
$ rpki-client -vvf rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
File: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft (raw, json)
Hash identifier: UKx2IhhbxlMYiPbJ1Qho1dga6fzOc2WZRySXDC1oiy0=
Subject key identifier: 19:18:3A:86:32:0C:E1:AD:C3:02:E9:5F:5B:F6:74:3C:FC:F4:76:22
Authority key identifier: 0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F
Certificate issuer: /CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F
Certificate serial: 05CBFA8CC29C9B1B621C48B2D08F5C542082B172
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 14:37:53 +0000
Manifest this update: Thu 23 Jul 2026 14:32:53 +0000
Manifest next update: Fri 24 Jul 2026 18:11:53 +0000
Files and hashes: 1: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: 6eZrQcS7fk+urKWjqhBrdX4ASTj5STJSLSE2pWSJoPQ=)
2: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl (hash: alvAjfb6GRa5TeomisAuHHzuFGOq/6LB7tSgGXnMrtI=)
3: 3130332e3136302e31352e302f32342d3234203d3e20313431363130.roa (hash: FeuEPBSyh4088t58wEF7WYPlFCQyhRPORfmVK/BUUf4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl
rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:cb:fa:8c:c2:9c:9b:1b:62:1c:48:b2:d0:8f:5c:54:20:82:b1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F
Validity
Not Before: Jul 23 14:32:53 2026 GMT
Not After : Jul 24 18:11:53 2026 GMT
Subject: CN=19183A86320CE1ADC302E95F5BF6743CFCF47622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:7f:0d:92:87:4c:f9:70:4f:b1:3e:7b:2f:
9d:2c:1c:a0:15:ba:99:79:9a:1d:aa:b5:02:ba:98:
2c:3c:ac:df:09:3c:35:a7:b9:84:d6:23:f6:8e:59:
28:e3:33:2e:b4:52:49:9e:d5:63:3f:12:6f:eb:84:
69:27:ff:c5:9d:49:eb:d7:a3:4f:ac:e1:39:30:ed:
95:d4:fc:6d:f0:ed:4b:b3:8b:d6:82:d4:5f:32:bf:
50:7f:93:7b:1f:93:e7:48:95:0c:52:61:73:c9:0f:
fe:82:72:7b:db:84:5d:9c:bf:a9:2b:86:3c:b8:b2:
45:9d:dc:1a:d7:0c:93:64:48:b6:87:85:99:ba:01:
89:05:ab:19:f4:fd:45:ec:c2:b4:4e:05:6f:e8:06:
e3:39:2a:c0:a6:db:5a:ff:42:e9:ba:11:dd:73:6d:
c5:d7:51:46:bc:24:56:b7:d3:f5:bf:13:e5:91:41:
97:24:99:10:91:d9:d0:a4:80:af:29:14:9e:e9:f8:
bd:55:e8:b4:2f:3a:79:f3:7c:30:38:a3:a6:4d:30:
a5:ee:5f:f5:b2:6d:50:3c:de:be:1b:a5:67:51:2c:
78:0f:4f:d8:ba:a7:cc:f6:52:89:8f:47:79:2d:f4:
04:40:8f:34:73:88:b8:e7:09:4e:c1:53:35:de:85:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:18:3A:86:32:0C:E1:AD:C3:02:E9:5F:5B:F6:74:3C:FC:F4:76:22
X509v3 Authority Key Identifier:
keyid:0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:81:e2:77:8f:93:12:4d:ca:20:5a:c4:c9:77:50:e6:be:70:
6a:dd:f2:8b:6f:40:aa:3a:c4:94:72:d8:38:45:e2:c7:80:4a:
e2:c0:e8:6e:52:a1:ac:f4:14:5a:77:b9:0b:c8:ef:9e:62:ba:
3f:ba:10:3e:35:d5:f4:d4:67:21:b4:c8:0f:b3:e5:66:36:61:
bd:31:11:73:2a:c2:ba:22:6d:12:b8:1a:9c:26:59:05:06:f8:
7b:76:f0:fa:6f:e1:39:56:1f:65:89:e7:69:60:f2:03:7a:1c:
71:63:d0:c5:49:9e:88:f8:69:ba:ee:9b:56:16:e4:b8:a3:58:
e6:71:15:ec:07:aa:ec:04:ab:3d:71:ad:3d:d5:36:d7:86:7a:
fa:ad:70:02:cb:b1:33:32:b5:64:81:46:f0:25:88:42:8f:1f:
12:98:2d:48:d6:6e:01:b9:d7:00:e3:33:86:24:09:8c:cf:05:
e3:4e:9a:75:d8:01:29:00:74:bf:39:6c:bc:ad:c0:80:5d:a3:
ce:90:04:e4:6d:95:10:2a:8e:2e:ab:48:e9:d4:6d:b0:6f:17:
5a:01:b8:25:68:44:50:dc:6a:ad:c8:40:1a:9d:97:26:bc:5c:
46:fe:e3:7e:f5:fd:63:34:63:42:96:24:ef:60:17:7b:ae:6c:
78:8d:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:45 2026 by rpki-client