
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
File: B9E54455BBADEE4051F79D907B7453E95F13B467.mft (raw, json)
Hash identifier: 2oaD+IA8i5yZKTCG94n+2o0RgIUgJqOZByCbGeJcXeM=
Subject key identifier: 5A:1D:B4:6E:A0:9A:21:87:8F:71:85:77:B5:CF:4C:9F:E5:75:C8:70
Authority key identifier: B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67
Certificate issuer: /CN=B9E54455BBADEE4051F79D907B7453E95F13B467
Certificate serial: 57D7CC71E34BEC75D8D0EB6929378AABE13D238A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 18:12:20 +0000
Manifest this update: Thu 23 Jul 2026 18:07:20 +0000
Manifest next update: Fri 24 Jul 2026 21:30:20 +0000
Files and hashes: 1: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: wr2AUAIBj15wOmk+O8JERfUGMC5W1ujwy25yjBMhvGA=)
2: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: 2snLe8yK3Bohn4tsm/dGVrhksjjX4tISeXo0oWw/2NQ=)
3: B9E54455BBADEE4051F79D907B7453E95F13B467.crl (hash: j/jPZ5yoyARLuF9dP9G1HXvJuYfkiLj8z175got/U/w=)
4: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: /KOgzrDFq/tIyDOkqLi1nhsbulS+0UUYSYry8OoTmJg=)
5: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: 7pPEEFuxF2xingEKFsHlopxNVPNMkufYI24t0NlMTEY=)
6: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: vFfmqz/S7K4aLguWPn5rp+ugEbZkxGvqsu4n1XKxUAg=)
7: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: 8BxjP7wp2ny7XMMIeYWn2YhapQVIdzgBdHrT8RAE1hI=)
8: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: UedpVAHn21ooqLw8ovvpIgJ1soqSurJAxq23sQ+qlfw=)
9: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: Mm+87+26OdYLR0WzbeBFR1Yx08pPggtvOd7SnjyjkXk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl
rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:d7:cc:71:e3:4b:ec:75:d8:d0:eb:69:29:37:8a:ab:e1:3d:23:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9E54455BBADEE4051F79D907B7453E95F13B467
Validity
Not Before: Jul 23 18:07:20 2026 GMT
Not After : Jul 24 21:30:20 2026 GMT
Subject: CN=5A1DB46EA09A21878F718577B5CF4C9FE575C870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:d1:d8:8a:dc:4b:08:51:87:95:47:80:ed:
ed:80:0e:a4:b6:44:fb:1c:03:a5:3f:8f:91:5a:94:
84:fe:d8:c2:d5:b7:a7:05:db:de:36:e0:5e:50:56:
67:5e:ba:c0:9e:32:65:6b:ef:ee:60:7c:17:c4:04:
7f:ea:fd:1d:f7:a6:f2:a9:9d:fd:ff:42:b4:37:89:
f5:5e:12:f4:03:62:c5:d0:3a:78:75:92:db:60:3b:
ed:43:a0:a3:de:79:a7:3c:a3:99:81:97:cc:12:58:
67:f6:fe:e7:9c:80:9b:ff:25:ce:1b:8e:de:fe:43:
e0:1e:61:35:99:fc:f3:a6:f4:90:a6:86:4e:46:c6:
a2:f4:17:01:99:e6:a4:83:b7:81:22:61:c1:c5:8a:
bf:5e:f3:6a:d2:a3:0f:a0:8b:5f:c6:95:93:25:37:
d3:87:a7:4e:85:6b:ba:2b:d1:22:5c:c2:14:ec:e2:
f0:91:cf:f3:d3:d9:41:5b:0b:14:4a:ff:e1:fb:e9:
ae:5a:0c:38:4d:0f:ca:bc:96:83:fe:02:45:00:6f:
00:c9:31:1e:f9:ef:94:32:25:23:ac:32:76:19:8f:
c5:92:ca:d9:ac:91:aa:84:9e:26:dd:29:80:50:d5:
88:75:9c:c3:d9:b5:9f:f7:f0:3d:52:1a:6f:68:6e:
57:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1D:B4:6E:A0:9A:21:87:8F:71:85:77:B5:CF:4C:9F:E5:75:C8:70
X509v3 Authority Key Identifier:
keyid:B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4a:a9:a1:f5:9b:89:04:1c:83:34:78:b8:a2:92:7e:18:91:
b0:82:d8:6d:c0:bd:01:0a:c5:3b:ba:81:fb:9a:78:86:ba:0b:
2d:5c:2a:4c:a3:24:5a:e1:21:9e:5d:93:ba:6b:e1:04:ae:0d:
5f:a9:ea:70:46:1e:e3:2f:79:ae:49:88:0e:4a:4e:fb:95:29:
d2:ad:24:c0:60:7a:4b:2f:a1:15:0e:47:bd:53:bb:50:61:64:
06:f2:01:7c:68:d4:36:c1:ae:f4:ef:f4:9a:5c:a8:55:2d:1c:
9d:7b:ea:af:77:03:d7:db:b2:b8:23:73:00:5f:f5:4e:8c:47:
3e:96:33:1c:ef:a0:10:fa:5c:8d:f6:ac:9c:9c:3f:5d:8d:9b:
67:cb:4c:13:bb:03:ce:6c:0e:89:cc:82:69:8b:0b:8c:e8:a6:
dd:9d:27:81:ba:01:9d:94:8b:ad:28:16:1e:12:2e:20:3b:07:
66:5f:3f:e6:21:15:5e:a1:13:e5:e2:53:87:96:62:55:74:17:
87:5f:81:db:aa:ad:19:72:51:95:20:27:5d:d3:b3:28:cd:59:
eb:54:84:3b:01:eb:de:6f:04:6b:30:97:54:83:07:ca:60:bc:
66:3c:5e:08:7f:c1:84:db:c9:64:6a:0f:0c:4c:d6:a5:65:19:
9c:a2:fc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:00 2026 by rpki-client