
$ rpki-client -vvf rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft
File: B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft (raw, json)
Hash identifier: 7PKMpzePw+58AWX3XBPeZLuznhSmQ0Z61ckJTCn923Q=
Subject key identifier: 53:E6:AD:49:AD:D7:B0:86:AA:28:F8:4D:48:6E:67:C0:92:F9:28:DB
Authority key identifier: B1:B8:0E:10:A5:B0:AA:BA:24:92:9E:33:CD:EF:91:29:59:A6:E4:FD
Certificate issuer: /CN=B1B80E10A5B0AABA24929E33CDEF912959A6E4FD
Certificate serial: 2EFB4F0BBAD95A2BB5E14780B289D8C7133F93EE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft
Manifest number: 69
Signing time: Sun 19 Jul 2026 19:20:49 +0000
Manifest this update: Sun 19 Jul 2026 19:15:49 +0000
Manifest next update: Mon 20 Jul 2026 22:28:49 +0000
Files and hashes: 1: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: guRu9prdmx+ch78kv34z9AVOzBlrJNlWUYpJ/aaI38s=)
2: B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.crl (hash: 6vqQEIQM0IECMx5dwPd7mGpJxXGPajAPxWYw/AEcrsw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.crl
rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:fb:4f:0b:ba:d9:5a:2b:b5:e1:47:80:b2:89:d8:c7:13:3f:93:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1B80E10A5B0AABA24929E33CDEF912959A6E4FD
Validity
Not Before: Jul 19 19:15:49 2026 GMT
Not After : Jul 20 22:28:49 2026 GMT
Subject: CN=53E6AD49ADD7B086AA28F84D486E67C092F928DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:7f:ae:c6:b4:4b:95:2c:59:08:8d:87:07:
07:4a:fd:1d:80:da:b7:84:6d:de:6f:ca:b1:51:3a:
ef:60:68:74:1e:68:80:b6:fa:a2:f3:16:90:42:d5:
bc:82:d8:28:46:7d:72:e8:1a:17:87:c8:85:97:36:
c6:c1:5e:f7:84:b4:4f:52:39:e7:d7:f7:86:56:cb:
f3:51:3c:ed:06:87:d5:8c:fe:7d:42:ac:7a:6b:97:
e9:8f:ab:f4:dc:9e:de:cb:67:97:ef:45:dc:77:bb:
0d:56:4a:ef:a3:60:d1:5c:46:b6:f8:41:63:47:8e:
a2:ab:55:86:d2:23:b2:db:92:fa:cd:71:6c:0f:66:
7e:41:90:ef:f5:fb:8f:75:30:56:18:b4:1a:a9:d2:
2e:0a:29:f5:d4:c4:72:f5:79:ed:da:c3:c1:28:d1:
e2:2c:bf:77:c3:e3:6d:3b:4a:da:6d:0c:42:f3:65:
4d:af:8c:3b:7d:02:d9:88:c1:66:b9:c5:6a:e8:08:
f0:a0:b4:6a:c7:55:ff:a1:20:eb:ef:28:bb:53:c2:
14:2b:68:3a:66:3a:52:d9:16:fa:cb:1b:a0:63:c1:
de:40:9c:b6:00:05:09:cb:e9:5a:0e:ae:17:12:72:
aa:6d:08:cf:11:85:8d:0a:ee:55:61:b3:e5:8d:47:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E6:AD:49:AD:D7:B0:86:AA:28:F8:4D:48:6E:67:C0:92:F9:28:DB
X509v3 Authority Key Identifier:
keyid:B1:B8:0E:10:A5:B0:AA:BA:24:92:9E:33:CD:EF:91:29:59:A6:E4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/B1B80E10A5B0AABA24929E33CDEF912959A6E4FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:13:06:3d:b8:e3:5c:23:71:c6:96:48:3a:3c:59:91:e2:fb:
30:fb:88:98:c9:41:0e:36:a5:fb:c5:3c:e5:5f:89:60:da:2f:
1b:91:2d:0d:9f:69:52:71:26:73:29:60:31:cf:cd:68:92:05:
e6:7d:02:05:75:f7:55:7b:4d:29:08:11:ee:67:94:cf:3b:7b:
19:4b:85:1f:12:0f:7e:6f:7c:61:45:03:ca:8a:a4:ff:d8:d3:
20:24:b6:bd:71:85:1f:d5:c1:9a:c3:47:2a:0e:fd:8e:0e:4f:
d6:a1:34:26:79:47:7c:05:56:09:5c:62:36:0f:2a:3f:e3:40:
5f:00:bb:1a:24:57:71:fc:2c:dd:7a:ab:6e:3d:59:d0:b5:22:
48:b5:1b:9b:a0:1f:4b:92:ba:89:20:67:14:36:46:bf:e8:1a:
d7:ae:ab:ef:81:f9:ca:95:67:f2:3c:f8:29:54:f2:9b:bb:5c:
1e:b6:0a:1b:94:46:30:e0:f7:98:6f:99:25:f9:2f:a6:cc:5e:
98:5d:0a:ff:96:a6:e8:d8:24:db:6a:bf:2f:89:d4:dd:04:01:
29:16:0f:48:a3:c0:8c:18:19:b0:25:59:31:a9:43:62:38:c2:
56:43:a8:60:0f:33:52:02:d9:e3:bc:7c:6b:6d:37:b0:bb:3a:
1c:56:88:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 23:44:49 2026 by rpki-client