
$ rpki-client -vvf rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft
File: B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft (raw, json)
Hash identifier: X5WGZKXLh5QELjdSzoVgmmMHjg+EbNu+BSo0TXnf3uw=
Subject key identifier: C7:29:C0:7D:72:2B:F9:D3:EE:EC:10:63:AF:74:90:C4:72:47:E8:6A
Authority key identifier: B5:6B:A6:6A:CB:6B:28:A7:5C:F8:B9:26:29:F3:89:88:E6:BC:E5:F0
Certificate issuer: /CN=B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0
Certificate serial: 0CE194E5C31DEECE9E9832A2D11F3E19E6E5375C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 07:03:16 +0000
Manifest this update: Tue 12 May 2026 06:58:16 +0000
Manifest next update: Wed 13 May 2026 10:58:16 +0000
Files and hashes: 1: B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl (hash: Gb8mUzIpPFrFsU0TnnOIAeSNUxnFnx1kMQZC1rophic=)
2: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (hash: 4neWrZ2U5Ifz5ZV+5kk+4b2Vcx4ltU0Zb9JXxN912Dk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl
rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e1:94:e5:c3:1d:ee:ce:9e:98:32:a2:d1:1f:3e:19:e6:e5:37:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0
Validity
Not Before: May 12 06:58:16 2026 GMT
Not After : May 13 10:58:16 2026 GMT
Subject: CN=C729C07D722BF9D3EEEC1063AF7490C47247E86A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bd:3a:81:f0:14:72:1b:bf:66:1e:21:8a:5e:
95:be:bc:15:88:e5:59:22:8d:99:d9:26:39:fb:40:
03:6d:83:08:1e:3b:61:10:d5:39:4c:f4:9a:78:28:
f0:50:5a:aa:d7:15:fd:f4:e8:ff:36:c7:27:fc:01:
6f:17:fa:2b:7e:86:9c:6a:2b:34:a8:20:1e:d8:14:
ff:a8:e3:83:a0:91:c9:36:50:48:8c:d5:38:71:a1:
92:43:e3:3b:59:a5:bb:29:6a:af:a5:ec:fe:d7:1f:
9b:62:fa:e2:c5:1f:7e:54:0e:09:01:a8:62:ce:2b:
b4:ae:37:42:11:34:64:83:58:7c:00:0f:e4:85:35:
11:db:f1:e0:4b:c4:a9:90:0c:c3:7e:02:6e:e5:13:
35:b3:63:b3:9a:d2:91:6b:06:f8:75:28:95:32:2f:
c0:b1:f2:04:28:3e:53:9f:cc:02:89:6b:04:c2:55:
d5:23:82:1c:26:c8:08:c0:52:6f:8d:8e:1b:31:e1:
59:5a:21:82:ff:70:5a:97:06:57:24:bb:cc:1c:9e:
8b:91:bc:21:34:63:92:1c:da:65:c0:14:10:02:8d:
f6:34:13:ec:78:5a:cb:29:35:88:8a:87:69:e2:b7:
e9:ee:b5:11:1c:1d:8c:b0:68:c5:99:bf:83:f6:4d:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:29:C0:7D:72:2B:F9:D3:EE:EC:10:63:AF:74:90:C4:72:47:E8:6A
X509v3 Authority Key Identifier:
keyid:B5:6B:A6:6A:CB:6B:28:A7:5C:F8:B9:26:29:F3:89:88:E6:BC:E5:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5e:65:37:97:fd:3d:00:f2:42:59:d2:e1:90:f6:a4:f0:03:
a4:a9:1f:07:a9:39:17:f6:bc:1e:af:b5:72:e9:60:86:0f:1b:
a7:64:25:bd:38:80:cc:f9:c7:ef:4a:6a:3f:2f:b3:c6:9e:6d:
e4:5c:4f:87:db:68:15:b3:e4:e2:8a:86:ae:bd:16:95:39:2d:
da:a6:5b:17:54:33:85:e7:37:fd:7c:95:ee:a8:93:5e:02:32:
b4:db:81:4f:95:e8:e3:e5:3f:16:ec:6c:20:07:d2:64:a2:1e:
b6:8a:74:56:69:59:c6:91:26:d9:d2:25:28:0f:b8:65:57:d8:
39:b0:8f:6f:54:c9:90:8a:4e:a3:19:2c:9a:e6:fb:61:a9:72:
14:7a:43:03:e9:77:09:65:c5:c0:0c:36:9f:ad:9a:10:51:22:
08:1e:b0:a6:50:0f:5a:77:4a:4e:c2:72:10:9e:f7:fa:a0:a2:
02:67:8b:8a:2a:fe:ef:0c:86:57:63:7e:1e:bf:62:c4:55:e1:
a2:c3:38:0a:48:54:6f:64:e0:6d:10:d1:e5:cf:b1:0d:c3:03:
5f:0e:39:85:9c:8c:75:45:ee:ca:e4:4d:5d:8c:a7:a3:fd:81:
cd:ad:cc:a8:59:3e:99:a4:9a:c4:8e:86:35:27:12:76:c2:4f:
f4:fb:01:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:32 2026 by rpki-client