
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
File: B9E54455BBADEE4051F79D907B7453E95F13B467.mft (raw, json)
Hash identifier: gDiZEiFF3xOfXzEOQTQvC321+cyoSyb7Jb9n5+M9wo0=
Subject key identifier: DA:59:3A:8D:A1:E7:68:05:83:CB:ED:02:8D:40:84:89:6B:F0:D2:6C
Authority key identifier: B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67
Certificate issuer: /CN=B9E54455BBADEE4051F79D907B7453E95F13B467
Certificate serial: 66D089B05217F20CD95ED8B82F8AD9D3E2308140
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 16:26:01 +0000
Manifest this update: Tue 12 May 2026 16:21:01 +0000
Manifest next update: Wed 13 May 2026 17:36:01 +0000
Files and hashes: 1: B9E54455BBADEE4051F79D907B7453E95F13B467.crl (hash: Y96+6mcUcqA4vy7yC0S+ClSW5iv7l/U//6SpPsOVzHo=)
2: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: wr2AUAIBj15wOmk+O8JERfUGMC5W1ujwy25yjBMhvGA=)
3: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: 2snLe8yK3Bohn4tsm/dGVrhksjjX4tISeXo0oWw/2NQ=)
4: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: Mm+87+26OdYLR0WzbeBFR1Yx08pPggtvOd7SnjyjkXk=)
5: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: vFfmqz/S7K4aLguWPn5rp+ugEbZkxGvqsu4n1XKxUAg=)
6: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: 8BxjP7wp2ny7XMMIeYWn2YhapQVIdzgBdHrT8RAE1hI=)
7: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: 7pPEEFuxF2xingEKFsHlopxNVPNMkufYI24t0NlMTEY=)
8: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: /KOgzrDFq/tIyDOkqLi1nhsbulS+0UUYSYry8OoTmJg=)
9: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: UedpVAHn21ooqLw8ovvpIgJ1soqSurJAxq23sQ+qlfw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl
rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d0:89:b0:52:17:f2:0c:d9:5e:d8:b8:2f:8a:d9:d3:e2:30:81:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9E54455BBADEE4051F79D907B7453E95F13B467
Validity
Not Before: May 12 16:21:01 2026 GMT
Not After : May 13 17:36:01 2026 GMT
Subject: CN=DA593A8DA1E7680583CBED028D4084896BF0D26C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:e5:67:dc:24:06:68:9b:4e:ef:4a:48:ee:
ab:8c:55:1a:e2:3b:06:9d:f8:c5:6f:ea:4b:d5:88:
1b:75:7f:f6:a4:e8:8c:b7:d0:8c:43:db:ce:c2:47:
85:51:aa:0a:85:2f:4c:ed:5d:39:e4:0f:24:df:82:
99:a2:5b:69:2b:06:2b:83:04:68:1c:48:41:10:2a:
4f:e8:29:e4:bc:dd:23:af:a4:5e:1b:b6:2a:f2:f2:
4a:10:67:68:42:3e:35:75:0b:da:ef:c9:c4:6d:90:
ee:25:8a:d2:02:bb:17:9b:f7:bf:26:91:89:56:37:
ba:d4:9f:d6:ee:57:48:07:4b:95:a4:47:ca:59:34:
58:15:0e:4f:bc:16:0b:de:8c:40:83:31:ae:90:e3:
18:d7:cb:93:10:d2:a5:2b:b3:65:d9:f3:3f:b7:9c:
04:65:3a:66:17:1c:8a:29:f1:a1:fa:39:f0:8e:d0:
87:41:a1:99:37:ff:83:c9:22:f3:17:5c:6b:d3:60:
1a:f3:2d:b8:55:6d:85:44:a2:70:c5:ca:e0:26:41:
e6:5f:11:70:e1:c1:47:c9:35:dd:11:8c:07:26:29:
57:52:d3:a9:65:bc:8b:80:fd:1b:cf:0b:98:f0:82:
05:e5:5e:cf:68:88:d4:33:4b:b7:1a:8f:01:51:65:
26:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:59:3A:8D:A1:E7:68:05:83:CB:ED:02:8D:40:84:89:6B:F0:D2:6C
X509v3 Authority Key Identifier:
keyid:B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3c:20:64:cd:22:1f:16:bc:d7:b6:73:3b:a7:41:3b:5a:54:
8a:6d:2b:1d:9f:e6:77:6d:b5:c5:f0:ca:69:73:24:2c:ec:9f:
af:49:e1:98:1a:74:34:a5:e1:6c:73:a0:c1:1e:27:7c:f5:7c:
05:bb:af:c4:b5:d6:48:dc:51:dc:00:70:69:cb:86:60:98:d6:
e5:39:92:0a:70:de:8d:72:4f:35:3a:d2:2c:3e:fc:2b:c4:61:
aa:7d:9d:0d:c0:d2:0e:76:27:6b:df:31:09:e9:3b:cf:e2:4f:
50:dc:f3:0a:c1:ea:79:3a:a9:1a:9b:2b:a2:6d:87:69:e1:e9:
2e:a9:4c:29:92:93:fa:74:e0:12:16:97:55:bf:40:89:c3:4f:
a0:9a:48:3d:e8:40:0c:5a:5b:af:4c:ed:2c:6c:89:8c:49:5c:
4e:36:0a:bc:1b:9a:d2:2d:e0:d5:c3:ea:ec:34:b2:be:d2:f1:
0f:63:24:02:57:64:54:59:2d:53:4f:d3:f2:d4:eb:7f:d9:57:
37:3e:d2:89:54:21:c5:e8:c1:ac:25:d7:68:73:2f:24:50:02:
ab:e8:10:3c:25:a1:af:b8:ee:1a:e5:2c:55:ee:4c:92:f5:f3:
fb:b4:5d:1f:44:2a:b7:4e:6c:c7:b8:75:37:91:9e:34:1a:b2:
11:d7:26:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:25 2026 by rpki-client