
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
File: 0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft (raw, json)
Hash identifier: xqqw806QXH3kqffI9igK16LwPrrWK/DsQvrTVyxTO0I=
Subject key identifier: A8:32:EF:B8:7B:8A:13:07:8B:2C:A2:B2:1E:E7:0E:3B:91:D6:35:5D
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Certificate issuer: /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial: 06A934FA5B3524565BA2E6812D9B4D07E418F00F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
Manifest number: BF
Signing time: Wed 23 Sep 2026 08:47:06 +0000
Manifest this update: Wed 23 Sep 2026 08:42:05 +0000
Manifest next update: Thu 24 Sep 2026 09:45:05 +0000
Files and hashes: 1: 3130332e31312e39392e302f32342d3234203d3e203535363533.roa (hash: tgMOLRKHLk6AeegSxwagm//NkkSHrRBSK1EEwqWmlG0=)
2: 3230322e35322e31332e302f32342d3234203d3e203535363533.roa (hash: RTunN5WvZPwzhuRDaOCGYBctUeKdomE1xa5xw2crzZk=)
3: 34332e3234392e3134332e302f32342d3234203d3e203535363533.roa (hash: qdZ5s/RPKJd1zWpn0OA8oOkj/7C1tf+45M/HrbWmTwI=)
4: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: HPeBWQRE7Nzk6K93OWZYdv8ZiGkz5Xm/tDmbLAYTX/8=)
5: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 7kCoo2bMrWx+NgrVIZTs8BnZTFozYrI1Yx+Eu/FeGxM=)
6: 3230322e35322e31342e302f32342d3234203d3e203535363533.roa (hash: +X2AKDLUi7EEV0pZEa+LT88OPryzNndvmpim+oMxEjk=)
7: 31342e3130322e3135352e302f32342d3234203d3e203535363533.roa (hash: t0eDmBySGGi3M6vpcaHWuK77uuciFXZsi3Bv2CvN2vw=)
8: 31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (hash: 4TVT+M+1OynDiPmgdYeocC5p7/VKvqBlsqaUMV+uRAs=)
9: 34332e3234392e3134302e302f32342d3234203d3e203535363533.roa (hash: 2k2h/lLJh4y28GreNoFDXEw9j2lKUZ4eXzUUiII60sQ=)
10: 3230322e35322e31352e302f32342d3234203d3e203535363533.roa (hash: VHZA3TuBf4nLKV2pTnmQZgiFCXveS7LsJ0nVeKIEvQQ=)
11: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: M9ZVVTNiZw+8g7eKubBdE5bO++zVmlUills7R3bh+8E=)
12: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: 2FalOm0wymIUOR6b6eMABH/GePb1gQsHB2PkapVhslQ=)
13: 0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl (hash: n/kwMP4asAN5hjQ+WGSgAcxq/MtDaluxjyS12r33ePI=)
14: 3130332e31312e39362e302f32342d3234203d3e203535363533.roa (hash: Ou8COM1+4QBZTfW7oPb8lvGJwrPW2b9YrMH3Sw2uBUo=)
15: 3230322e35322e31322e302f32342d3234203d3e203535363533.roa (hash: gb1IwBwgBC3bVtPwvnx/RPu7Ia6Ag29mP7Tz4sfDgHE=)
16: 34332e3234392e3134312e302f32342d3234203d3e203535363533.roa (hash: Bc5YFcqICb+bh4tRwH4x3D73YQXCDozUg5+ESseoBXI=)
17: 31342e3130322e3135342e302f32342d3234203d3e203535363533.roa (hash: 2xEncKZB7XKpCLMYg2xigci5uudnJs/KRQjGyEQoyfA=)
18: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (hash: QXGWZFsc9f71b86soW4vxADReeKw3WdzjpJwgfFCmCI=)
19: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: aTFM/g9W9unRb/uZnofVUS9SPuRIxxAlxUviQTXpEaI=)
