
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.mft
File: 0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.mft (raw, json)
Hash identifier: nBuEbjNMsIRgoNSMDKWK6SBrxaaFEhw9jy2dt4ILz6o=
Subject key identifier: C2:1C:AA:44:32:41:08:80:D9:95:0A:10:F0:25:10:9F:A7:CE:BE:14
Authority key identifier: 0B:18:9B:4D:9D:00:55:3E:F2:F8:75:5E:AD:7F:A4:4A:A8:E9:05:9F
Certificate issuer: /CN=0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F
Certificate serial: 18E82C769227D009D597EFE8A6C831E878614752
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 19:55:37 +0000
Manifest this update: Wed 23 Sep 2026 19:50:37 +0000
Manifest next update: Thu 24 Sep 2026 21:56:37 +0000
Files and hashes: 1: 0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.crl (hash: 9NTVqF7r8TEsYkOJjb8dSkzDo+yDH4ZRdumXHq1ailE=)
2: 3130332e3138362e38312e302f32342d3234203d3e20313336313235.roa (hash: qt8C98CNugMo7Hs3wPPfuZTKfdaxqA/LCjZgJh4oP7g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.crl
rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 19:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e8:2c:76:92:27:d0:09:d5:97:ef:e8:a6:c8:31:e8:78:61:47:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F
Validity
Not Before: Sep 23 19:50:37 2026 GMT
Not After : Sep 24 21:56:37 2026 GMT
Subject: CN=C21CAA4432410880D9950A10F025109FA7CEBE14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:37:63:9c:03:bd:9b:b1:c2:a8:e9:2e:a9:
e8:30:e8:23:01:50:f3:83:e1:db:bb:d0:d4:2a:1d:
ca:72:78:8c:2e:44:89:91:7d:37:52:bb:a7:09:e2:
b4:cb:44:6a:28:fa:43:5e:a2:03:c9:c4:55:cc:27:
72:61:65:7a:94:cc:23:d8:1a:1f:63:7f:65:bb:99:
a3:b9:f2:fc:c9:5d:5e:7e:d1:04:22:1b:96:e6:ec:
b2:7a:82:54:c5:6e:14:c7:a5:24:6d:07:10:b3:db:
42:00:7d:cb:23:5e:93:ee:6c:6b:cf:7f:e7:bf:8a:
d1:22:51:19:6c:44:4e:79:7d:e2:ae:5c:b8:1c:55:
32:ff:1b:b2:48:5c:54:35:d7:96:fd:39:b8:5a:86:
17:55:7a:30:7a:7b:c1:b6:2c:05:65:f3:70:53:79:
f4:a8:9c:31:f5:6f:98:82:72:dd:b2:0b:d2:46:29:
8e:83:1d:b6:2d:42:93:cc:b4:83:26:e4:99:e3:14:
b2:ca:b9:80:4d:ed:48:8a:fe:33:35:72:40:ce:ea:
7d:fc:ba:76:6f:86:78:fc:20:93:0f:91:0b:04:79:
b9:ad:3b:48:6e:53:58:67:d9:b8:d5:eb:da:a9:81:
bc:d3:b6:40:bb:45:6d:b6:e5:87:bb:86:3f:09:39:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1C:AA:44:32:41:08:80:D9:95:0A:10:F0:25:10:9F:A7:CE:BE:14
X509v3 Authority Key Identifier:
keyid:0B:18:9B:4D:9D:00:55:3E:F2:F8:75:5E:AD:7F:A4:4A:A8:E9:05:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f1:c6:eb:65:94:13:7b:6f:57:cd:8d:d5:c1:f3:01:b0:23:
85:43:80:e6:db:bb:0c:f2:48:f4:2b:71:43:24:df:a5:c2:ad:
69:e7:5d:0e:47:e2:27:71:e6:88:a5:6d:6c:5c:7a:3d:66:82:
2f:a4:f5:df:6c:3f:3c:0c:11:7b:05:c2:55:2b:87:34:07:23:
e9:b7:7a:46:fe:c6:3a:18:9e:8e:20:39:be:52:c6:48:ca:c9:
f8:9e:3a:a8:16:58:37:41:3d:c1:88:00:73:20:66:08:7d:f9:
28:f0:e7:ea:f5:b5:1e:df:bc:7a:f6:b5:8b:39:10:94:ed:2d:
98:88:51:28:b8:56:87:14:ac:92:b5:7f:fb:f1:67:5f:ca:2d:
c7:3a:23:7a:3d:70:1c:b7:79:54:32:bc:c5:8b:c9:08:b1:1f:
e1:36:c9:86:2c:34:46:9a:af:e5:86:6a:8d:8a:ab:1b:7c:ac:
dc:3e:29:1e:07:5b:49:a0:f2:71:20:59:c8:97:25:e9:3e:fb:
8f:fe:be:f5:a4:e8:1e:85:c3:54:94:05:30:17:60:83:10:03:
ab:fb:dc:01:ca:b0:38:24:a3:d9:e8:46:e9:0a:70:47:6e:3c:
ee:54:76:7c:47:86:2f:69:ac:51:31:86:68:a0:d4:91:27:41:
7a:f2:d7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:08:16 2026 by rpki-client