
$ rpki-client -vvf rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft
File: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft (raw, json)
Hash identifier: MbX7w2AWYIVwuA5tg9Nf+IBTk2rz1BEGy9f02Lqh5e8=
Subject key identifier: 24:58:D0:30:7C:90:38:8A:0C:57:BA:29:6B:B2:F8:16:BB:9A:48:AF
Authority key identifier: B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5
Certificate issuer: /CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5
Certificate serial: 518287E3137A2672F22B91F696F7BBDB173B48D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 19:38:47 +0000
Manifest this update: Tue 02 Jun 2026 19:33:47 +0000
Manifest next update: Wed 03 Jun 2026 22:09:47 +0000
Files and hashes: 1: B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl (hash: 6uckpaKD91sWCWdLRQpFtwahH4Txqcu/FLUcXEJlq0c=)
2: 3230322e39332e3131322e302f32302d3234203d3e203233363936.roa (hash: hZL/hi6Qgsw4sgW/mhx3uNInW8MyX4I+jFDzsHcP8Z4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl
rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:82:87:e3:13:7a:26:72:f2:2b:91:f6:96:f7:bb:db:17:3b:48:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5AE7D79B229565DB5A9C4E74CD038E53F984BF5
Validity
Not Before: Jun 2 19:33:47 2026 GMT
Not After : Jun 3 22:09:47 2026 GMT
Subject: CN=2458D0307C90388A0C57BA296BB2F816BB9A48AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:51:72:41:62:74:b3:8b:80:b2:43:22:d7:
b7:f5:14:12:e0:e0:92:93:a9:d7:83:60:81:85:78:
9c:63:67:13:2f:3d:3e:70:77:09:7b:0b:39:78:a6:
17:ef:9b:b6:c6:0d:b4:e7:5b:00:62:d2:7d:75:56:
4c:db:e0:e4:35:b4:b5:3b:cf:4e:c6:1f:dc:94:f7:
30:a3:1f:1d:35:94:e1:79:f9:84:04:83:3b:4a:0a:
eb:22:64:52:1d:f0:e7:9e:62:d6:a8:56:f3:cf:6a:
63:ac:72:e0:70:e9:82:f9:b1:05:6e:a8:6b:73:50:
ef:8e:a7:0f:36:39:c5:ec:70:04:08:34:b3:75:0e:
47:cf:cf:a3:11:85:77:74:50:69:be:cc:f1:38:26:
89:a6:bf:f9:ba:e1:2a:4c:54:8d:24:40:a0:97:f3:
95:42:d2:04:a5:e2:b2:d7:c2:a3:be:c8:1a:e1:0b:
3d:1e:5d:c6:c9:f0:63:24:25:21:9b:aa:67:96:0a:
45:1f:ab:7f:a1:ba:db:4f:27:d3:7e:bc:9b:1e:fb:
44:7f:e1:bc:61:ba:9a:5b:fd:42:b0:21:cd:86:d5:
01:49:b9:49:d8:76:2c:72:d7:71:b7:f3:d7:02:c7:
65:43:50:ba:b1:d0:e2:4e:be:6b:7e:c3:b2:05:8c:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:58:D0:30:7C:90:38:8A:0C:57:BA:29:6B:B2:F8:16:BB:9A:48:AF
X509v3 Authority Key Identifier:
keyid:B5:AE:7D:79:B2:29:56:5D:B5:A9:C4:E7:4C:D0:38:E5:3F:98:4B:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c7396c-4bbe-4c6e-8f50-442c205e070c/0/B5AE7D79B229565DB5A9C4E74CD038E53F984BF5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fb:fa:2b:8c:df:3e:c2:80:de:c6:16:a9:c8:c6:9c:28:41:
14:20:aa:ba:c0:ab:fa:52:e8:f9:60:f2:3d:9b:72:9b:67:8f:
e8:0a:ed:3b:6c:09:75:9e:85:d7:f0:da:ef:98:fe:c1:aa:16:
c5:9e:37:bb:29:0c:ff:6d:74:ea:7d:5c:61:5c:ee:07:2d:92:
67:08:78:4c:94:9d:98:01:64:dc:c0:a0:94:3a:92:34:78:eb:
81:18:ea:4a:b0:f2:3f:78:e0:37:5f:83:17:7e:55:45:b6:e0:
ee:2b:a1:fa:f6:cc:55:df:2f:11:52:85:38:62:4e:1f:d9:66:
fb:f9:a1:89:82:ca:43:79:67:20:ee:16:e9:49:e4:a5:50:d2:
f3:14:8d:77:0d:0b:14:6c:66:da:c1:10:43:b9:79:ea:7d:8a:
2d:ab:5d:cd:06:82:24:96:49:5a:0e:0f:18:f4:b5:44:01:05:
27:f1:e6:8f:f1:5c:02:67:f2:aa:1b:04:be:88:0a:f4:04:6b:
08:75:a8:36:fd:5a:c8:17:dc:06:c0:43:88:28:46:79:81:a0:
97:31:3f:25:0c:7e:fc:9b:03:93:7c:19:d5:36:7d:ba:7b:c1:
0e:fc:51:89:69:7a:a8:4e:e4:d0:02:1f:2d:f8:9c:6f:ce:3c:
aa:39:39:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:15:33 2026 by rpki-client