
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft
File: B677F5476721449C1CB3D8F67673665A0A038595.mft (raw, json)
Hash identifier: cPvrqveSeu2fQFoHpiHkzH3Hsw5E+4gzvBG4FlTrzP8=
Subject key identifier: D5:AB:93:B0:F8:7F:16:9D:13:23:FA:72:81:3C:7B:88:79:89:94:6A
Authority key identifier: B6:77:F5:47:67:21:44:9C:1C:B3:D8:F6:76:73:66:5A:0A:03:85:95
Certificate issuer: /CN=B677F5476721449C1CB3D8F67673665A0A038595
Certificate serial: 2D340ACB5D21236225417E5ECC79B8808909250D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft
Manifest number: 8C
Signing time: Fri 14 Aug 2026 16:10:00 +0000
Manifest this update: Fri 14 Aug 2026 16:05:00 +0000
Manifest next update: Sat 15 Aug 2026 20:02:00 +0000
Files and hashes: 1: 3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa (hash: lRUuWcUd02IZlpdvWX9KHM1+gKLrQM+l0jBHsP+smvs=)
2: B677F5476721449C1CB3D8F67673665A0A038595.crl (hash: BrYyoFjMy6qXByKk7lFCLRZAbse62PChX+oaRv1zdfI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.crl
rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 20:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:34:0a:cb:5d:21:23:62:25:41:7e:5e:cc:79:b8:80:89:09:25:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B677F5476721449C1CB3D8F67673665A0A038595
Validity
Not Before: Aug 14 16:05:00 2026 GMT
Not After : Aug 15 20:02:00 2026 GMT
Subject: CN=D5AB93B0F87F169D1323FA72813C7B887989946A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:17:1b:60:7b:e4:e7:30:3b:9d:b9:19:2d:
1d:d2:cc:03:d5:26:b4:46:44:70:4e:78:b1:bc:be:
a6:b9:80:97:25:a9:3b:43:be:74:67:21:22:c2:06:
12:a3:e5:8c:e5:46:c0:b7:2d:d9:11:dd:c3:67:ae:
aa:8c:6c:2b:92:ed:92:59:a3:13:33:ce:9a:8b:7b:
ee:00:83:82:fe:77:3a:c8:ec:72:47:78:8c:a7:00:
fa:f2:1a:48:be:43:2e:98:94:2b:b1:ae:dc:44:d3:
6c:1d:c7:24:81:e4:22:02:bb:43:06:c5:93:43:35:
49:8c:1a:8d:9e:f5:ec:09:e9:f3:7a:b3:09:f1:61:
64:c7:d7:55:02:80:d8:57:53:57:12:d2:eb:ff:e9:
70:20:94:57:90:1f:d9:ce:11:bc:22:af:54:bb:2b:
b0:5e:6d:33:77:83:50:07:76:e9:4f:4a:84:84:18:
d1:80:f0:91:6a:ad:e7:34:9b:39:c4:b2:2a:12:4c:
e8:e9:93:15:70:98:86:f7:cb:c7:ff:17:e7:43:22:
47:9f:e1:ef:02:0e:56:62:33:f0:c5:ad:b6:76:38:
bd:d2:d1:3c:e7:f1:2b:8d:cb:f2:d2:2a:31:73:16:
f5:92:c0:34:f5:3f:3d:f9:53:04:27:22:1a:c3:2b:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AB:93:B0:F8:7F:16:9D:13:23:FA:72:81:3C:7B:88:79:89:94:6A
X509v3 Authority Key Identifier:
keyid:B6:77:F5:47:67:21:44:9C:1C:B3:D8:F6:76:73:66:5A:0A:03:85:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:79:91:94:bc:75:14:6e:46:ce:e0:5d:8c:b4:b0:59:2d:a1:
21:53:02:06:7b:ad:df:f8:41:4d:cb:ec:83:c2:44:79:9b:bf:
ab:8e:ff:58:73:e9:b1:25:eb:10:48:61:76:47:64:27:40:2d:
ae:c8:0f:a1:af:4d:25:2f:1b:33:d5:86:bb:c1:fb:9d:30:d2:
68:3a:d3:02:d2:50:36:3c:96:18:5d:ae:27:70:97:74:da:28:
96:1f:15:53:5b:94:3a:0e:b0:18:50:10:3d:79:45:43:36:f6:
2e:56:23:76:fa:3f:50:c6:ed:bd:94:42:93:c0:1b:bf:93:8c:
51:ec:ac:a6:93:b2:c6:93:4e:44:95:6c:e9:fc:b1:03:04:0b:
d6:14:39:1b:1a:1e:9e:13:fa:b9:6a:af:06:bb:9e:9a:b6:ac:
e2:b0:b5:d2:7b:85:80:cc:73:73:11:19:6b:23:31:1d:e3:68:
15:0b:b9:c4:87:28:05:d7:ec:19:2a:7e:b0:55:cb:03:cf:90:
6a:1a:a6:ea:a8:19:eb:04:57:46:e6:20:4c:d7:0d:e4:bb:b4:
27:b4:f9:98:73:f4:e3:a7:35:79:16:c8:4f:23:34:b9:ec:f0:
a2:3d:04:30:98:3e:fa:28:9c:e8:22:cb:14:d1:7f:54:30:fa:
1a:ba:ff:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 13:29:41 2026 by rpki-client