
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft
File: B977405A3167FC0E8490C54AB080E37B0920C4B4.mft (raw, json)
Hash identifier: u2BFH69GBUv/Um3yii6NVf1oDIsmGDhY/cdKQAsDG/Y=
Subject key identifier: EA:A8:52:0D:E9:D9:6E:7C:8F:BF:14:58:5C:A5:EF:F5:89:96:86:F2
Authority key identifier: B9:77:40:5A:31:67:FC:0E:84:90:C5:4A:B0:80:E3:7B:09:20:C4:B4
Certificate issuer: /CN=B977405A3167FC0E8490C54AB080E37B0920C4B4
Certificate serial: 08ED6E46031C982DE943742A352ACEA93B9D83F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft
Manifest number: 70
Signing time: Thu 23 Jul 2026 22:57:54 +0000
Manifest this update: Thu 23 Jul 2026 22:52:54 +0000
Manifest next update: Sat 25 Jul 2026 01:59:54 +0000
Files and hashes: 1: B977405A3167FC0E8490C54AB080E37B0920C4B4.crl (hash: R646RbEs1YGt0Fp1q6cWnj4EllBFx9g74fXJxvzlmeA=)
2: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: TSVY5x+9VndlFploLHkJHga5L+L+3DIx++btPsU48bE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.crl
rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ed:6e:46:03:1c:98:2d:e9:43:74:2a:35:2a:ce:a9:3b:9d:83:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B977405A3167FC0E8490C54AB080E37B0920C4B4
Validity
Not Before: Jul 23 22:52:54 2026 GMT
Not After : Jul 25 01:59:54 2026 GMT
Subject: CN=EAA8520DE9D96E7C8FBF14585CA5EFF5899686F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:49:f6:ef:70:51:28:6d:66:1a:0f:90:ca:
a2:18:e8:7b:48:ae:c4:eb:26:9c:3c:63:d6:82:63:
b7:68:54:e6:b8:7b:22:3f:c0:40:be:90:91:24:40:
09:13:45:a6:c1:98:1a:d8:1f:09:a7:c1:b8:f4:eb:
29:db:27:1a:a8:f4:ff:52:8c:7e:32:ad:bc:b7:7e:
9f:11:ca:4a:57:07:e0:ba:bb:d8:f5:97:c2:69:f4:
94:a8:23:62:71:16:5a:84:8d:47:0a:3d:b7:6a:72:
04:05:ce:fb:c6:41:fe:15:68:43:c6:8f:ad:6b:0d:
21:c8:2b:5b:03:de:5c:59:e0:84:36:2e:64:5c:01:
50:28:88:78:cb:64:12:80:7d:8c:41:b5:8f:71:fc:
9d:a3:9b:06:b7:c4:88:d0:bf:03:74:82:38:df:18:
f6:d3:ce:6f:69:51:4a:52:c4:a6:17:3d:94:21:46:
fa:c3:3f:b4:67:16:85:0b:51:3b:e8:66:93:3f:68:
4d:68:30:2f:4d:a6:b4:62:0e:d2:6f:ee:94:2b:57:
90:e4:e1:4b:57:a5:2c:46:98:a6:53:91:93:9c:20:
bb:c3:4c:d5:77:45:7e:6f:3b:29:6d:8b:f6:4d:b1:
6a:ce:a1:cb:0f:eb:21:63:a0:10:cf:5f:28:8f:dc:
93:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A8:52:0D:E9:D9:6E:7C:8F:BF:14:58:5C:A5:EF:F5:89:96:86:F2
X509v3 Authority Key Identifier:
keyid:B9:77:40:5A:31:67:FC:0E:84:90:C5:4A:B0:80:E3:7B:09:20:C4:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3f:28:87:67:4c:c3:b2:b8:cc:ad:a8:c2:ff:00:7c:09:eb:
