9
Authority key identifier: B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71
Certificate issuer: /CN=B1F0A7585ED1882783C6AF802B826607ABB92671
Certificate serial: 02C02B136F7C21A2C546FF5644A57D25E072C440
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft
Manifest number: F2
Signing time: Fri 06 Mar 2026 07:02:37 +0000
Manifest this update: Fri 06 Mar 2026 06:57:37 +0000
Manifest next update: Mon 09 Mar 2026 13:23:37 +0000
Files and hashes: 1: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: W6x4NYRtAG+Mf6fIyPCm/XsF8bO9fqqOCjC78Il5Kyw=)
2: B1F0A7585ED1882783C6AF802B826607ABB92671.crl (hash: 2We/WUqhXQiVAxIzS11MY0Byg6AR3IpiZhLYvd+YKmI=)
3: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: HwU0+K4pKIjqZ0rwzIAxU1cLuPfwooIJjDIs7VIOPKk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl
rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c0:2b:13:6f:7c:21:a2:c5:46:ff:56:44:a5:7d:25:e0:72:c4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F0A7585ED1882783C6AF802B826607ABB92671
Validity
Not Before: Mar 6 06:57:37 2026 GMT
Not After : Mar 9 13:23:37 2026 GMT
Subject: CN=7B0E51B6E7D6F0ACAB08E1B8A4DFBBE83947A2D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:62:f6:ce:0d:e8:77:b9:60:80:16:37:40:
8f:e1:45:70:40:5b:80:f1:4f:48:00:19:7c:c2:fd:
d3:5c:3a:19:20:ab:81:f4:83:e8:9d:5f:b7:f5:31:
33:5c:bb:be:8f:5f:f1:d6:1c:a2:df:fc:cc:77:6b:
bf:54:11:e0:ab:3e:61:c0:4e:85:de:b9:0d:21:96:
60:d3:bc:65:6f:06:e1:bc:ec:3a:20:0a:e5:50:11:
ca:59:9b:1d:5b:e5:6f:c7:de:b4:aa:66:80:64:e7:
ee:72:74:5c:be:a1:30:f1:c9:7d:95:31:f7:8f:df:
9d:33:55:a9:44:99:13:3c:81:a9:c9:0a:36:67:8a:
34:2b:c5:39:36:12:94:d0:08:4f:f9:a5:21:6d:8d:
b1:4d:8b:c5:bb:7e:89:35:c5:02:a7:01:e2:c6:4b:
56:f7:16:7b:4a:80:38:a8:4c:36:95:00:c0:82:76:
c8:9d:0c:ae:33:57:e9:12:7b:5c:84:47:33:a9:82:
2f:fe:cd:26:12:e6:42:ab:30:3d:d6:99:a8:9d:1a:
63:ee:ca:b2:9b:4a:f0:08:01:30:81:29:6a:e1:9e:
2c:3b:2b:6d:22:40:2b:09:9e:ee:1e:37:a3:73:5c:
9b:10:ca:51:60:62:28:06:a0:d1:30:10:e2:19:d5:
f0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0E:51:B6:E7:D6:F0:AC:AB:08:E1:B8:A4:DF:BB:E8:39:47:A2:D9
X509v3 Authority Key Identifier:
keyid:B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ff:86:d9:97:85:ac:95:aa:b3:d0:5c:aa:d8:94:df:34:d9:
27:45:12:0b:e3:88:ed:0a:58:45:d3:6f:55:ec:d2:68:ce:b4:
e7:e2:48:8d:83:b6:90:83:8e:67:a3:fb:36:3e:6e:1a:95:5b:
98:e5:2c:6e:97:23:2d:aa:d1:f1:b0:ad:2c:7b:6b:ef:44:86:
76:98:6b:c1:88:19:13:3f:74:ff:21:d5:06:f2:1a:6d:a5:ec:
46:c5:9f:f0:38:b2:c2:61:b7:3b:9e:46:90:15:3b:4a:f7:78:
81:55:ab:68:2a:c3:4e:18:29:5f:48:cb:71:44:a6:3c:18:9d:
b3:e0:6e:85:c3:cd:bb:a1:05:39:69:36:b5:e0:ef:13:0c:7e:
60:5e:80:94:d1:16:a6:84:af:af:00:78:f7:e4:7a:ac:97:20:
d7:e7:e7:d8:65:43:21:03:e0:de:06:94:c7:f7:3f:a9:1a:2f:
cb:3e:0f:c4:d3:95:27:a2:cd:ca:ff:a7:88:de:4c:38:28:f5:
6b:a5:0d:70:eb:88:3d:fc:50:0c:7a:65:d5:b1:87:58:5f:0b:
e4:22:e6:6f:10:11:99:11:4b:83:6e:bd:8b:05:b7:24:f1:f3:
c4:97:ff:ff:7c:68:69:b1:02:01:94:e4:5e:49:4b:c5:d8:dd:
7c:89:df:0d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAsArE298IaLFRv9WRKV9JeByxEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdB
QkI5MjY3MTAeFw0yNjAzMDYwNjU3MzdaFw0yNjAzMDkxMzIzMzdaMDMxMTAvBgNV
BAMTKDdCMEU1MUI2RTdENkYwQUNBQjA4RTFCOEE0REZCQkU4Mzk0N0EyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyh2L2zg3od7lggBY3QI/hRXBA
W4DxT0gAGXzC/dNcOhkgq4H0g+idX7f1MTNcu76PX/HWHKLf/Mx3a79UEeCrPmHA
ToXeuQ0hlmDTvGVvBuG87DogCuVQEcpZmx1b5W/H3rSqZoBk5+5ydFy+oTDxyX2V
MfeP350zValEmRM8ganJCjZnijQrxTk2EpTQCE/5pSFtjbFNi8W7fok1xQKnAeLG
S1b3FntKgDioTDaVAMCCdsidDK4zV+kSe1yERzOpgi/+zSYS5kKrMD3WmaidGmPu
yrKbSvAIATCBKWrhniw7K20iQCsJnu4eN6NzXJsQylFgYigGoNEwEOIZ1fDTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUew5RtufW8KyrCOG4pN+76DlHotkwHwYDVR0j
BBgwFoAUsfCnWF7RiCeDxq+AK4JmB6u5JnEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ODkxMzg5My01ZjY0LTRhNWUtYThkMi01ZDUxZWJkZTQ3M2YvMC9CMUYwQTc1ODVF
RDE4ODI3ODNDNkFGODAyQjgyNjYwN0FCQjkyNjcxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdBQkI5
MjY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4
ZDItNWQ1MWViZGU0NzNmLzAvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2
MDdBQkI5MjY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGf/htmXhayVqrPQXKrYlN802SdFEgvjiO0K
WEXTb1Xs0mjOtOfiSI2DtpCDjmej+zY+bhqVW5jlLG6XIy2q0fGwrSx7a+9EhnaY
a8GIGRM/dP8h1QbyGm2l7EbFn/A4ssJhtzueRpAVO0r3eIFVq2gqw04YKV9Iy3FE
pjwYnbPgboXDzbuhBTlpNrXg7xMMfmBegJTRFqaEr68AePfkeqyXINfn59hlQyED
4N4GlMf3P6kaL8s+D8TTlSeizcr/p4jeTDgo9WulDXDriD38UAx6ZdWxh1hfC+Qi
5m8QEZkRS4NuvYsFtyTx88SX//98aGmxAgGU5F5JS8XY3XyJ3w0=
-----END CERTIFICATE-----
Generated at Sat Mar 7 17:50:34 2026 by rpki-client