
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft
File: B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft (raw, json)
Hash identifier: A59SH9BVsBZrU6y3VqLs9O+L7rc1VvkzFfyJTzWOVd0=
Subject key identifier: 00:8A:4E:3A:89:99:6B:4F:73:B0:DD:DA:28:DA:54:60:0B:76:4D:12
Authority key identifier: B3:13:E8:A9:E4:64:C3:F7:DE:16:EF:E4:50:69:34:3A:95:2B:1A:AA
Certificate issuer: /CN=B313E8A9E464C3F7DE16EFE45069343A952B1AAA
Certificate serial: 244BBB71EA40B53A79836B8CFCE62304A6ECCC2C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:11:55 +0000
Manifest this update: Tue 12 May 2026 20:06:55 +0000
Manifest next update: Thu 14 May 2026 00:04:55 +0000
Files and hashes: 1: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: bB08SpYPx/IIwPSFTyJewLNRJCCLadNTfgEzAwt/Uoc=)
2: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: Bl6WywSHBT/Yd5Hz0Bvr9cz9M/uy/fHxxr3Xf/52km0=)
3: B313E8A9E464C3F7DE16EFE45069343A952B1AAA.crl (hash: 1GI/pwJ+/dRae2Th/Qyh4V+IQBm+e/7iVO6A+rjrhgk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.crl
rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:4b:bb:71:ea:40:b5:3a:79:83:6b:8c:fc:e6:23:04:a6:ec:cc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B313E8A9E464C3F7DE16EFE45069343A952B1AAA
Validity
Not Before: May 12 20:06:55 2026 GMT
Not After : May 14 00:04:55 2026 GMT
Subject: CN=008A4E3A89996B4F73B0DDDA28DA54600B764D12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f9:95:82:16:9f:51:0c:15:70:d0:2a:c0:8e:
68:e5:75:f3:31:46:f3:fe:2e:92:f9:89:40:c0:ae:
45:d3:26:2d:27:7a:b6:59:df:91:2c:68:99:ea:08:
21:c4:3d:97:bd:53:25:58:0c:15:bf:1b:d1:12:e3:
f2:d7:d9:bb:5e:f3:40:73:5c:a0:02:0e:80:50:6c:
e5:ea:03:35:2a:dd:5b:71:aa:e1:01:73:e7:96:25:
0a:a6:35:d3:02:39:65:bf:6d:c1:3c:fe:b9:e8:2f:
6e:a9:9c:68:23:7a:53:e6:d9:7d:54:58:83:4a:91:
fd:d6:8d:43:f4:10:91:4a:31:0c:88:50:89:c5:0f:
4e:ca:58:42:b1:6f:55:eb:94:6a:11:65:29:1a:66:
75:7e:b1:15:50:8f:d0:c6:6a:f8:5c:cb:6a:55:6d:
8e:47:32:56:2c:2f:c2:70:5e:24:cb:b2:2d:96:ad:
69:f5:8e:f9:6d:1f:8d:12:2e:87:25:32:e1:b7:31:
fb:6d:a9:d7:ff:31:15:d8:e9:79:3b:67:b2:83:ec:
ce:cf:9d:f3:22:f1:5a:07:8e:95:c5:70:db:5c:49:
33:28:e6:da:fc:61:a1:b1:a2:e7:18:e8:a7:68:22:
c6:39:f2:06:76:50:5e:85:69:13:b5:a8:ca:f4:76:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8A:4E:3A:89:99:6B:4F:73:B0:DD:DA:28:DA:54:60:0B:76:4D:12
X509v3 Authority Key Identifier:
keyid:B3:13:E8:A9:E4:64:C3:F7:DE:16:EF:E4:50:69:34:3A:95:2B:1A:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3a:3b:7e:af:20:b5:69:b1:6d:2c:8c:54:de:ab:b1:e2:97:
92:cb:0f:6b:df:14:df:2d:31:34:b7:d1:5c:3f:e5:45:10:cf:
0b:b6:c1:cd:ad:e4:19:31:dc:1d:40:00:22:c0:21:8d:28:2d:
1c:ef:34:44:c6:b5:67:6c:3d:0f:71:bc:fe:79:30:43:ba:a0:
8e:47:b8:de:74:f9:9e:6c:f8:af:dd:53:b2:c9:58:7b:f8:c7:
2f:3e:3f:fe:d6:a2:54:a9:fb:81:ab:ef:b7:fc:25:b8:b6:9a:
09:65:d4:f4:17:3e:64:56:08:da:ad:58:b0:f5:ae:a5:b1:e0:
8d:dd:90:fa:ff:fd:1e:cc:2e:83:bd:db:6a:49:0e:29:8a:7e:
3e:80:af:0c:03:2a:25:48:d4:61:2e:4d:8d:f5:c4:f2:e1:44:
a8:0e:dd:40:6e:9b:0a:35:ae:75:9c:49:eb:f6:8f:b0:74:a1:
a0:7a:2f:8d:17:fa:a8:00:b6:af:da:91:ea:68:62:d4:07:46:
ea:c0:4e:cf:73:f6:11:77:c3:70:4b:da:88:83:17:b6:6b:3f:
e2:d8:e9:3f:0c:4b:c1:d8:bd:9e:00:71:96:72:63:d2:52:39:
b8:76:ef:05:55:b9:91:37:1c:09:40:e7:df:15:fa:c1:2e:73:
1f:12:30:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:41 2026 by rpki-client