
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft
File: B977405A3167FC0E8490C54AB080E37B0920C4B4.mft (raw, json)
Hash identifier: BtfxarwDA19/755YUq1LwPih1NpHkXWH0O3zNxHiLZg=
Subject key identifier: DB:1B:9C:AB:76:A1:08:42:BA:09:83:48:2E:1A:A8:42:D0:E6:BD:B2
Authority key identifier: B9:77:40:5A:31:67:FC:0E:84:90:C5:4A:B0:80:E3:7B:09:20:C4:B4
Certificate issuer: /CN=B977405A3167FC0E8490C54AB080E37B0920C4B4
Certificate serial: 11D2F2BC598EB7669F6F26FD15027B711C2FB656
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 17:06:52 +0000
Manifest this update: Tue 12 May 2026 17:01:52 +0000
Manifest next update: Wed 13 May 2026 17:55:52 +0000
Files and hashes: 1: B977405A3167FC0E8490C54AB080E37B0920C4B4.crl (hash: dkLGlMTPGsqAokbhvBlUnNutOwcuzP9jUaTnBobkf6Y=)
2: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: TSVY5x+9VndlFploLHkJHga5L+L+3DIx++btPsU48bE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.crl
rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d2:f2:bc:59:8e:b7:66:9f:6f:26:fd:15:02:7b:71:1c:2f:b6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B977405A3167FC0E8490C54AB080E37B0920C4B4
Validity
Not Before: May 12 17:01:52 2026 GMT
Not After : May 13 17:55:52 2026 GMT
Subject: CN=DB1B9CAB76A10842BA0983482E1AA842D0E6BDB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:2d:33:c7:a8:8d:6a:9a:41:41:e0:7c:8c:
a6:c9:8d:8e:af:26:4b:07:bf:c7:02:9a:dc:56:24:
49:e0:8b:76:ba:a7:92:f1:66:22:3f:77:15:1c:1b:
c3:70:e9:90:ed:53:97:c8:01:ab:9f:7b:d0:b4:e2:
71:f4:36:f4:85:7d:f2:49:74:02:0f:33:22:fe:0d:
21:58:19:ae:be:df:ed:fa:92:bf:70:5e:4c:9f:14:
54:58:db:ba:31:54:ed:65:b3:9d:26:5d:68:b9:00:
fd:b4:63:5c:32:1d:30:88:0b:2d:5f:96:50:cd:c5:
67:d0:57:7f:ca:78:85:e3:34:4f:4c:6e:4d:d0:d9:
93:83:ec:e0:f7:9a:ea:ed:9c:f6:c5:45:9b:32:9f:
04:fe:60:8b:7f:18:dc:9b:26:0d:86:4e:b1:b6:00:
40:9e:c9:ef:1c:39:b7:dd:4a:76:eb:6a:8b:c4:c9:
ad:40:af:f8:0b:88:5a:f5:e4:33:3a:aa:d2:bf:ab:
49:27:3f:33:f7:ad:9e:f6:3a:e5:17:fc:8f:35:48:
32:be:01:af:d5:9c:7c:a9:f4:89:89:99:d8:0c:5d:
5e:1a:62:1c:3b:9d:bc:45:89:4c:5b:63:0f:c8:59:
0e:58:53:c0:ac:59:16:a0:43:9f:43:60:f5:f1:7b:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1B:9C:AB:76:A1:08:42:BA:09:83:48:2E:1A:A8:42:D0:E6:BD:B2
X509v3 Authority Key Identifier:
keyid:B9:77:40:5A:31:67:FC:0E:84:90:C5:4A:B0:80:E3:7B:09:20:C4:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e4:23:2f:14:4c:0a:b6:8c:c3:fc:6d:79:ba:49:e4:34:90:
68:6d:11:ce:44:c1:68:23:31:1e:72:02:ad:0f:ba:21:8b:26:
51:8a:3c:dc:4e:03:0b:d6:c9:ca:f0:09:bf:99:24:5a:50:ae:
b9:99:62:f2:35:ae:58:4b:06:f0:dc:d6:02:7f:47:11:df:f5:
9e:15:3d:b8:e8:8e:05:21:3e:c3:17:3c:4f:d6:54:f5:3f:8e:
1c:8a:b5:1c:1c:85:3b:b7:0b:92:bd:03:70:98:2b:60:bf:23:
cf:94:a0:0f:36:3c:0e:36:ae:f4:a6:88:c0:03:45:0a:66:b4:
da:80:22:e5:18:91:52:3d:68:06:a2:57:27:dd:4d:5c:bb:87:
30:1c:7c:30:3a:c4:92:19:e1:2e:be:19:4a:83:26:79:3b:a2:
0d:a3:e3:40:1b:ad:e5:a2:68:5f:64:5b:95:da:52:a6:ad:02:
a3:52:d0:29:1e:47:43:71:56:6c:33:d1:24:9b:e7:8b:bd:17:
43:57:55:38:82:87:fc:97:39:43:74:72:f6:e2:d4:af:ec:db:
7a:51:69:62:ea:cf:57:b3:0b:44:17:21:4b:8c:84:8a:52:6b:
60:69:d3:2a:dc:a7:91:06:d1:6a:e9:a9:41:f4:10:2d:4f:a3:
1b:fd:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:36 2026 by rpki-client