52:7a:46:28:8d:47:27:d8:f4:2e:d8:b6:a7:97:f3:a2:31:e5:
93:87:94:8e:61:b5:8d:14:11:5e:72:58:00:1c:5f:45:01:3e:
c2:95:60:a1:3e:e3:a5:b0:33:95:ee:f3:c7:41:ae:24:5e:ea:
52:ca:3c:79:d5:86:d7:11:90:82:82:86:02:a7:33:35:f7:bc:
66:50:2e:00:ad:64:c8:66:86:ce:86:71:ff:77:80:ff:84:09:
e1:ef:4c:00:4a:4d:5c:50:89:6c:ee:86:16:89:a0:e7:ea:be:
7b:8e:69:83:91:7a:ce:79:ff:cd:87:75:d4:8c:1a:5f:d3:1c:
27:d1:29:d9:83:3d:ff:01:d4:53:7c:2b:2c:37:b8:79:9e:89:
e5:e8:cb:2e:4a:68:e6:18:4b:f5:04:d0:8d:3f:c5:b5:fd:07:
b5:42:6a:97:a6:54:62:97:d3:40:03:06:19:d4:ec:da:ee:1e:
44:06:d9:31:ba:85:9d:0f:d4:e7:2a:52:ce:a1:7e:63:30:90:
75:67:52:fe:2e:7c:64:65:f9:e3:8f:37:3a:91:fe:1c:48:e5:
12:7f:1e:1d:64:96:c1:69:fa:ff:88:53:44:7b:c0:ef:49:ef:
26:df:2a:2d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCO1uRgMcmC3pQ3QqNSrOqTudg/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk3NzQwNUEzMTY3RkMwRTg0OTBDNTRBQjA4MEUzN0Iw
OTIwQzRCNDAeFw0yNjA3MjMyMjUyNTRaFw0yNjA3MjUwMTU5NTRaMDMxMTAvBgNV
BAMTKEVBQTg1MjBERTlEOTZFN0M4RkJGMTQ1ODVDQTVFRkY1ODk5Njg2RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICkn273BRKG1mGg+QyqIY6HtI
rsTrJpw8Y9aCY7doVOa4eyI/wEC+kJEkQAkTRabBmBrYHwmnwbj06ynbJxqo9P9S
jH4yrby3fp8RykpXB+C6u9j1l8Jp9JSoI2JxFlqEjUcKPbdqcgQFzvvGQf4VaEPG
j61rDSHIK1sD3lxZ4IQ2LmRcAVAoiHjLZBKAfYxBtY9x/J2jmwa3xIjQvwN0gjjf
GPbTzm9pUUpSxKYXPZQhRvrDP7RnFoULUTvoZpM/aE1oMC9NprRiDtJv7pQrV5Dk
4UtXpSxGmKZTkZOcILvDTNV3RX5vOylti/ZNsWrOocsP6yFjoBDPXyiP3JM/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6qhSDenZbnyPvxRYXKXv9YmWhvIwHwYDVR0j
BBgwFoAUuXdAWjFn/A6EkMVKsIDjewkgxLQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTBiZTJkZjgtMmMzNi00NjUyLWE1MGMtZjY0MjBkMmNkOWQzLzAvQjk3NzQwNUEz
MTY3RkMwRTg0OTBDNTRBQjA4MEUzN0IwOTIwQzRCNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9COTc3NDA1QTMxNjdGQzBFODQ5MEM1NEFCMDgwRTM3QjA5MjBD
NEI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTBiZTJkZjgtMmMzNi00NjUyLWE1
MGMtZjY0MjBkMmNkOWQzLzAvQjk3NzQwNUEzMTY3RkMwRTg0OTBDNTRBQjA4MEUz
N0IwOTIwQzRCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADE/KIdnTMOyuMytqML/AHwJ61J6RiiNRyfY
9C7YtqeX86Ix5ZOHlI5htY0UEV5yWAAcX0UBPsKVYKE+46WwM5Xu88dBriRe6lLK
PHnVhtcRkIKChgKnMzX3vGZQLgCtZMhmhs6Gcf93gP+ECeHvTABKTVxQiWzuhhaJ
oOfqvnuOaYORes55/82HddSMGl/THCfRKdmDPf8B1FN8Kyw3uHmeieXoyy5KaOYY
S/UE0I0/xbX9B7VCapemVGKX00ADBhnU7NruHkQG2TG6hZ0P1OcqUs6hfmMwkHVn
Uv4ufGRl+eOPNzqR/hxI5RJ/Hh1klsFp+v+IU0R7wO9J7ybfKi0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:31 2026 by rpki-client