
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
File: B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft (raw, json)
Hash identifier: fSIzjWMeMss68RgdNWpGXji3Bf0I6zan/Y5L1H+b1ao=
Subject key identifier: 3F:9F:EB:56:4A:7B:8C:64:A1:2B:9E:D3:7C:77:1D:73:2D:14:27:AE
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Certificate issuer: /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial: 5272A44ED3728FDC810D8CA003103391A3BEFFEF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
Manifest number: C5
Signing time: Sat 26 Sep 2026 20:45:41 +0000
Manifest this update: Sat 26 Sep 2026 20:40:41 +0000
Manifest next update: Mon 28 Sep 2026 00:40:41 +0000
Files and hashes: 1: 3130332e31362e3133362e302f32342d3234203d3e20313338303737.roa (hash: gco5c7WXqpAUv26il0bYrypILflhue4cLfp0jrvC588=)
2: 3130332e31312e32312e302f32342d3234203d3e203538333936.roa (hash: rQv5s8+gPpGYB/vGkK0E1KzGoHeIzauVQLPwV+zcAQU=)
3: 32372e35342e3131392e302f32342d3234203d3e203539313536.roa (hash: B3Wv1yk9eEsCJIJwAJYVc/XQpH6HREmcziLtKnlPPPk=)
4: 323430303a396338303a3a2f34382d3438203d3e203538333936.roa (hash: bZNkhO5s5ouIXjJKaQv8PKfJDr/H/AM1kyrDd0wlyM8=)
5: 323430303a396338303a3a2f33322d3438203d3e203538333936.roa (hash: /ZR2Wmx8v5LSyzEH2Pl73ZaKPDz1ytePaIaN3xWd0I0=)
6: 3130332e31362e3133392e302f32342d3234203d3e20313338303737.roa (hash: fb0u8nL2mSZSjhRNXrQKe5m4wVsqo96iE9FDTVCkkuc=)
7: 323430303a396338303a3230303a3a2f34382d3438203d3e203538333936.roa (hash: sbLJ41IDFdN5IJsomNQRipWLxXGCHRyqteaWEwRsz7Q=)
8: 32372e35342e3131372e302f32342d3234203d3e203538333936.roa (hash: 0Oh1NBqzZ3I6VHN6/EtyqgY+6ATqaMWE9Ah1ExUBh+k=)
9: 32372e35342e3131382e302f32342d3234203d3e203538333936.roa (hash: Xej95JrdMsifVKYujoAl0DIGRkayLR1TXbEVcv1ObYw=)
10: 3130332e31362e3133382e302f32342d3234203d3e20313338303737.roa (hash: xLR88IyMVCA8vdgyK8OQ+LkpI8JImP1CEA8k4aA9Syk=)
11: 3130332e32332e3134312e302f32342d3234203d3e203538343031.roa (hash: Vxo1SAebkkXkXHrkJyQxo/evf7z4vPT/u0wpK8ACYKQ=)
12: 32372e35342e3131362e302f32342d3234203d3e203538333936.roa (hash: ZPKZ4RD7GSqwYP85NHWWHCZsGyMBOdDBCWsoKc9qF38=)
13: 3130332e3232352e3137312e302f32342d3234203d3e20313333333339.roa (hash: HKtNGGIgOC9+B6KozAxjZkWtuOSi7Y4giMkSdFSsHeg=)
14: B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl (hash: fgXDovoKFu+eA2oKrsHkAoMYFZUlmEzAd1rVm710zPQ=)
15: 323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa (hash: ofLAcZqnlKOmXqsmeIfCr72lWZy9ZeTWZkof0/9RVb8=)
