
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft
File: B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft (raw, json)
Hash identifier: FTs3Qx2OYv2mwXNmsBMcqkDGWfM8QBgIpSBY96eomeU=
Subject key identifier: 4C:2E:A9:8B:70:A4:18:32:4F:67:FB:DE:0A:3F:53:FF:36:17:27:52
Authority key identifier: B1:B8:0E:10:A5:B0:AA:BA:24:92:9E:33:CD:EF:91:29:59:A6:E4:FD
Certificate issuer: /CN=B1B80E10A5B0AABA24929E33CDEF912959A6E4FD
Certificate serial: 42204FDCCC5CE2EE097DD98B33C59F32D21C520D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 19:44:51 +0000
Manifest this update: Fri 25 Sep 2026 19:39:51 +0000
Manifest next update: Sat 26 Sep 2026 21:25:51 +0000
Files and hashes: 1: B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.crl (hash: vjCxvIfuHBtV7M8WIwJ2kdAGLIyxPfyDK7cTYik05bE=)
2: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: guRu9prdmx+ch78kv34z9AVOzBlrJNlWUYpJ/aaI38s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.crl
rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:20:4f:dc:cc:5c:e2:ee:09:7d:d9:8b:33:c5:9f:32:d2:1c:52:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1B80E10A5B0AABA24929E33CDEF912959A6E4FD
Validity
Not Before: Sep 25 19:39:51 2026 GMT
Not After : Sep 26 21:25:51 2026 GMT
Subject: CN=4C2EA98B70A418324F67FBDE0A3F53FF36172752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:5c:75:10:23:1c:bd:77:62:65:dd:2c:ac:
ed:85:82:d3:bb:5f:7a:91:66:b3:98:4d:e3:85:98:
33:92:1f:6c:37:01:3f:07:2b:76:b0:54:8a:fa:9a:
c7:c6:b8:63:9c:2f:e6:34:62:90:71:d8:04:f0:a0:
22:5c:6a:be:1b:6c:5c:b9:fa:fa:ee:01:1d:e0:25:
bc:ef:b9:23:aa:f6:3c:70:37:03:10:d7:ef:b9:61:
43:75:cb:1f:17:a4:21:f3:ad:bc:7b:0a:61:8f:ae:
9e:b0:93:3c:18:62:41:0d:44:ee:c2:c0:77:7d:02:
d4:e3:96:d8:bc:62:c5:40:90:22:c4:aa:2b:a1:b0:
2b:02:e4:36:3e:4c:92:f0:71:00:63:33:cc:41:4c:
73:ac:52:05:6d:a9:18:3e:29:6b:5f:0c:fb:e8:f6:
07:a9:ba:6f:de:52:f1:d3:7d:da:c4:e8:72:d4:56:
f8:3a:9f:36:6d:57:e0:cc:96:a2:34:1c:b5:16:c5:
58:f9:57:e7:f0:c1:07:07:94:77:63:a8:4d:b3:5d:
03:18:25:f3:83:d7:ce:d2:94:92:0a:d4:d4:84:62:
75:80:87:44:c2:5c:a0:5c:07:0a:ec:bf:80:ff:03:
63:a2:93:06:2d:a6:d6:92:3b:34:79:3b:67:75:3a:
2e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2E:A9:8B:70:A4:18:32:4F:67:FB:DE:0A:3F:53:FF:36:17:27:52
X509v3 Authority Key Identifier:
keyid:B1:B8:0E:10:A5:B0:AA:BA:24:92:9E:33:CD:EF:91:29:59:A6:E4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:dc:00:c9:46:32:f7:06:bd:fd:fc:b2:6a:ee:12:b6:8a:45:
31:4e:cd:04:e1:5d:29:98:b1:36:6c:0b:24:02:a7:50:5e:aa:
3e:05:33:46:c2:29:b4:af:90:c8:26:30:66:24:0f:2b:48:23:
6a:36:75:b2:a0:ed:a9:ed:e3:c1:d7:da:2b:49:6b:69:44:60:
67:7d:20:3c:56:4a:c4:b6:6c:b1:98:63:69:97:67:5e:a7:b5:
25:a1:b8:e5:e6:11:fd:6a:0e:f8:11:f0:6f:e1:4b:cf:79:93:
8b:3a:ed:d5:ec:da:23:93:3a:f0:c8:23:ea:a0:b7:b6:0c:b3:
41:29:4c:d7:7f:a8:5b:5f:7f:12:fd:fd:76:81:3d:fa:60:8e:
26:af:79:fa:74:2a:5e:87:3a:b0:29:87:40:3f:4f:25:5a:65:
61:d4:79:ec:51:3c:f3:78:69:ec:32:44:9f:29:77:bf:86:e3:
3d:7e:0d:e7:18:94:ff:92:93:2c:4e:d1:63:14:26:cf:b3:1f:
19:41:10:78:96:0b:e2:86:0f:b6:90:e7:e1:66:1e:fd:cf:f3:
e8:4e:6d:0b:a4:d2:bf:6d:2e:eb:bc:b1:78:07:47:a8:bc:3c:
58:62:82:a9:d3:c4:85:6d:ce:c0:d7:62:c3:e4:fa:43:bd:c7:
15:e5:e3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:44:33 2026 by rpki-client