
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.mft
File: B679ABD48A919D142B31732EEB7434BD0864B337.mft (raw, json)
Hash identifier: 4N4ApYv3yJ9damiEq3mCW6ZK0dF2ab+x7swLfCQ1cwo=
Subject key identifier: 85:38:72:61:55:5B:25:E2:D2:45:38:6E:1B:6E:F0:56:48:A7:E3:E8
Authority key identifier: B6:79:AB:D4:8A:91:9D:14:2B:31:73:2E:EB:74:34:BD:08:64:B3:37
Certificate issuer: /CN=B679ABD48A919D142B31732EEB7434BD0864B337
Certificate serial: 1CFDE5066958368BAA37D4A98445EBDC3C880FE8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 04:07:50 +0000
Manifest this update: Wed 13 May 2026 04:02:50 +0000
Manifest next update: Thu 14 May 2026 05:38:50 +0000
Files and hashes: 1: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: ztZRgaXUDlz+suazGGurQouD2lrLzAX+Obh7oeSoFpQ=)
2: B679ABD48A919D142B31732EEB7434BD0864B337.crl (hash: vrXh5ix/vh61rv2CbBshzIFPem05BZvBzOYd+qKTKGs=)
3: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: HMstQWwIQ4Ttwiw1acG6eiASnTbL+rVODQ6ae+mQEZ0=)
4: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: WMt8uGFjDPg74NN6xDD4yix+o7SOuzqi5JHQbnLLFL0=)
5: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: wgpVAiwQ9P2SsmnIcWLbmYOBEu39pXrL7pmOR79nwaw=)
6: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: kR57phtXtYkWkqOJR+vNKGsYD3GG168kvYzkg+VvXLE=)
7: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: 19cvxsjH0jmLxb1jG1lOK+sOgukmzTDGlXRjxR2U/wQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.crl
rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:fd:e5:06:69:58:36:8b:aa:37:d4:a9:84:45:eb:dc:3c:88:0f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B679ABD48A919D142B31732EEB7434BD0864B337
Validity
Not Before: May 13 04:02:50 2026 GMT
Not After : May 14 05:38:50 2026 GMT
Subject: CN=85387261555B25E2D245386E1B6EF05648A7E3E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:d7:9d:4b:26:b1:06:a4:49:da:83:74:b9:
d8:18:ed:1c:bc:1a:ae:71:42:f5:75:e4:08:30:dd:
65:c3:96:e2:f1:3a:eb:d0:77:71:88:b2:69:86:10:
97:88:d0:0e:4c:fb:d2:11:8a:2d:33:e0:c3:87:fb:
dd:41:89:f6:c6:33:11:85:aa:d5:27:45:90:e3:39:
27:52:ae:f6:29:64:d8:fd:57:87:7d:4d:83:b3:73:
30:47:f7:c6:26:01:b0:11:ac:5a:90:c2:b0:23:d9:
df:03:39:16:fb:13:ca:98:d9:d4:b9:31:61:4c:8a:
64:30:3a:0a:86:1c:b6:0c:fe:e2:c9:0f:73:68:d0:
8c:c3:54:4b:d9:93:98:69:df:3b:aa:dd:54:4a:c0:
f5:d9:46:b7:6c:c9:02:70:21:97:98:7c:1a:a9:89:
db:59:83:71:82:39:c9:94:3a:5b:4e:b3:63:c0:c5:
a2:17:9f:42:6e:d4:c3:24:4c:99:c4:6d:dc:ad:13:
6b:c4:0c:e7:4a:bc:86:03:b3:e8:54:d5:06:33:fc:
74:af:e2:c0:c8:89:05:9e:e0:6f:df:79:fa:4e:3a:
70:4b:13:23:11:53:ba:92:5a:bf:2f:dc:b1:83:b1:
57:45:ff:99:ed:19:c7:56:f4:f3:7a:4b:67:47:aa:
83:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:38:72:61:55:5B:25:E2:D2:45:38:6E:1B:6E:F0:56:48:A7:E3:E8
X509v3 Authority Key Identifier:
keyid:B6:79:AB:D4:8A:91:9D:14:2B:31:73:2E:EB:74:34:BD:08:64:B3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6f:cc:e4:48:91:60:12:11:d7:9b:88:ac:e6:8c:74:27:04:
14:43:b1:9c:b7:e9:7f:ce:01:db:36:5c:98:e7:33:a6:23:4e:
a1:2b:7f:6a:6a:92:75:5a:ea:59:3b:40:14:e5:5f:a1:29:8e:
07:64:db:84:11:fb:28:24:8a:2a:7d:57:e5:3f:c1:86:13:b7:
74:b9:7b:2d:96:9c:2e:bf:51:40:94:34:30:c0:f6:fc:07:95:
b0:64:d2:0b:43:ed:a2:c1:bb:94:91:e3:41:a2:b7:6b:2b:b1:
a9:2a:b2:3f:14:e7:ad:98:69:c2:d9:49:47:9d:33:a9:09:f7:
ff:08:46:fb:d1:7a:d9:9b:8f:60:0e:e0:76:86:0c:20:28:bf:
1a:c1:7e:fb:ce:78:6d:09:ef:85:05:ac:19:43:70:ee:ba:43:
0c:41:72:8a:10:19:f7:83:95:30:01:6e:ef:20:2b:ab:7b:63:
c6:85:2a:b4:f8:83:55:68:e5:c1:f3:49:55:45:04:b7:c1:ca:
b1:80:1a:89:af:7a:ca:74:af:73:7f:70:58:cb:2f:c3:95:8c:
c3:a4:c2:e8:b6:63:42:5b:75:a0:21:84:ed:df:0b:05:07:f6:
b9:9b:6c:cc:94:5b:98:da:c5:58:ca:88:87:bf:c3:69:87:89:
24:4e:af:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:47:06 2026 by rpki-client