
$ rpki-client -vvf rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft
File: B486D413919D8F20144DB8254040D1237E34B8AA.mft (raw, json)
Hash identifier: YEycI+UpZCF0dFFFUVHWkOF3qnbhHq8eOWU35U3Q3aw=
Subject key identifier: 6F:C5:CF:BD:30:74:68:2A:0F:08:DE:F0:17:32:A5:45:F6:10:9B:5E
Authority key identifier: B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA
Certificate issuer: /CN=B486D413919D8F20144DB8254040D1237E34B8AA
Certificate serial: 60787F1FD5546014ECFDD32A418DD6041E57699B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 07:39:02 +0000
Manifest this update: Tue 12 May 2026 07:34:02 +0000
Manifest next update: Wed 13 May 2026 09:22:02 +0000
Files and hashes: 1: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: eldG4bxXfHfHBZuQpQd9deqvI4oVqZUOKXxgD57litE=)
2: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: 7QTUY2NQvJrxF3QQX7LUC6hqv5ttn70Xh40WXHVfruk=)
3: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: I7JOfc7cIihje61qrOhB8mNIVUiXPbuVCLb1xIG81r0=)
4: B486D413919D8F20144DB8254040D1237E34B8AA.crl (hash: ZPObiEuOzatXFKjffyo/JVgAJqGrfL1z3ZAWRMFYalk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl
rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:78:7f:1f:d5:54:60:14:ec:fd:d3:2a:41:8d:d6:04:1e:57:69:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B486D413919D8F20144DB8254040D1237E34B8AA
Validity
Not Before: May 12 07:34:02 2026 GMT
Not After : May 13 09:22:02 2026 GMT
Subject: CN=6FC5CFBD3074682A0F08DEF01732A545F6109B5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:b3:33:e3:e3:8a:c3:f8:f8:99:81:8f:30:
bd:33:26:1c:dc:61:b5:f5:51:e5:2f:2d:79:3d:d5:
f2:f3:02:76:27:26:7b:28:88:a3:38:bb:90:a6:6f:
ec:b2:52:dd:8a:d6:22:ce:e2:0a:92:4a:12:83:aa:
10:4b:49:14:f0:0b:6b:1f:de:fd:29:0a:ef:1c:01:
7b:a0:cb:de:76:4d:f1:72:7c:ff:46:4a:33:18:f6:
28:48:e5:d3:5e:73:99:89:70:f6:70:db:f2:53:95:
e0:42:32:96:f4:5f:3e:72:ee:1c:c4:08:aa:e4:f9:
e5:bf:e8:62:4e:c2:1f:58:44:5b:02:9f:f1:35:1e:
89:65:34:89:ff:5a:4d:27:2c:a7:85:8f:f7:b9:1d:
c0:1b:fe:13:ff:ca:fb:1e:b6:f8:9d:64:58:f2:ab:
62:51:92:31:99:6a:4d:94:26:47:de:aa:46:c4:09:
28:52:2d:da:6a:8f:20:35:47:42:ac:45:39:b0:d8:
aa:73:ff:e2:8e:9a:a1:f7:c9:c2:d6:7d:78:17:cd:
0d:0f:cb:58:2a:b4:87:4e:b8:a7:93:97:80:46:68:
c6:69:1f:c8:65:03:c6:24:e8:60:36:13:07:a8:24:
81:df:5d:01:3c:b6:cd:ec:51:78:f9:c0:81:15:a6:
55:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C5:CF:BD:30:74:68:2A:0F:08:DE:F0:17:32:A5:45:F6:10:9B:5E
X509v3 Authority Key Identifier:
keyid:B4:86:D4:13:91:9D:8F:20:14:4D:B8:25:40:40:D1:23:7E:34:B8:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B486D413919D8F20144DB8254040D1237E34B8AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/B486D413919D8F20144DB8254040D1237E34B8AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c4:77:cd:c5:31:72:8e:54:60:48:33:8b:cd:ae:b5:a6:8a:
b3:36:12:20:7e:a2:ac:3d:01:ac:26:af:34:9f:10:47:95:8d:
76:ed:71:6b:a1:67:12:1a:c4:6b:2f:ab:ad:24:8b:fa:c2:ae:
df:c2:19:cb:2a:e2:d8:99:1f:72:a8:97:fe:7e:1f:99:e8:8a:
4c:e0:4b:0c:d3:ea:80:36:37:5a:fe:83:2c:27:48:7b:3d:db:
08:41:10:b0:56:d0:b4:20:95:45:7f:71:c8:6d:74:7c:24:6b:
b3:a2:29:c1:20:e1:cf:55:ac:62:66:14:49:dd:92:46:12:b8:
bf:b6:93:26:82:77:33:cd:3c:19:0a:1e:9d:3f:e0:82:b9:2b:
14:7d:bf:e4:79:fa:5e:92:f0:d3:9f:f2:35:0b:10:be:22:af:
98:5d:91:0d:19:f4:50:c4:ec:5a:a5:1c:3b:7c:4b:c1:38:65:
90:66:5c:11:d7:eb:74:51:3a:13:74:08:67:f2:8e:da:b0:61:
61:8c:f5:08:0d:44:36:14:22:2d:b5:f0:b7:5b:ce:6a:03:12:
e1:a3:d3:66:5d:16:b3:11:ca:03:b5:e1:f1:f5:19:e6:d7:cc:
fd:d4:81:60:ca:d5:54:bf:bd:04:8b:cb:bb:69:99:a2:1d:32:
29:f9:17:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:21:43 2026 by rpki-client