
$ rpki-client -vvf rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft
File: B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft (raw, json)
Hash identifier: 131vzNWyFYDQ5jNxxTJICqZUoOVii4JKRPjB0hNQJKE=
Subject key identifier: 28:41:BA:0B:29:70:E7:E5:6B:F2:F4:1E:3F:53:71:FA:61:68:0E:03
Authority key identifier: B5:6B:A6:6A:CB:6B:28:A7:5C:F8:B9:26:29:F3:89:88:E6:BC:E5:F0
Certificate issuer: /CN=B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0
Certificate serial: 5259F0C6C7354C0C98F829411E15CE5E959B71B5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 16:16:41 +0000
Manifest this update: Mon 20 Jul 2026 16:11:41 +0000
Manifest next update: Tue 21 Jul 2026 18:42:41 +0000
Files and hashes: 1: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (hash: 4neWrZ2U5Ifz5ZV+5kk+4b2Vcx4ltU0Zb9JXxN912Dk=)
2: B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl (hash: 5eCUHH7+kALW5W94nzF/KozGcmOKcYLtV4gXZKiW0IE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl
rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 18:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:59:f0:c6:c7:35:4c:0c:98:f8:29:41:1e:15:ce:5e:95:9b:71:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0
Validity
Not Before: Jul 20 16:11:41 2026 GMT
Not After : Jul 21 18:42:41 2026 GMT
Subject: CN=2841BA0B2970E7E56BF2F41E3F5371FA61680E03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:52:dd:54:a2:5d:8f:fd:75:fe:40:db:98:
0c:4a:69:cb:9f:71:df:c4:08:6c:f9:50:7b:59:5a:
c2:b1:a6:de:ee:59:b4:fe:d3:04:ee:f3:5d:53:67:
8f:3a:41:f6:69:75:45:df:5a:c9:92:d6:63:4f:9a:
51:f8:2c:d0:b6:0a:bb:57:bb:65:b4:94:04:f5:6f:
f3:8a:86:d4:52:41:36:56:55:de:a5:9f:80:91:44:
d9:f2:e0:e7:f4:a7:61:43:4d:c6:b1:92:a1:99:a6:
6b:e5:95:f1:4c:d9:a3:59:6e:36:35:ec:6d:74:5e:
61:82:58:fd:a1:97:39:cc:be:96:6d:fe:be:50:38:
ef:25:2f:73:9b:42:15:e5:d7:bd:a0:ac:b9:4d:e8:
c2:0d:d4:30:ca:07:05:42:eb:13:64:c6:b9:f7:be:
88:d4:f9:d2:d0:03:76:d6:1c:32:ca:e9:14:fb:46:
1e:50:db:84:a4:99:3a:76:f9:17:01:3b:a2:35:af:
ec:33:82:e3:3b:46:66:5e:05:7e:d9:0e:f8:25:fa:
97:11:d9:ed:41:32:3b:a7:07:d9:51:da:78:be:b6:
a7:5d:fc:c2:91:f9:bf:79:08:2f:5d:96:1a:f3:9b:
21:22:f5:b5:c3:56:ab:0f:f7:f5:a2:6e:e1:4c:46:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:41:BA:0B:29:70:E7:E5:6B:F2:F4:1E:3F:53:71:FA:61:68:0E:03
X509v3 Authority Key Identifier:
keyid:B5:6B:A6:6A:CB:6B:28:A7:5C:F8:B9:26:29:F3:89:88:E6:BC:E5:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:10:d7:32:79:42:4f:71:52:20:ca:1f:ce:12:2e:ff:ed:19:
08:3f:64:18:0c:dd:2f:bd:f8:01:77:c1:bd:d7:f2:46:51:af:
08:c2:a8:cd:e9:0e:fb:14:bd:10:69:f5:1f:2d:23:0a:2a:5a:
8e:ab:6f:13:61:11:c9:da:f7:4d:31:32:99:7e:56:4e:b3:fe:
db:eb:0b:4a:ab:28:3a:b7:16:f3:4a:96:9b:eb:99:da:8b:7f:
c3:28:c7:65:f7:e7:88:4b:8c:90:c4:be:11:1f:c1:32:63:8b:
13:ea:95:03:d0:a1:1e:2d:f0:ad:9e:76:48:f8:b4:8a:d8:66:
53:bb:05:61:1c:c8:5d:e1:42:7d:fc:17:2f:1c:fc:af:11:57:
cc:55:04:c5:5b:b8:0f:e6:1f:f6:fc:7b:6c:eb:ce:bc:ad:8f:
95:41:16:28:83:1f:26:6e:84:a0:a5:e9:bb:8c:93:ff:1e:58:
15:3a:dd:fa:29:fc:64:a0:80:67:39:3f:68:ae:30:9b:1e:de:
e7:7c:4a:96:1f:65:10:c2:7a:ba:b6:1a:d8:51:78:03:e9:e2:
34:63:4f:4f:cb:3f:eb:12:f1:46:be:b1:0a:03:fe:22:08:bd:
ae:37:c6:34:1f:9b:23:c7:c3:4d:37:98:a7:53:af:de:c6:3a:
f7:ad:c5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:16:54 2026 by rpki-client