
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.mft
File: B679ABD48A919D142B31732EEB7434BD0864B337.mft (raw, json)
Hash identifier: OsO3/pO3+WQW7kT1dRHjXL82k3hWN6FBickdf48lJPk=
Subject key identifier: E9:78:88:EF:82:A9:97:53:98:CC:BA:54:08:BB:16:4C:13:24:6E:C0
Authority key identifier: B6:79:AB:D4:8A:91:9D:14:2B:31:73:2E:EB:74:34:BD:08:64:B3:37
Certificate issuer: /CN=B679ABD48A919D142B31732EEB7434BD0864B337
Certificate serial: 1E6C6322E029C68805360AE5D0410E4B0DE24C80
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 04:30:00 +0000
Manifest this update: Fri 24 Jul 2026 04:25:00 +0000
Manifest next update: Sat 25 Jul 2026 07:07:00 +0000
Files and hashes: 1: B679ABD48A919D142B31732EEB7434BD0864B337.crl (hash: 2cQk2nSSc4BTHV5LFtOv59MogBX49soT2MTspwWacpM=)
2: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: kR57phtXtYkWkqOJR+vNKGsYD3GG168kvYzkg+VvXLE=)
3: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: HMstQWwIQ4Ttwiw1acG6eiASnTbL+rVODQ6ae+mQEZ0=)
4: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: WMt8uGFjDPg74NN6xDD4yix+o7SOuzqi5JHQbnLLFL0=)
5: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: ztZRgaXUDlz+suazGGurQouD2lrLzAX+Obh7oeSoFpQ=)
6: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: wgpVAiwQ9P2SsmnIcWLbmYOBEu39pXrL7pmOR79nwaw=)
7: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: 19cvxsjH0jmLxb1jG1lOK+sOgukmzTDGlXRjxR2U/wQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.crl
rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:6c:63:22:e0:29:c6:88:05:36:0a:e5:d0:41:0e:4b:0d:e2:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B679ABD48A919D142B31732EEB7434BD0864B337
Validity
Not Before: Jul 24 04:25:00 2026 GMT
Not After : Jul 25 07:07:00 2026 GMT
Subject: CN=E97888EF82A9975398CCBA5408BB164C13246EC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6b:a5:85:d7:50:44:29:1f:2d:99:2c:4e:30:
ef:02:06:3c:a5:65:91:a3:5d:d0:8b:24:0c:0c:69:
77:4f:85:5b:63:80:76:a1:ff:ab:82:ce:c9:48:39:
1c:61:ba:8e:0c:8b:a3:35:6f:e5:13:41:06:01:d4:
73:d3:f8:69:72:68:83:21:ff:07:57:cc:0e:89:ea:
61:76:f6:44:01:01:72:94:02:93:05:57:3d:7b:be:
f7:b2:1b:57:9f:a6:4b:05:01:68:9d:1f:b9:ba:da:
5a:45:c2:df:32:d5:a9:2f:bd:7e:c8:16:35:e5:8b:
27:09:8d:d2:cb:c7:8a:51:e9:37:cf:cc:91:25:f7:
ff:f0:f0:23:89:49:0f:14:a9:ec:5b:2c:86:f3:28:
86:9e:16:5f:1a:46:a8:69:de:b7:28:e4:5a:9c:c4:
fb:04:77:f7:fa:43:ac:96:7a:18:a3:5f:5b:5e:06:
b4:48:7d:b0:73:fb:33:9d:63:62:72:de:79:2d:ea:
24:96:8d:8d:5f:ec:84:9e:18:b6:35:d4:d0:68:b5:
c6:16:c1:71:42:57:eb:b3:1d:c0:9e:80:d6:8e:6e:
96:15:b9:6d:7f:1e:64:cd:59:7c:fa:4b:4b:10:6e:
6c:f0:4b:f7:a0:9e:e3:86:c2:4e:fd:06:4b:b9:54:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:78:88:EF:82:A9:97:53:98:CC:BA:54:08:BB:16:4C:13:24:6E:C0
X509v3 Authority Key Identifier:
keyid:B6:79:AB:D4:8A:91:9D:14:2B:31:73:2E:EB:74:34:BD:08:64:B3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B679ABD48A919D142B31732EEB7434BD0864B337.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/B679ABD48A919D142B31732EEB7434BD0864B337.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:11:a2:56:fe:48:c5:26:d4:bc:7e:3b:cc:d5:69:0e:b3:c1:
92:23:c8:18:22:ca:25:23:98:74:6a:36:77:df:02:00:7a:96:
b4:6e:ce:5b:b3:05:85:3f:88:8e:b7:84:cc:3e:52:72:b5:9d:
c3:fa:31:92:fb:98:e2:6f:20:81:cf:76:b7:d9:12:bc:76:cf:
11:53:84:e9:1c:3e:b3:b0:b1:1d:9f:a7:88:dc:cc:a7:d4:06:
55:8b:bc:6d:fe:b2:ac:bf:4c:61:8e:2f:00:ce:22:69:1a:a8:
4b:18:ea:fb:a2:45:98:f3:78:26:bd:e9:6a:31:8c:4a:8c:53:
74:a6:e2:a8:2d:1a:ff:3a:6f:21:74:ba:37:89:70:98:8b:4d:
a8:50:73:c4:b6:36:92:d8:a0:44:90:07:4f:f7:05:86:ec:1f:
85:c5:70:d4:ed:a5:b2:ad:63:b2:b2:a9:d4:4a:92:1a:b0:93:
42:48:d6:46:df:e6:98:b8:d9:c8:cc:2b:1e:8f:3c:22:f1:ac:
ff:ba:81:5d:97:11:fd:4d:20:d0:b6:66:54:25:ec:41:f0:22:
32:bf:84:f8:82:1c:aa:43:22:9a:8a:41:e5:fd:c8:d9:8c:ae:
b7:90:36:5c:75:7f:70:c0:b2:9b:c0:cb:64:3e:fc:52:52:f3:
3e:8a:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:24 2026 by rpki-client