
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft
File: B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft (raw, json)
Hash identifier: j3VvgvkF9YDorC9Z51sGyZ2tRFOKeCR0pXj2ZtZ2w9g=
Subject key identifier: 13:10:4E:FB:EB:C7:E2:59:54:E1:A0:F6:55:0B:FC:F8:14:96:DE:0D
Authority key identifier: B5:B2:9A:B5:6D:2B:92:7B:DE:33:61:B6:CB:58:CD:08:53:92:62:B0
Certificate issuer: /CN=B5B29AB56D2B927BDE3361B6CB58CD08539262B0
Certificate serial: 282EB5E69C3E58E0A4EAF8777C81C3B709F3E45A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft
Manifest number: 2B
Signing time: Wed 03 Jun 2026 02:27:47 +0000
Manifest this update: Wed 03 Jun 2026 02:22:47 +0000
Manifest next update: Thu 04 Jun 2026 02:31:47 +0000
Files and hashes: 1: 3230322e3132392e3232342e302f32322d3234203d3e203338373831.roa (hash: zUwwGmxcrXHUEybdjp6Ek486OiNzUkHwLan92qEDTQE=)
2: B5B29AB56D2B927BDE3361B6CB58CD08539262B0.crl (hash: 8ILTuPPkbNx3cLVo96d/1xrWonZKri6jJT+5W/EyP8A=)
3: 323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa (hash: IbczqxcYZ+zxW3Aa+76klhFYL/3X9BCvNeRgAfb1vp4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.crl
rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 02:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:2e:b5:e6:9c:3e:58:e0:a4:ea:f8:77:7c:81:c3:b7:09:f3:e4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5B29AB56D2B927BDE3361B6CB58CD08539262B0
Validity
Not Before: Jun 3 02:22:47 2026 GMT
Not After : Jun 4 02:31:47 2026 GMT
Subject: CN=13104EFBEBC7E25954E1A0F6550BFCF81496DE0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:52:16:2a:40:9f:8e:78:f8:ed:a2:fb:af:
d4:56:19:f9:96:37:d2:21:1c:b2:18:cf:6f:b0:8b:
ea:ec:94:52:dc:42:a9:fb:e7:40:0d:12:85:e5:7a:
00:d0:16:78:8b:e5:80:6b:09:a2:99:c6:66:03:29:
2f:2f:11:8f:51:c5:3c:f5:f6:61:a3:50:ee:09:09:
cc:32:90:8c:af:75:ba:ca:df:88:70:7e:a1:cf:25:
ba:9d:51:97:c4:1b:04:5b:f0:69:3a:50:51:30:9f:
ec:e8:00:2d:5f:01:3e:8e:d5:be:61:8d:99:64:4f:
4d:e6:95:b8:3c:39:72:ce:26:f9:dc:82:12:3f:a3:
ea:34:9d:af:d6:db:96:42:58:22:9b:6d:20:86:03:
ff:84:6b:d9:e1:c9:f1:3b:7b:d8:71:e1:11:e5:e8:
cb:3e:da:e1:52:93:60:d1:58:1f:62:31:26:0e:86:
d5:d8:6f:44:d7:c2:d9:0a:e3:be:f2:34:9c:4f:73:
60:77:3a:cd:47:55:96:22:9c:ca:8f:46:47:9d:a3:
b2:db:95:a7:bf:ad:b2:73:4d:40:2c:4e:d2:53:a6:
99:ec:d9:fa:8a:54:7e:7b:85:59:dd:b1:76:7d:76:
0a:b8:e5:c4:18:bf:46:23:a0:a8:20:2e:95:ac:66:
57:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:10:4E:FB:EB:C7:E2:59:54:E1:A0:F6:55:0B:FC:F8:14:96:DE:0D
X509v3 Authority Key Identifier:
