
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft
File: B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft (raw, json)
Hash identifier: LI6lUt19w6QrOYX7jG0nt2xEuM3sgtD0efcnurHs9u8=
Subject key identifier: A2:2F:00:F8:35:AE:97:8C:2C:E8:C7:11:02:9C:B9:1E:93:30:DE:50
Authority key identifier: B3:13:E8:A9:E4:64:C3:F7:DE:16:EF:E4:50:69:34:3A:95:2B:1A:AA
Certificate issuer: /CN=B313E8A9E464C3F7DE16EFE45069343A952B1AAA
Certificate serial: 31EAF89E3A54CCF245275F44DCC142F7BE7B4830
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft
Manifest number: C2
Signing time: Fri 25 Sep 2026 08:21:07 +0000
Manifest this update: Fri 25 Sep 2026 08:16:07 +0000
Manifest next update: Sat 26 Sep 2026 10:12:07 +0000
Files and hashes: 1: B313E8A9E464C3F7DE16EFE45069343A952B1AAA.crl (hash: nSA9xVMW/IeIsRdUQwH9k9LW6RJgnbRl0svgQuw37Fg=)
2: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: Bl6WywSHBT/Yd5Hz0Bvr9cz9M/uy/fHxxr3Xf/52km0=)
3: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: bB08SpYPx/IIwPSFTyJewLNRJCCLadNTfgEzAwt/Uoc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.crl
rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 10:12:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ea:f8:9e:3a:54:cc:f2:45:27:5f:44:dc:c1:42:f7:be:7b:48:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B313E8A9E464C3F7DE16EFE45069343A952B1AAA
Validity
Not Before: Sep 25 08:16:07 2026 GMT
Not After : Sep 26 10:12:07 2026 GMT
Subject: CN=A22F00F835AE978C2CE8C711029CB91E9330DE50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:54:8f:5e:ab:77:7c:b7:54:05:e9:f7:88:
ef:94:26:97:86:25:fb:00:23:45:49:93:b6:8f:74:
01:67:c0:50:87:a1:48:00:35:c6:be:32:4e:73:25:
b3:50:cb:29:8d:5a:b5:b6:bb:3e:43:68:0f:1d:0c:
45:41:69:54:8e:9c:11:fd:67:3f:01:de:b0:52:b6:
5d:13:7c:ed:2d:ce:65:d0:c1:cf:c3:70:e2:d7:18:
f5:f1:79:fb:8c:6d:65:55:60:0b:3f:23:c6:bc:be:
13:09:74:1e:db:cd:57:05:09:0c:ad:5f:2d:82:01:
b3:4f:d7:1e:63:4b:2b:54:5a:54:9b:c2:67:83:c7:
0e:f8:3f:1d:e2:b9:36:c7:1e:3d:26:9f:60:b3:cf:
05:86:75:51:72:79:c7:9a:91:72:c1:d0:27:dd:e6:
8b:1a:9d:3f:c9:3c:2d:ff:24:b0:0b:70:4a:92:64:
a6:f0:34:44:1b:87:6b:dd:90:58:ca:09:b6:f8:9b:
65:29:ca:c5:6b:25:16:5e:ff:0d:e9:dc:5b:2a:8f:
60:38:fb:01:4e:7d:e2:4e:89:d1:60:76:e1:56:b5:
95:db:6b:3f:20:ca:de:02:6c:e9:dc:1e:bf:5b:8c:
33:b8:2f:02:d6:79:eb:c7:94:6b:36:15:d9:41:69:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2F:00:F8:35:AE:97:8C:2C:E8:C7:11:02:9C:B9:1E:93:30:DE:50
X509v3 Authority Key Identifier:
keyid:B3:13:E8:A9:E4:64:C3:F7:DE:16:EF:E4:50:69:34:3A:95:2B:1A:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:94:46:1c:f4:5c:d4:05:d2:ff:63:ce:4a:b2:8c:b8:08:42:
11:b2:6f:02:bd:86:20:2b:95:65:55:31:56:63:91:d9:fe:96:
a3:8b:50:46:20:4b:23:33:0c:ef:ad:79:15:30:82:1b:f1:16:
b0:ad:79:51:35:27:d2:2b:9a:85:e7:c6:36:03:a3:a5:4d:51:
69:92:b6:3a:80:16:0e:aa:38:ee:de:25:01:a5:56:27:ed:63:
36:fc:67:61:90:30:b0:92:59:08:ce:5a:31:18:f1:f9:ce:04:
97:5e:4b:5b:03:a6:2b:3c:6a:93:4c:e6:5e:6a:09:bd:25:87:
ed:33:d6:df:23:ea:d8:60:df:c2:a1:8d:c2:92:5a:ff:ea:29:
06:28:aa:2f:19:f3:bf:bc:12:22:e8:14:12:2c:95:34:bf:89:
81:47:e7:57:36:61:c4:2f:ad:23:3d:eb:c3:6b:c6:ad:08:4f:
56:c7:fe:30:c6:72:b1:db:3b:5a:f2:d9:e0:7d:96:f7:1c:12:
6d:60:0a:48:67:39:e7:4c:13:33:cd:55:42:9d:a9:60:60:0d:
95:62:15:2d:54:f3:69:11:32:ae:2a:bb:97:5c:64:4c:2d:8c:
e4:44:4c:9c:82:64:9a:a1:b0:ac:bc:06:3a:24:8b:9e:a2:ee:
15:3d:02:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:47:16 2026 by rpki-client