
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
File: 0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft (raw, json)
Hash identifier: rQsLfoV+gNfq4Ywl00F5uG1D1xJrjnGI99VC41lh2Gw=
Subject key identifier: A1:BF:07:57:FE:CF:C0:E4:31:77:9C:B2:AE:09:6B:56:F0:B5:58:A6
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Certificate issuer: /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial: 771F91AA40DB572D3FFF2AEA92A7EAD41B48E24A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 07:03:15 +0000
Manifest this update: Tue 12 May 2026 06:58:15 +0000
Manifest next update: Wed 13 May 2026 09:21:15 +0000
Files and hashes: 1: 34332e3234392e3134322e302f32342d3234203d3e203535363533.roa (hash: nVmldivYscT9yIlUPfak+eYDC8xGQfjxxTwl5kvmf58=)
2: 0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl (hash: 3/qICTqI0NKttSVf4qfEhCo2KSfJ1CQ5+Ww5F4IJoPA=)
3: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (hash: QXGWZFsc9f71b86soW4vxADReeKw3WdzjpJwgfFCmCI=)
4: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: wL/pHkWZYlSpOpNVjgz7YgIvq4xTapnBHJvFGC824+g=)
5: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: HPeBWQRE7Nzk6K93OWZYdv8ZiGkz5Xm/tDmbLAYTX/8=)
6: 3130332e31312e39382e302f32342d3234203d3e203535363533.roa (hash: 1Ar9cC6jZkLzAdlFLEVr635I57ciOymkfzzDC1PNwsE=)
7: 3230322e35322e31342e302f32342d3234203d3e203535363533.roa (hash: +X2AKDLUi7EEV0pZEa+LT88OPryzNndvmpim+oMxEjk=)
8: 34332e3234392e3134302e302f32342d3234203d3e203535363533.roa (hash: 2k2h/lLJh4y28GreNoFDXEw9j2lKUZ4eXzUUiII60sQ=)
9: 3230322e35322e31352e302f32342d3234203d3e203535363533.roa (hash: VHZA3TuBf4nLKV2pTnmQZgiFCXveS7LsJ0nVeKIEvQQ=)
10: 3230322e35322e31322e302f32342d3234203d3e203535363533.roa (hash: gb1IwBwgBC3bVtPwvnx/RPu7Ia6Ag29mP7Tz4sfDgHE=)
11: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: 2FalOm0wymIUOR6b6eMABH/GePb1gQsHB2PkapVhslQ=)
12: 34332e3234392e3134332e302f32342d3234203d3e203535363533.roa (hash: qdZ5s/RPKJd1zWpn0OA8oOkj/7C1tf+45M/HrbWmTwI=)
13: 31342e3130322e3135322e302f32342d3234203d3e203535363533.roa (hash: 7m1lsj+R46fwy5EhA0AVTVR6lA5VWMrVBvJWrnKZtRo=)
14: 3230322e35322e31332e302f32342d3234203d3e203535363533.roa (hash: RTunN5WvZPwzhuRDaOCGYBctUeKdomE1xa5xw2crzZk=)
15: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: M9ZVVTNiZw+8g7eKubBdE5bO++zVmlUills7R3bh+8E=)
16: 34332e3234392e3134312e302f32342d3234203d3e203535363533.roa (hash: Bc5YFcqICb+bh4tRwH4x3D73YQXCDozUg5+ESseoBXI=)
17: 31342e3130322e3135352e302f32342d3234203d3e203535363533.roa (hash: t0eDmBySGGi3M6vpcaHWuK77uuciFXZsi3Bv2CvN2vw=)
18: 3130332e31312e39392e302f32342d3234203d3e203535363533.roa (hash: tgMOLRKHLk6AeegSxwagm//NkkSHrRBSK1EEwqWmlG0=)
19: 31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (hash: 4TVT+M+1OynDiPmgdYeocC5p7/VKvqBlsqaUMV+uRAs=)