keyid:B5:B2:9A:B5:6D:2B:92:7B:DE:33:61:B6:CB:58:CD:08:53:92:62:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:96:e9:8b:d7:d5:4f:b0:ea:83:44:3b:b3:3d:c9:eb:bb:7c:
8b:9b:d3:57:10:47:71:9b:11:7f:02:ec:24:4d:05:d3:65:e3:
89:73:72:0c:24:81:24:83:32:4a:40:8c:32:20:52:14:ce:d3:
d0:23:6a:25:d2:32:9a:1f:30:30:64:03:d8:ee:cc:7e:e1:d0:
f4:9e:e7:8a:83:03:e8:0d:26:ef:3b:21:7b:6c:53:22:e4:78:
bf:bb:dc:93:61:a1:05:7c:a6:85:e1:0f:2a:a1:32:3c:2a:db:
a6:e6:1e:ee:50:9e:48:10:54:a5:db:55:94:3c:59:3d:16:12:
a2:86:e7:8e:b1:98:e1:38:8b:50:9d:57:c9:c1:92:e7:67:8d:
26:3c:2f:80:f5:35:98:e3:72:1f:52:1b:16:73:fa:6f:02:b3:
08:67:2c:1d:a0:be:65:42:a0:89:de:8e:6b:cc:36:c2:2d:8d:
14:bc:9b:92:d5:45:a0:35:7c:dc:47:93:45:b1:2b:36:2f:7a:
2c:6c:33:73:13:24:fc:09:48:98:0c:ad:32:92:df:ad:9b:e4:
2d:5b:fc:ad:11:22:e4:8c:d9:2a:84:35:3b:76:e7:90:dd:44:
9b:a2:87:69:15:8c:e8:dc:9a:ff:74:be:6c:84:9f:ed:82:e6:
46:56:a0:ad
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUKC615pw+WOCk6vh3fIHDtwnz5FowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVCMjlBQjU2RDJCOTI3QkRFMzM2MUI2Q0I1OENEMDg1
MzkyNjJCMDAeFw0yNjA2MDMwMjIyNDdaFw0yNjA2MDQwMjMxNDdaMDMxMTAvBgNV
BAMTKDEzMTA0RUZCRUJDN0UyNTk1NEUxQTBGNjU1MEJGQ0Y4MTQ5NkRFMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPFIWKkCfjnj47aL7r9RWGfmW
N9IhHLIYz2+wi+rslFLcQqn750ANEoXlegDQFniL5YBrCaKZxmYDKS8vEY9RxTz1
9mGjUO4JCcwykIyvdbrK34hwfqHPJbqdUZfEGwRb8Gk6UFEwn+zoAC1fAT6O1b5h
jZlkT03mlbg8OXLOJvncghI/o+o0na/W25ZCWCKbbSCGA/+Ea9nhyfE7e9hx4RHl
6Ms+2uFSk2DRWB9iMSYOhtXYb0TXwtkK477yNJxPc2B3Os1HVZYinMqPRkedo7Lb
lae/rbJzTUAsTtJTppns2fqKVH57hVndsXZ9dgq45cQYv0YjoKggLpWsZlfPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUExBO++vH4llU4aD2VQv8+BSW3g0wHwYDVR0j
BBgwFoAUtbKatW0rknveM2G2y1jNCFOSYrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDc5MzY4NmItMzM4NC00NDEyLThlN2MtZTlkMWI4NTJhYTFlLzAvQjVCMjlBQjU2
RDJCOTI3QkRFMzM2MUI2Q0I1OENEMDg1MzkyNjJCMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNUIyOUFCNTZEMkI5MjdCREUzMzYxQjZDQjU4Q0QwODUzOTI2
MkIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc5MzY4NmItMzM4NC00NDEyLThl
N2MtZTlkMWI4NTJhYTFlLzAvQjVCMjlBQjU2RDJCOTI3QkRFMzM2MUI2Q0I1OENE
MDg1MzkyNjJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHOW6YvX1U+w6oNEO7M9yeu7fIub01cQR3Gb
EX8C7CRNBdNl44lzcgwkgSSDMkpAjDIgUhTO09AjaiXSMpofMDBkA9juzH7h0PSe
54qDA+gNJu87IXtsUyLkeL+73JNhoQV8poXhDyqhMjwq26bmHu5QnkgQVKXbVZQ8
WT0WEqKG546xmOE4i1CdV8nBkudnjSY8L4D1NZjjch9SGxZz+m8CswhnLB2gvmVC
oInejmvMNsItjRS8m5LVRaA1fNxHk0WxKzYveixsM3MTJPwJSJgMrTKS362b5C1b
/K0RIuSM2SqENTt255DdRJuih2kVjOjcmv90vmyEn+2C5kZWoK0=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:44:23 2026 by rpki-client