
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
File: 1BA1ADD734797C0383628A8723DEBADA827B5B02.mft (raw, json)
Hash identifier: QZOA+4WceFKf8caGN3SwFU125llsOmbROjp3QNn0bJE=
Subject key identifier: BE:BF:C0:97:BB:0B:2F:55:3E:78:CC:90:9D:18:DE:81:4A:C8:64:6B
Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02
Certificate issuer: /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
Certificate serial: 4920650836E25F21B471FA4C3D2148F600EE6053
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
Manifest number: 0164
Signing time: Wed 25 Mar 2026 02:11:47 +0000
Manifest this update: Wed 25 Mar 2026 02:06:47 +0000
Manifest next update: Sat 28 Mar 2026 06:24:47 +0000
Files and hashes: 1: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: hjP0N7FVqxd5mdZscYDmp6xMH5tmWzueXb7HkGf6Xog=)
2: 1BA1ADD734797C0383628A8723DEBADA827B5B02.crl (hash: mL4mNvc7jo59mbN+xGGX/Xtj3F4EV6eKssptIumIO4U=)
3: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: JKPKSxtNr4roaOU1GUo5PklwixfLAP/k426kY4JyNts=)
4: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: GA6rUIyaqIB58eM6Y3Tv2tAamvlNcofAYPow7jpjhqA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl
rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 06:24:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:20:65:08:36:e2:5f:21:b4:71:fa:4c:3d:21:48:f6:00:ee:60:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
Validity
Not Before: Mar 25 02:06:47 2026 GMT
Not After : Mar 28 06:24:47 2026 GMT
Subject: CN=BEBFC097BB0B2F553E78CC909D18DE814AC8646B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:18:18:c1:19:ba:3a:06:86:25:ee:37:e2:
a8:5e:36:91:0d:48:a9:4b:fb:14:34:01:ec:df:8c:
e7:a9:0f:73:ef:c6:47:87:b1:6c:27:b7:28:c4:44:
01:23:16:a3:7a:a5:d6:72:c0:3a:1e:80:02:fc:10:
fd:8b:25:d3:56:7c:65:bc:86:07:30:2c:77:41:21:
10:ee:3a:71:18:71:68:89:02:57:fe:51:d3:3d:0a:
fa:5c:5c:bd:a5:3d:88:16:b2:bf:c1:6f:80:d5:2c:
ec:50:0d:ea:a3:0c:3f:30:0b:eb:d3:5f:13:08:a8:
3b:84:56:8b:80:df:7d:38:b1:3e:22:69:fb:19:d3:
14:84:42:c6:34:17:d7:3c:77:88:93:d8:fd:a6:8d:
5e:0f:d7:1b:4b:04:c4:00:11:bf:c2:b5:83:bc:47:
1d:3d:b5:3c:0b:72:cf:a7:59:c1:73:30:d9:7e:75:
79:1d:9e:f8:09:24:8c:4d:de:78:ed:59:c6:c9:03:
66:e1:c4:c6:36:08:ad:51:46:96:4b:f3:10:f1:1d:
ce:a1:49:61:b7:8b:b2:b3:49:c2:59:c0:f0:f2:aa:
e9:65:75:83:db:7a:2c:7b:61:b5:fc:bc:db:07:33:
20:53:f0:d5:e2:6b:01:51:b0:36:37:49:3e:9d:d2:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BF:C0:97:BB:0B:2F:55:3E:78:CC:90:9D:18:DE:81:4A:C8:64:6B
X509v3 Authority Key Identifier:
keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:99:64:b4:3a:c4:a9:f3:ed:7a:84:4a:96:37:e2:70:b7:c4:
c6:72:18:5b:e3:21:f5:f8:13:aa:4c:cc:11:df:cc:ed:71:20:
e7:90:b6:87:18:f9:22:a0:17:35:b4:90:e5:d6:fd:48:ce:1d:
7b:4c:54:1a:e5:07:ba:77:b6:71:f6:86:d8:90:6b:1f:a5:b2:
8d:15:9a:4f:05:6c:9b:45:56:91:97:3d:14:2c:11:3a:9c:b3:
0d:1a:39:9a:30:80:b9:83:f9:25:55:61:64:5b:ae:ad:70:d4:
52:4e:fa:08:5e:dc:37:9b:8a:a1:84:98:6e:3d:a1:43:ac:86:
ce:8d:21:bc:c1:d5:a2:35:38:5c:60:e5:cf:78:b9:09:94:4f:
ac:91:58:1c:6d:f5:fd:6f:9a:93:b8:d7:7f:75:8f:de:c8:d9:
d1:b2:2f:31:12:d4:48:d8:c4:d4:4c:63:5a:a9:9c:85:cf:e0:
e1:52:72:7a:20:26:67:69:1f:c1:c8:05:c9:f4:5c:7c:7f:75:
d5:8d:75:fc:2c:b5:9e:3a:45:66:ff:d3:48:c4:6a:c8:00:78:
fa:56:4a:c0:d3:93:3e:56:bf:5a:de:73:8e:1c:cf:c2:8e:09:
9b:e3:1b:bc:d0:52:3f:a9:53:ea:b2:2c:ce:5c:ec:05:f3:0a:
e6:8e:41:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:59:51 2026 by rpki-client