
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft
File: B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft (raw, json)
Hash identifier: lRYVa7UhW/fcxpoU4adpvwoqrtNZFCqjB4CmXtSdMJw=
Subject key identifier: C8:A4:22:A6:AE:C9:FF:FA:FE:BD:F2:E4:9F:97:45:14:A9:35:CF:30
Authority key identifier: B5:B2:9A:B5:6D:2B:92:7B:DE:33:61:B6:CB:58:CD:08:53:92:62:B0
Certificate issuer: /CN=B5B29AB56D2B927BDE3361B6CB58CD08539262B0
Certificate serial: 2908A078705250B28A07DE4CFD25949D083B3634
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 15:15:27 +0000
Manifest this update: Mon 20 Jul 2026 15:10:27 +0000
Manifest next update: Tue 21 Jul 2026 16:52:27 +0000
Files and hashes: 1: 3230322e3132392e3232342e302f32322d3234203d3e203338373831.roa (hash: zUwwGmxcrXHUEybdjp6Ek486OiNzUkHwLan92qEDTQE=)
2: 323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa (hash: IbczqxcYZ+zxW3Aa+76klhFYL/3X9BCvNeRgAfb1vp4=)
3: B5B29AB56D2B927BDE3361B6CB58CD08539262B0.crl (hash: bR50AGxlnssmbpUBNY3EQh6ryMYmRQ227xV5Hs8AnUg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.crl
rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 16:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:08:a0:78:70:52:50:b2:8a:07:de:4c:fd:25:94:9d:08:3b:36:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5B29AB56D2B927BDE3361B6CB58CD08539262B0
Validity
Not Before: Jul 20 15:10:27 2026 GMT
Not After : Jul 21 16:52:27 2026 GMT
Subject: CN=C8A422A6AEC9FFFAFEBDF2E49F974514A935CF30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:4a:0e:82:36:fd:f3:76:a4:17:65:4c:e0:
af:f1:19:69:7b:0c:96:ca:16:23:f5:07:cc:ec:48:
0a:92:f7:fb:7a:62:48:33:1b:84:37:f5:e9:a4:8e:
b3:81:79:76:2d:d0:02:2d:fa:f8:3b:36:b7:6c:9e:
89:cc:15:40:1b:fa:f3:5a:ee:65:db:b9:cc:46:0f:
02:28:74:7c:ed:e9:f0:c0:8f:42:d9:09:09:c9:42:
82:a3:b2:76:1f:d5:4c:28:b2:17:d5:cb:ab:1a:40:
60:27:e0:9f:9e:37:8c:a1:28:14:d3:3b:b3:3b:35:
4d:2f:57:d8:06:07:80:be:86:d6:53:be:2f:e8:eb:
27:0a:36:92:dd:35:19:ad:0e:6b:6f:8c:bd:a4:d3:
52:53:0d:75:8b:b7:32:77:24:85:e5:09:b9:89:c9:
8e:07:cd:c6:b9:3e:ac:b5:67:25:a8:29:3c:ab:68:
31:29:67:fd:aa:24:d0:dc:3c:dc:00:ae:83:b9:d8:
f7:61:d5:1f:2c:50:f0:d5:1f:77:0e:03:f8:1a:b7:
f3:2e:8d:29:52:65:3d:d2:70:d6:49:9e:29:7a:17:
80:77:ff:49:76:dc:8a:c0:4a:0d:5e:60:ac:da:17:
21:65:da:e8:c2:df:85:00:2d:59:b9:64:53:45:ba:
f7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A4:22:A6:AE:C9:FF:FA:FE:BD:F2:E4:9F:97:45:14:A9:35:CF:30
X509v3 Authority Key Identifier:
keyid:B5:B2:9A:B5:6D:2B:92:7B:DE:33:61:B6:CB:58:CD:08:53:92:62:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4a:ae:a8:24:b2:c5:e6:f1:0f:10:5d:4b:89:8c:cb:51:6c:
2b:7a:45:2f:bd:5e:7c:5b:4d:ab:9e:af:fa:3d:35:f4:cd:8e:
60:d8:1a:b2:52:32:d2:91:b0:db:b5:cb:cb:da:dd:c0:6a:a9:
06:aa:f2:1d:bf:96:1a:b8:23:73:12:01:ba:a3:3d:86:45:4a:
35:e6:99:ba:f8:b7:83:da:8a:72:96:86:2b:07:09:9a:12:77:
84:29:49:45:68:fc:83:d1:a1:26:a2:bb:82:d7:de:b1:63:b6:
1e:06:59:1d:fd:90:ed:b9:40:74:ef:fb:b5:aa:64:30:90:62:
77:b3:94:b3:8a:63:46:9e:8a:20:84:19:63:d5:88:12:60:b1:
6a:ec:e6:7c:6d:4b:3d:7a:1c:8e:9b:a1:7b:6a:44:8d:fb:e2:
36:f5:54:50:f3:45:7a:49:2f:9e:fd:b9:c4:ab:d6:3d:0c:d5:
21:ff:fa:0a:0f:a2:c6:5d:5e:f3:87:49:e0:34:dd:17:ea:3c:
17:be:60:f1:25:c3:c3:e7:64:90:a9:d1:24:f8:c0:8c:80:ff:
4f:f0:d9:57:38:29:2c:37:0a:5f:24:05:ab:37:a3:b7:c6:63:
9c:8f:a4:cb:6a:8a:ce:d4:0c:fc:6b:77:b9:2d:b1:23:c0:85:
59:f6:cf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:24:38 2026 by rpki-client