
$ rpki-client -vvf repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft
File: B1F0A7585ED1882783C6AF802B826607ABB92671.mft (raw, json)
Hash identifier: diddQHtt4zX5w0DyprpUr7hvNiOpwNC1ki20Vwfr9Cw=
Subject key identifier: 64:20:41:CC:31:6B:A8:1B:BD:B7:98:BA:E9:CF:31:3E:8A:83:81:FC
Authority key identifier: B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71
Certificate issuer: /CN=B1F0A7585ED1882783C6AF802B826607ABB92671
Certificate serial: 2C2530BDB17BFBBFC64411B8271A3A28F5C68FD0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft
Manifest number: FB
Signing time: Thu 26 Mar 2026 01:42:38 +0000
Manifest this update: Thu 26 Mar 2026 01:37:38 +0000
Manifest next update: Sun 29 Mar 2026 07:53:38 +0000
Files and hashes: 1: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: W6x4NYRtAG+Mf6fIyPCm/XsF8bO9fqqOCjC78Il5Kyw=)
2: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: HwU0+K4pKIjqZ0rwzIAxU1cLuPfwooIJjDIs7VIOPKk=)
3: B1F0A7585ED1882783C6AF802B826607ABB92671.crl (hash: nCOruZJOYcDcjvfXa20rXV72Mn4xtYZVMa8Nxc/4WpE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl
rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 07:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:25:30:bd:b1:7b:fb:bf:c6:44:11:b8:27:1a:3a:28:f5:c6:8f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F0A7585ED1882783C6AF802B826607ABB92671
Validity
Not Before: Mar 26 01:37:38 2026 GMT
Not After : Mar 29 07:53:38 2026 GMT
Subject: CN=642041CC316BA81BBDB798BAE9CF313E8A8381FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:1a:c7:65:c4:b2:af:3e:fa:0d:c2:86:82:
e7:8c:d3:3f:41:9e:31:8c:11:c1:6a:a0:0f:c8:b1:
a1:80:8e:33:ff:2b:87:13:7b:cf:fe:3b:51:ec:47:
8f:a1:86:c6:1e:52:96:0b:e0:26:1b:53:ae:89:a4:
29:17:ad:e4:bf:61:ed:40:4a:e1:e1:cf:99:85:e3:
10:9d:05:81:4d:4a:2d:e0:e9:3e:cf:6d:76:c9:9b:
f2:f7:5e:f5:88:7a:67:29:d8:ae:f8:08:26:ad:a1:
cc:18:31:1c:01:97:60:08:ab:25:ac:20:d6:9a:49:
c3:27:63:ba:59:8a:79:4d:ac:dc:a5:cd:ea:fc:71:
d2:12:b3:ac:c7:b8:14:aa:56:eb:dc:4f:87:9a:ad:
0c:58:78:6c:d4:12:c5:a9:f6:5d:44:c9:b4:8a:11:
2f:03:f0:88:a6:87:7e:08:e7:43:4b:ac:02:ee:2f:
77:cf:32:50:4f:75:61:3f:ee:6c:50:fc:3e:64:0a:
ed:7c:6e:19:79:7b:fa:08:e4:dd:bf:a8:ac:35:e3:
69:65:f3:17:6d:b5:61:50:88:0e:52:23:63:c7:57:
64:e5:07:d4:ec:17:e9:b2:12:89:a5:a2:72:ae:ed:
1b:64:53:fb:04:df:ef:73:7a:ca:de:f3:50:9a:a9:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:20:41:CC:31:6B:A8:1B:BD:B7:98:BA:E9:CF:31:3E:8A:83:81:FC
X509v3 Authority Key Identifier:
keyid:B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:54:10:6c:c3:b6:9c:ab:5c:f6:2d:88:cb:11:4f:4a:2f:ab:
f3:f9:0c:dd:6d:24:48:21:86:0c:f3:8d:ed:b1:2b:04:13:30:
95:b4:c0:a3:dc:dc:c1:8b:7b:99:bb:11:f5:dd:5c:a2:58:f1:
c9:a4:b4:94:ff:b8:fd:af:47:86:e9:04:51:9e:65:4d:df:99:
79:f5:d0:8a:67:52:6a:b8:55:37:98:ff:f8:d0:c9:8d:d8:2a:
9f:fc:1c:9b:61:22:43:c3:21:ad:02:e2:0f:47:bd:2e:66:82:
e1:19:14:63:99:15:bb:77:a1:ea:90:76:32:a9:dc:28:07:aa:
b5:b2:1c:00:8b:99:82:7b:49:f8:37:7f:49:2a:f9:55:82:27:
2f:e7:39:60:6e:33:7b:16:1c:d9:05:66:44:a1:1b:41:48:25:
31:9c:4c:a3:d3:d8:32:38:4e:b5:c5:f8:41:19:8d:4d:92:29:
45:54:31:eb:3a:5d:2c:d1:05:f0:75:b4:f3:37:a2:73:64:f9:
f2:d8:eb:1e:a2:7d:6b:b4:79:b4:8d:cf:41:a1:d3:70:a7:a3:
55:a7:b5:6e:cf:3e:16:1e:b6:11:0e:27:18:ad:0b:e6:20:05:
0e:22:a2:c4:00:70:4a:53:b1:25:6f:7b:26:5a:50:04:2c:0f:
34:d2:9b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:27 2026 by rpki-client