20: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: UIaj9X3lfb9VOoNSMQt3FPXNkkUvi5Cnj1c6MU0v1/8=)
21: 31342e3130322e3135322e302f32342d3234203d3e203535363533.roa (hash: 7m1lsj+R46fwy5EhA0AVTVR6lA5VWMrVBvJWrnKZtRo=)
22: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: wL/pHkWZYlSpOpNVjgz7YgIvq4xTapnBHJvFGC824+g=)
23: 3130332e31312e39382e302f32342d3234203d3e203535363533.roa (hash: 1Ar9cC6jZkLzAdlFLEVr635I57ciOymkfzzDC1PNwsE=)
24: 34332e3234392e3134322e302f32342d3234203d3e203535363533.roa (hash: nVmldivYscT9yIlUPfak+eYDC8xGQfjxxTwl5kvmf58=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 09:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a9:34:fa:5b:35:24:56:5b:a2:e6:81:2d:9b:4d:07:e4:18:f0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Validity
Not Before: Sep 23 08:42:05 2026 GMT
Not After : Sep 24 09:45:05 2026 GMT
Subject: CN=A832EFB87B8A13078B2CA2B21EE70E3B91D6355D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:28:ae:4e:a9:65:c3:c3:a8:c7:09:b6:dc:
a3:ce:06:b1:2d:11:b3:8d:9b:bb:2c:d0:72:6a:fe:
07:a2:f0:2d:53:dc:9f:6b:9c:1c:be:a0:f9:c0:55:
0e:0d:01:b8:4f:2e:87:63:25:90:5f:56:97:8c:a8:
c9:48:b3:dd:e1:77:83:a5:21:d2:c6:2a:26:15:f7:
88:dd:f1:a3:72:e1:13:dc:a0:93:19:c1:5f:fd:cc:
d6:72:5d:ce:d8:e2:0e:5f:3d:be:2d:50:d9:8f:b7:
79:b8:30:4f:61:58:6c:0f:55:0d:ec:c3:8f:d4:c1:
c5:cd:c0:15:dd:9b:21:d2:c6:2a:d0:e1:ab:65:38:
2b:90:40:25:ec:4b:9e:4e:6c:2b:a0:19:bc:44:91:
16:ab:40:04:24:0d:ba:d7:59:1b:c5:ce:16:57:10:
e6:dd:96:a6:be:33:2d:97:bf:4a:5a:f1:04:6e:7c:
81:20:9e:d9:53:ef:0f:ef:b1:94:3a:26:dc:b9:e0:
63:94:07:44:5b:57:65:55:3b:d9:a0:6f:fa:14:ef:
ac:36:16:ae:81:4e:b6:1e:6a:d7:1a:33:96:5f:e2:
29:ba:33:fa:2e:62:27:c1:f6:93:b8:08:d3:a8:9e:
fd:e6:0b:f7:d0:ca:33:0d:01:e7:8f:ab:e9:38:f0:
4a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:32:EF:B8:7B:8A:13:07:8B:2C:A2:B2:1E:E7:0E:3B:91:D6:35:5D
X509v3 Authority Key Identifier:
keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c7:ff:4c:e5:c8:f3:21:55:49:43:26:4c:24:35:d9:1e:da:
ae:b5:44:e7:f5:f9:f3:c4:c2:3f:f0:aa:43:31:9c:ef:9d:22:
61:bf:d6:3d:a2:5c:b5:ff:85:63:05:26:c1:cb:8e:c5:85:d4:
cb:c6:63:c2:f8:77:54:29:a0:a7:3b:b7:9e:ee:0f:4b:a3:b0:
32:bf:e1:f2:3b:df:59:08:39:38:8d:4e:02:02:c9:4f:09:52:
8f:f4:e2:43:c2:77:e0:55:d1:c2:dc:f0:a4:59:4b:ac:c1:fc:
9f:22:3f:72:14:65:94:7d:03:ac:28:ee:e6:b9:43:09:13:20:
84:d3:35:ef:94:84:d3:d3:47:14:1e:35:27:f8:5b:c1:51:b2:
59:b4:fd:75:0e:f4:7e:07:35:3f:34:2f:4f:5e:70:6c:1c:1d:
77:07:c9:05:d4:2d:bc:5c:08:66:f1:83:91:9f:e6:33:13:92:
a3:0a:78:11:cb:6d:61:98:1f:3e:f1:c5:1b:65:65:10:2f:98:
29:5b:bc:c9:9c:56:9f:99:c3:0c:11:fa:5c:5c:a1:ab:b1:48:
7d:24:96:a9:67:1a:87:8c:6a:d5:27:b8:72:cc:dc:22:f5:99:
4d:e5:8a:e5:65:ed:15:e3:c4:9d:2f:4f:20:a8:6b:65:39:73:
1f:89:08:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:16:24 2026 by rpki-client