
$ rpki-client -vvf rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
File: B9306D640F988742BB1CB2B19AB9D729636922A3.mft (raw, json)
Hash identifier: zn7ZUJZatwnK9AsAdZxI9ljH3PW2Ywaj7a/aCXnDzJY=
Subject key identifier: 1F:38:13:41:BA:85:24:3A:87:A1:7A:68:C8:0B:CA:01:C7:0A:A9:50
Authority key identifier: B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3
Certificate issuer: /CN=B9306D640F988742BB1CB2B19AB9D729636922A3
Certificate serial: 4EAD61BD7C3E6867EC60894874BABCE197E0ED7B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
Manifest number: 69
Signing time: Mon 20 Jul 2026 00:32:06 +0000
Manifest this update: Mon 20 Jul 2026 00:27:06 +0000
Manifest next update: Tue 21 Jul 2026 02:57:06 +0000
Files and hashes: 1: B9306D640F988742BB1CB2B19AB9D729636922A3.crl (hash: UBVZ8OE9fk1A8cwlJoaKk/W3cJ8PiU/cVC3yPOdprBA=)
2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: axp2eq8WjJ3oyW6DrRyrSevP2DkGuYbEvHXLlB0V2P0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl
rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 02:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ad:61:bd:7c:3e:68:67:ec:60:89:48:74:ba:bc:e1:97:e0:ed:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9306D640F988742BB1CB2B19AB9D729636922A3
Validity
Not Before: Jul 20 00:27:06 2026 GMT
Not After : Jul 21 02:57:06 2026 GMT
Subject: CN=1F381341BA85243A87A17A68C80BCA01C70AA950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:36:49:c8:c7:3c:a3:ce:ea:f3:c2:ff:ac:
d3:94:f6:1b:4a:02:fb:ad:fe:11:24:61:0d:89:26:
db:c4:d1:54:2f:61:64:2a:8b:42:c9:8e:3f:24:d9:
63:1c:15:51:06:fe:5a:66:c6:72:fd:c6:a5:3b:44:
5e:57:a7:a8:59:c7:39:9f:2d:80:ef:03:3e:26:13:
7c:e9:09:e3:ad:d2:51:89:9e:f4:9f:0b:35:f1:c7:
c1:46:ad:d0:b2:ab:66:87:1c:c2:49:e3:7e:0d:11:
f5:df:d4:46:b4:ad:67:0a:a8:dc:04:be:0b:63:bc:
aa:3f:b9:96:e4:3d:d4:3c:07:d5:42:3a:77:f0:e5:
be:3e:ce:e3:6f:0b:b9:59:6d:6c:a2:62:53:a3:17:
66:d7:d6:9a:80:71:76:e1:9c:16:39:8f:ae:d7:bf:
9a:7a:18:ff:1c:46:fa:a4:7c:f2:0d:c6:a2:72:37:
4f:82:bb:d0:03:6b:ff:7a:3b:6f:58:e5:18:2b:cd:
83:bc:27:e2:e3:a9:e2:39:0a:3b:c1:7b:63:4c:bf:
f8:4b:c8:cf:87:01:41:a4:88:32:1b:9f:d3:97:f6:
e7:a1:d1:36:ac:22:42:0d:1c:f7:6f:45:84:4e:57:
56:82:80:36:eb:bf:7c:fb:35:c2:63:2f:df:58:fa:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:38:13:41:BA:85:24:3A:87:A1:7A:68:C8:0B:CA:01:C7:0A:A9:50
X509v3 Authority Key Identifier:
keyid:B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:99:f5:7e:67:60:70:b6:77:b6:71:c3:6e:ce:e4:5e:30:22:
70:d3:41:8c:41:55:ec:85:7b:e6:a3:69:40:ac:a2:de:77:1e:
8b:21:d5:65:99:ac:88:7d:c7:9e:f0:5c:1b:da:7e:5c:a4:f9:
64:3c:46:ed:74:35:fd:54:b8:aa:5e:49:61:bf:59:ae:2e:8b:
61:5e:34:3a:b7:06:55:67:45:71:c1:b3:20:ac:a0:f8:62:3a:
df:ab:cf:6d:cc:08:67:96:9a:4d:2b:e2:17:80:64:b9:fe:22:
a8:23:20:c0:dd:95:d1:68:7a:75:af:06:ce:46:f7:1f:3d:85:
0d:2e:86:86:01:f5:0c:ff:53:04:58:c6:83:c0:f7:1a:31:81:
1f:e0:e2:bd:88:37:ab:c5:38:c6:34:2d:cb:2e:3e:e2:c4:27:
6c:2a:7a:0b:26:61:2e:a9:bf:fb:60:1e:3a:e3:21:60:ef:b3:
af:e1:14:01:e1:d6:3e:f6:58:20:d8:27:20:3c:7d:73:32:ce:
83:5d:98:60:2b:5f:f8:50:58:1c:06:5e:17:21:a3:8c:4c:25:
80:14:7a:d8:57:6f:8b:20:f9:40:ba:81:3d:d4:05:c5:0c:78:
e8:31:80:1e:82:8e:72:7d:eb:0b:68:1e:d4:23:a4:a3:92:b9:
f8:07:da:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 04:33:19 2026 by rpki-client