
$ rpki-client -vvf rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
File: B9306D640F988742BB1CB2B19AB9D729636922A3.mft (raw, json)
Hash identifier: wPrM0NkYwxhxYqas0GdpksRKm+GH7xQKFrL+4V5FhuQ=
Subject key identifier: E5:63:8B:83:30:EE:96:C1:18:D5:A9:A9:E3:02:50:EC:17:7E:B3:C9
Authority key identifier: B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3
Certificate issuer: /CN=B9306D640F988742BB1CB2B19AB9D729636922A3
Certificate serial: 3569737C8A1D1C96BCBBF2480647FA080406E415
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 22:33:09 +0000
Manifest this update: Tue 02 Jun 2026 22:28:09 +0000
Manifest next update: Wed 03 Jun 2026 22:39:09 +0000
Files and hashes: 1: B9306D640F988742BB1CB2B19AB9D729636922A3.crl (hash: KpjsAtI7oW/8a3xYKIiDA88IDLcO9U7DFCDcRC8SZHA=)
2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: axp2eq8WjJ3oyW6DrRyrSevP2DkGuYbEvHXLlB0V2P0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl
rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:69:73:7c:8a:1d:1c:96:bc:bb:f2:48:06:47:fa:08:04:06:e4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9306D640F988742BB1CB2B19AB9D729636922A3
Validity
Not Before: Jun 2 22:28:09 2026 GMT
Not After : Jun 3 22:39:09 2026 GMT
Subject: CN=E5638B8330EE96C118D5A9A9E30250EC177EB3C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:e2:9f:f8:a6:59:47:33:ea:b2:47:e5:d5:
30:f9:3e:13:9f:47:f7:09:e9:b3:5f:11:aa:35:09:
ec:ff:a4:a8:eb:37:5e:a2:be:e0:07:45:48:7f:f1:
71:76:5b:ba:57:57:d4:96:8c:ed:38:3b:ab:2a:c8:
95:77:22:3b:bc:72:b8:47:15:ae:f2:42:d2:ba:01:
8a:1f:ad:14:cc:ad:9f:bd:4e:cc:ea:4f:1f:2b:7e:
95:c6:72:09:a1:c2:75:be:fe:bb:06:ae:a0:e6:b8:
ae:61:05:05:63:d0:31:1c:ff:ee:9c:e2:14:31:eb:
19:51:20:c7:02:eb:f0:9d:96:86:26:da:ae:36:e7:
ec:57:bc:5a:fa:be:02:15:32:32:8d:c6:51:d1:4e:
b4:36:13:b0:01:c2:a6:88:2b:8c:20:34:1b:b1:7d:
95:f2:6e:6d:6e:15:97:1f:fb:8f:22:68:33:de:29:
b2:8a:e6:4c:5e:d7:88:24:4d:31:4a:97:81:b5:a5:
95:52:29:5b:35:b1:ce:fa:8c:4b:ec:15:27:b4:ba:
f8:ad:37:17:00:b0:75:ee:d7:18:61:f3:88:c1:58:
f2:7d:5f:51:36:e2:cf:7b:63:cf:a0:1a:44:08:b4:
f2:63:34:4d:b2:60:56:6e:72:2b:52:c6:33:8a:ae:
2d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:63:8B:83:30:EE:96:C1:18:D5:A9:A9:E3:02:50:EC:17:7E:B3:C9
X509v3 Authority Key Identifier:
keyid:B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3c:ad:d4:6f:4f:d7:2b:c4:68:43:ec:9f:45:6c:ef:72:c6:
cb:e8:31:d7:62:05:eb:7e:df:cc:a5:78:f1:77:0a:50:28:71:
91:49:ff:5e:13:23:d2:91:ca:e4:ad:ad:ce:79:dc:60:92:c5:
91:77:b2:9b:8f:8f:11:5f:65:22:d6:21:8b:83:a1:bb:7a:b5:
4d:6e:be:10:fd:f1:5a:7b:f1:e9:50:23:0e:fe:29:e8:4b:02:
7d:8b:89:3a:7f:30:86:0c:a0:73:7c:e5:45:5c:d0:64:c6:b7:
2c:e8:fe:1f:f8:8c:21:53:3c:3a:1f:f2:58:bc:23:bb:a3:3c:
78:7b:17:a8:2a:d5:b3:9a:43:1f:7c:a7:a8:4b:ec:26:e3:33:
d0:df:ac:67:93:aa:31:dc:3f:72:4d:b9:37:2b:86:79:28:a3:
ae:1a:c9:f5:d8:55:9c:cf:01:6e:9c:1e:ec:1a:ff:43:60:49:
2e:3a:3d:b0:cf:66:9c:17:9c:95:26:92:0e:8d:fe:85:bb:48:
0d:1a:38:83:68:9e:3a:28:b3:92:31:b3:11:1b:74:c4:4f:4e:
d6:1b:1a:dd:68:db:cc:8b:1e:eb:de:95:84:71:d0:a4:c5:ac:
a4:60:11:47:42:21:7e:b8:e0:c7:a6:25:60:fd:10:02:bf:bf:
6f:bd:e9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:20:51 2026 by rpki-client