
$ rpki-client -vvf rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft
File: 2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft (raw, json)
Hash identifier: Q2F0g4FbNid30fvEz2sLFGjKh+ONCTzJa0tRy0MPdqY=
Subject key identifier: 1C:AC:7F:07:AD:45:5E:5C:18:92:6B:70:92:3E:C5:2D:BD:6C:7B:57
Authority key identifier: 2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4
Certificate issuer: /CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4
Certificate serial: 29EAB8DA4ABC75595EB6A5E59624565399DDCDA0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 21:55:02 +0000
Manifest this update: Tue 12 May 2026 21:50:02 +0000
Manifest next update: Wed 13 May 2026 22:06:02 +0000
Files and hashes: 1: 3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (hash: F/SUGaqSrvN9l0bA+VVFhafqTQPYwg8gVdDw3HwYYEg=)
2: 2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl (hash: p9wuyXzDOU89N4wTAhgUyz3edUEpjHAZhbNajEBnHRI=)
3: 3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (hash: I+MpxcufYeam5pksOgKwBNTewvekIqJYxt3l7XuR42Q=)
4: 3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (hash: SSJvSdL4NA21o/quBBkRYHXaBZlnNisf6npebpyix0w=)
5: 3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (hash: YEpJ9MshH91OnFv/znxkxIYveM8j2r6OPnOxKsElZA4=)
6: 3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (hash: cjqOi69hQ/DuVUUYy0IY+fZE1a6xIzJfgF06BFHgrL0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl
rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ea:b8:da:4a:bc:75:59:5e:b6:a5:e5:96:24:56:53:99:dd:cd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4
Validity
Not Before: May 12 21:50:02 2026 GMT
Not After : May 13 22:06:02 2026 GMT
Subject: CN=1CAC7F07AD455E5C18926B70923EC52DBD6C7B57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:1f:dd:d0:45:35:b3:8f:3a:77:13:9c:dd:
09:89:e8:c6:70:6b:eb:41:94:55:39:4f:4b:e3:cc:
83:06:40:c9:2a:8b:c0:a3:e0:e0:7f:0f:e6:e7:0b:
d9:6d:52:03:67:24:bd:f9:da:c9:5e:8a:21:17:82:
be:ab:2f:72:22:02:c0:0f:33:60:54:67:38:86:1e:
4a:0a:a0:ee:5f:c3:36:7e:e1:8d:30:be:1d:fb:8b:
5f:7f:4e:af:ad:a7:c5:4a:f5:56:d0:88:0c:31:af:
6c:8d:6d:43:d2:8a:2e:47:9f:64:e6:67:a1:11:5b:
7f:48:1f:de:d7:cc:f7:3a:57:41:0d:f3:d5:45:b8:
0f:68:00:8f:2e:a5:3b:6d:70:f4:3d:8b:23:13:c7:
6b:78:e2:1c:84:95:eb:09:f5:f9:9a:0e:57:91:05:
0d:83:00:ed:5f:85:8e:50:f8:a0:02:9e:e0:00:f0:
19:22:d1:da:72:d6:80:79:45:fd:00:c7:10:16:57:
19:5c:c1:b5:54:24:6e:ca:c5:51:50:10:cb:58:9c:
da:2b:59:3b:a0:6e:a4:c2:5b:f4:a5:19:f6:fd:3c:
14:d9:7f:cf:7d:de:e3:23:92:5d:87:18:91:7a:e6:
54:81:a5:8a:1c:48:5b:7e:06:63:d1:7f:f7:90:43:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AC:7F:07:AD:45:5E:5C:18:92:6B:70:92:3E:C5:2D:BD:6C:7B:57
X509v3 Authority Key Identifier:
keyid:2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ed:eb:63:35:ed:8d:72:e1:c3:b7:43:e7:d9:e7:a9:13:69:
12:0b:23:c0:25:dd:cf:e9:d6:6e:62:eb:50:72:4f:a5:16:7e:
36:b8:c6:15:10:63:51:13:57:2a:a2:cf:2c:2b:06:e3:c8:16:
8b:15:4b:68:36:b3:14:98:4f:25:16:0a:bc:8a:69:b3:44:47:
7a:d7:6f:46:d2:7e:c2:33:b5:30:e1:f0:12:37:3d:a6:54:b7:
8a:60:b3:41:7d:16:5d:d5:d4:2f:dc:6d:ad:7b:1c:56:d6:30:
2c:d1:f1:51:44:24:f3:8f:8c:7e:ea:f0:f5:40:28:5b:7e:86:
86:42:5c:d9:63:6b:d7:43:54:53:58:d1:f7:69:d3:2d:eb:7f:
45:04:a8:fb:24:59:78:06:0f:db:f2:52:7f:27:03:68:09:da:
6d:38:0a:65:c3:3f:6d:c0:2b:7c:16:83:60:ac:95:94:28:a9:
55:18:53:97:44:64:c9:3a:cf:72:37:c4:38:2a:62:8c:72:cc:
be:f2:8a:30:f5:2b:f8:a8:92:d9:1c:63:51:f6:0a:db:2c:8a:
ce:18:a8:3c:f2:48:47:9f:07:6a:52:d6:8f:6c:80:24:40:db:
49:f6:a1:f2:25:ca:bd:45:87:17:61:05:78:ba:82:9e:2c:3e:
e4:ef:c4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:49 2026 by rpki-client