
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft
File: B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft (raw, json)
Hash identifier: d8535TR3SOjz2CckOmqU7bz7Itn5u+gTrGxdrKxKOCI=
Subject key identifier: 83:29:7A:50:B3:10:48:54:C6:ED:3B:06:3E:2C:3A:03:5B:3B:3B:30
Authority key identifier: B3:26:20:A4:DF:41:96:D2:A3:CE:BA:2C:CC:78:73:54:9A:AC:61:05
Certificate issuer: /CN=B32620A4DF4196D2A3CEBA2CCC7873549AAC6105
Certificate serial: 6B6EAB4629D04547544EC90CDD4C444B7F078BBF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft
Manifest number: BF
Signing time: Wed 23 Sep 2026 06:34:07 +0000
Manifest this update: Wed 23 Sep 2026 06:29:07 +0000
Manifest next update: Thu 24 Sep 2026 08:06:07 +0000
Files and hashes: 1: B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl (hash: rOI7B3kw4l0e6XZ7d0Fy/+QCjHXvOBmceRXdnEFMqj8=)
2: 3130332e31392e3135382e302f32332d3234203d3e20313530323339.roa (hash: nGCzx9GztVX9RTrYIz2qrQucEQnhRI7SlGCvxpc25Jk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl
rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 08:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:6e:ab:46:29:d0:45:47:54:4e:c9:0c:dd:4c:44:4b:7f:07:8b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B32620A4DF4196D2A3CEBA2CCC7873549AAC6105
Validity
Not Before: Sep 23 06:29:07 2026 GMT
Not After : Sep 24 08:06:07 2026 GMT
Subject: CN=83297A50B3104854C6ED3B063E2C3A035B3B3B30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:01:f3:bc:c4:97:36:1d:84:66:90:24:cc:85:
2b:61:14:62:23:79:9a:e1:f7:33:80:e4:c7:b8:ad:
b6:b6:2c:64:36:24:45:43:5a:61:f9:f5:b7:40:31:
6d:6b:53:91:5e:b8:cf:d9:17:75:dd:95:cd:3c:94:
ae:31:78:bb:69:ba:6d:01:d7:e6:62:56:f5:bc:ec:
64:2a:02:bb:1c:45:c5:01:87:aa:4e:32:90:38:11:
cf:2b:ac:14:12:ec:18:75:1a:fc:80:da:a7:da:e9:
bb:ae:2c:26:73:27:53:66:12:b9:4b:b5:72:b1:4c:
fd:84:7e:d1:8a:90:06:18:22:ba:30:a0:58:2d:8e:
fd:00:d0:b4:78:12:85:78:ef:f8:68:40:08:0e:67:
c2:78:74:ea:1f:1e:99:c7:88:48:21:87:c2:a2:05:
7a:cd:7c:bd:d3:82:fd:9f:19:48:b1:b7:9b:c9:72:
8e:71:49:ad:82:b9:fa:35:f9:2c:44:6e:2c:be:80:
8e:57:53:79:03:d4:e4:9d:ca:d4:14:a8:84:25:31:
19:fd:73:ed:81:cc:25:5a:ed:2d:81:ec:98:bc:24:
19:a7:7e:75:08:f9:16:53:dd:c0:e2:60:f5:4a:67:
24:88:dc:6d:55:50:4d:70:12:da:38:1e:d1:84:7c:
26:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:29:7A:50:B3:10:48:54:C6:ED:3B:06:3E:2C:3A:03:5B:3B:3B:30
X509v3 Authority Key Identifier:
keyid:B3:26:20:A4:DF:41:96:D2:A3:CE:BA:2C:CC:78:73:54:9A:AC:61:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5cde8ece-97a2-4b0d-a064-17cea61f45cc/0/B32620A4DF4196D2A3CEBA2CCC7873549AAC6105.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d3:fb:25:69:45:f7:2a:46:8d:c3:91:a4:77:99:b5:ee:18:
cf:29:81:5a:42:60:77:5e:b7:23:26:82:97:70:86:e7:44:f7:
93:28:20:0d:da:8b:13:f7:93:d7:26:f0:67:21:b8:d0:1f:1e:
b6:a3:9d:17:1c:5e:e9:18:12:24:3f:d5:f9:0b:52:33:99:e6:
44:4e:f5:89:44:ec:f7:e9:56:a9:64:e3:8b:ec:b7:b9:7f:2b:
bd:f6:b8:7a:3e:37:1d:df:6a:55:4d:dd:93:9b:6d:eb:11:0d:
23:28:af:8d:0d:f7:f7:ce:17:fc:4f:2d:d9:9e:49:40:5d:1a:
4e:70:c7:4e:28:6c:de:45:88:27:81:e4:e9:63:8c:6b:fb:d6:
f9:9b:bf:0b:cf:20:6e:b2:81:53:a7:60:6e:89:a9:a0:42:89:
0f:96:a6:37:aa:7e:9a:8c:83:50:8c:0e:58:b6:1c:3e:ee:64:
f2:ad:5d:d0:de:45:04:c1:71:c8:66:0c:c5:bf:47:3e:9d:85:
be:f8:da:72:bf:31:a6:1e:f9:fb:35:4b:0d:34:d3:b7:05:e4:
e0:93:18:d8:86:52:ed:db:4d:e9:a4:18:0b:e2:6c:1b:53:ae:
c2:13:a1:7a:4d:14:7d:10:9b:a6:02:57:30:8f:6a:6a:3a:be:
24:d9:40:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:57:34 2026 by rpki-client