16: 3130332e3232352e3137322e302f32332d3233203d3e20313333333339.roa (hash: IexADjY/vH+ci1AK/jeAttZdrOIQ48kpykD2boWk1lE=)
17: 323430303a396338303a313a3a2f34382d3438203d3e203538343031.roa (hash: tjiI+qv5K6jVgsJD0bWk0XAJK3Ch0HFCGyxU2fDhIKk=)
18: 3130332e31312e3232322e302f32342d3234203d3e203538333936.roa (hash: Z0euP4Mz5azIXz2gQa7C76gHRFvS6x+UlkXhOokx2h4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:72:a4:4e:d3:72:8f:dc:81:0d:8c:a0:03:10:33:91:a3:be:ff:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Validity
Not Before: Sep 26 20:40:41 2026 GMT
Not After : Sep 28 00:40:41 2026 GMT
Subject: CN=3F9FEB564A7B8C64A12B9ED37C771D732D1427AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:b3:9b:ee:49:80:29:fb:7c:d1:7c:c6:72:
65:a0:96:d7:ca:1e:e0:1b:92:06:98:24:84:52:06:
26:df:96:19:1a:13:1b:61:31:87:a5:9e:19:1f:77:
38:e3:be:b2:37:9a:7a:d7:d9:1a:24:76:56:8f:55:
db:21:a2:05:34:10:12:6e:78:33:88:bc:b2:28:41:
17:88:e0:50:19:11:6e:63:7c:cf:69:63:d4:ba:87:
58:cc:c0:2e:df:ed:f8:5f:b9:d1:2b:19:1f:0d:9b:
68:3f:d3:84:2e:9f:9a:85:a0:db:c0:2a:cf:a6:31:
7b:f5:30:e9:cd:5c:66:c6:dd:c9:78:a3:d0:af:ac:
4b:7f:5c:b5:45:de:ec:1b:36:b9:1a:0c:90:4a:f5:
23:40:77:0b:51:52:a4:eb:2b:e5:3d:5d:e9:f3:90:
c1:eb:9b:3d:9a:1a:e5:0e:6d:73:d3:68:07:af:64:
26:8b:77:15:81:64:95:3e:ec:61:e3:9a:76:b0:ea:
c3:49:3e:5b:3f:13:e4:fc:65:9d:50:17:9a:23:5a:
11:3d:1b:43:51:40:71:f9:d0:64:03:88:54:85:54:
41:dd:0a:c2:64:35:44:55:ef:74:3b:f3:54:d7:f3:
3f:0c:7d:cb:bc:fd:4d:b0:2f:10:ba:a5:df:21:3c:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9F:EB:56:4A:7B:8C:64:A1:2B:9E:D3:7C:77:1D:73:2D:14:27:AE
X509v3 Authority Key Identifier:
keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8e:5a:5f:16:1c:70:32:43:b9:e2:dd:41:90:e9:16:67:43:
93:4a:7d:6f:33:37:d4:db:77:33:64:3e:ce:83:5d:19:e8:2f:
21:4c:b7:0e:20:fe:63:7a:ca:b3:3d:f8:97:31:4b:47:71:78:
0a:4f:23:df:2f:7e:c1:70:3e:6e:87:68:20:33:20:be:cb:27:
b5:57:94:be:b5:dd:ec:ac:aa:67:34:57:fd:2f:c3:d5:0d:68:
04:a9:21:0e:24:9c:44:bf:c8:1a:7a:6c:24:da:53:98:26:85:
85:c0:69:f9:d1:0c:bb:a8:92:ca:cc:ab:a5:26:32:33:f4:24:
35:3a:23:16:b7:17:7a:8c:7e:41:98:a6:41:bb:5d:c1:8a:ff:
64:a2:06:01:22:1f:50:5d:a8:0c:e2:52:3c:58:89:98:2a:30:
c3:be:7a:24:68:af:b2:86:05:9f:e5:0c:84:8f:15:35:a8:05:
34:e8:ad:5e:fc:fb:a4:73:ab:68:e8:45:20:96:d3:d1:07:c5:
9d:14:52:0d:f8:3b:43:df:52:63:f5:db:7d:13:35:cc:af:97:
78:f9:0e:c6:b4:70:0e:9c:8b:22:79:13:d5:42:d5:94:51:13:
c4:d3:33:0f:a0:77:a6:ad:ca:3d:1a:f6:49:66:cf:f1:3b:18:
11:b2:cf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:00:23 2026 by rpki-client