20: 3130332e31312e39362e302f32342d3234203d3e203535363533.roa (hash: Ou8COM1+4QBZTfW7oPb8lvGJwrPW2b9YrMH3Sw2uBUo=)
21: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: aTFM/g9W9unRb/uZnofVUS9SPuRIxxAlxUviQTXpEaI=)
22: 31342e3130322e3135342e302f32342d3234203d3e203535363533.roa (hash: 2xEncKZB7XKpCLMYg2xigci5uudnJs/KRQjGyEQoyfA=)
23: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 7kCoo2bMrWx+NgrVIZTs8BnZTFozYrI1Yx+Eu/FeGxM=)
24: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: UIaj9X3lfb9VOoNSMQt3FPXNkkUvi5Cnj1c6MU0v1/8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:1f:91:aa:40:db:57:2d:3f:ff:2a:ea:92:a7:ea:d4:1b:48:e2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Validity
Not Before: May 12 06:58:15 2026 GMT
Not After : May 13 09:21:15 2026 GMT
Subject: CN=A1BF0757FECFC0E431779CB2AE096B56F0B558A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:91:fc:76:a7:cc:fa:30:d4:0a:fa:a3:7e:
3a:85:b5:46:bd:2b:2a:a3:b6:ea:6f:26:3c:7b:bf:
37:b5:68:2c:fe:82:ae:c4:c3:60:20:08:db:f9:4e:
e0:0f:77:8b:9f:65:97:d3:ce:0b:21:86:98:f0:ae:
b7:a8:89:f6:c7:63:e8:0a:32:6c:8f:82:05:8b:43:
0c:90:af:3a:64:49:90:97:0c:a7:f6:8e:07:7d:37:
cb:d3:81:d9:cc:ae:22:8a:f7:2e:be:a9:21:97:8b:
75:5b:48:1f:71:c3:c0:6f:d0:19:da:bd:b4:89:1a:
a4:a8:a8:9e:ad:f3:5d:d0:4b:d2:32:22:12:97:ca:
15:cb:0b:53:0a:46:cd:91:7e:11:cc:45:61:57:45:
11:1a:35:61:8e:e0:e5:78:19:d7:31:f2:bf:b6:01:
67:e6:38:fd:c4:91:40:65:fc:a2:9d:b3:94:b1:7a:
85:61:87:a7:3d:ba:57:21:40:c4:36:10:7d:a2:cd:
b5:d7:81:71:e6:ce:02:e2:62:c8:87:e7:c5:58:b2:
c5:f4:2d:66:13:c6:ee:cb:6a:87:f3:4e:6f:07:45:
51:23:84:c7:72:06:98:8d:53:06:3d:e7:db:56:da:
54:08:b0:fc:75:15:a8:c7:1d:05:c9:a1:a2:fd:f5:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BF:07:57:FE:CF:C0:E4:31:77:9C:B2:AE:09:6B:56:F0:B5:58:A6
X509v3 Authority Key Identifier:
keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b4:c4:e3:48:ce:40:bc:af:a9:02:e5:90:f5:14:77:06:f3:
2b:4a:16:27:2b:c0:b7:f9:9d:4e:43:28:79:fd:4a:9b:63:bd:
ad:0d:3f:f4:be:79:0f:1e:4a:e8:63:6c:08:11:68:cd:10:d9:
ee:f0:04:3e:5d:b4:51:3b:5e:d2:1d:e8:a2:aa:b6:53:a5:ce:
23:e6:df:26:e3:56:15:71:39:5f:85:f3:a3:09:e6:d7:2c:33:
f5:93:5d:f8:09:04:3d:52:86:fc:e5:46:83:ad:02:58:b0:54:
53:c6:ac:c0:54:dd:5c:e9:e7:85:93:3c:f4:f6:78:06:53:c7:
30:53:67:de:33:98:45:50:53:13:6a:6b:0b:46:c9:c5:8f:f3:
56:9c:09:cc:97:91:eb:ab:d7:5f:9d:42:6e:b9:d9:a5:0f:8a:
e8:9a:30:24:92:e6:e7:19:0a:fd:48:75:56:f2:5f:9a:a9:d2:
f9:56:d1:23:52:a7:f4:34:2d:6c:b9:58:b0:9e:29:57:34:78:
1f:c2:a4:34:47:f6:9c:07:8a:1a:53:ea:0e:9f:87:74:a9:b3:
0f:fd:80:97:97:4c:de:e2:8f:aa:37:95:72:43:f0:7b:3d:82:
4f:fe:a3:ca:3c:af:37:30:65:81:4a:2a:74:41:24:6c:3e:34:
c1:7a:6b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:21:24 2026 by rpki-client