
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft
File: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft (raw, json)
Hash identifier: wYvi+PsoXQA5CSktmo0WxtNKvbHFGNAmFUmO4bMINgI=
Subject key identifier: 77:D4:FD:F9:07:41:F8:92:1A:51:9F:0E:3E:55:CB:46:C3:86:AD:04
Authority key identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67
Certificate issuer: /CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67
Certificate serial: 4AF7A482D24AF1A495CBF31D8C47FD0B9C3BEE87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft
Manifest number: E1
Signing time: Sun 18 Oct 2026 00:40:05 +0000
Manifest this update: Sun 18 Oct 2026 00:35:05 +0000
Manifest next update: Mon 19 Oct 2026 00:50:05 +0000
Files and hashes: 1: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl (hash: i9cO2AGeUk4eb9Iuv1dn3IA7nFMBneNzv4GMwjX8dqA=)
2: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: IcQvSAJGT5F2NpZZwUWfDRfWyeJTixApL9YTKNnPovc=)
3: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: m7aYtnxqmO5yLH8RFKNeSd1PMgjIrrVpH7VORkZBuSQ=)
4: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: UdoPkZ+2AOHg3vZbgjXSJjipAK97nm8TlruCo/DcsiI=)
5: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: nVBnDB0/UQIhvlZknFXMulW4aEJQqLigk7J0WBCftGQ=)
6: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: q4GFRcWVs+Ai4gXERrwVrrYZbhWnp7v5yT7e4NRdMGk=)
7: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: 29cKBY9SmIDNcy8Up3JMwSzyFn85kJNfVtGR4zVqHOo=)
8: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: O7Jg3ekrKiPlwDIBfPqMERpdUxButyek7mBs/PaEfvA=)
9: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: W57jnxb8I7PewGJC2zTEjUBxKopfhpmR1Iwvxvyuls4=)
10: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: mb6stKBonjjNRvfMm98TbumJRAVflg9hiU378+4IYt4=)
11: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: Gh74rlG6cZiGWXdiLt7turdRPANg8uysBJZ/a1V4u3c=)
12: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: nUugKOdExMFJnvFh04jHSO3wCeesIumGtVFPqxZ7JUo=)
13: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: xGj0e4XQ4vJ8oWerZ4jXagNlyhy1gxpkEDp9VKKcLHc=)
14: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: IgZVkE+S6069w73+w/n6imuTngD34gWEV6HPl2N+lmw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl
rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 00:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f7:a4:82:d2:4a:f1:a4:95:cb:f3:1d:8c:47:fd:0b:9c:3b:ee:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67
Validity
Not Before: Oct 18 00:35:05 2026 GMT
Not After : Oct 19 00:50:05 2026 GMT
Subject: CN=77D4FDF90741F8921A519F0E3E55CB46C386AD04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e9:b6:e2:b7:44:64:a4:57:d5:74:08:0b:f6:
02:51:cc:67:b2:e8:6a:f7:d9:d8:bd:2d:6d:03:46:
bf:85:cf:28:bd:37:ca:b6:f6:cc:a8:27:07:2f:9f:
87:19:7a:af:ae:1c:cf:f7:8c:5b:89:a7:20:be:f4:
c1:d2:9a:8d:24:7e:71:8b:95:19:62:49:41:5f:8f:
17:94:08:09:85:24:84:47:e4:c3:19:5d:56:76:9a:
ba:ad:04:6f:ed:f3:1d:7b:d5:9d:06:3e:2e:e8:f1:
9f:07:11:30:75:a3:d4:bc:3a:28:36:b2:26:50:95:
07:32:eb:b7:ce:05:5e:56:8b:27:00:ce:8c:70:fe:
0d:36:f6:df:cf:cd:f6:c4:69:04:9f:90:4d:b1:32:
2a:86:61:48:ef:1a:16:c4:69:ef:7e:43:41:33:ab:
83:2d:62:d8:3b:b9:a7:c4:3f:a7:67:2c:24:0c:4e:
f5:89:0a:17:5f:6c:25:32:69:60:ff:b1:d6:fb:7d:
f3:e2:ce:f3:5a:9f:2c:88:a4:02:b9:6b:31:29:1f:
db:e2:91:68:5c:44:2c:99:3e:b7:b2:f1:d2:91:5b:
34:61:01:e2:53:2b:60:c5:2f:8f:da:dc:09:3b:56:
8a:00:b7:ad:47:e3:3e:23:f3:95:6c:6e:70:48:52:
60:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D4:FD:F9:07:41:F8:92:1A:51:9F:0E:3E:55:CB:46:C3:86:AD:04
X509v3 Authority Key Identifier:
keyid:BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:d4:1c:e9:7f:b4:2a:c4:5c:c1:f9:ba:97:5a:c1:66:3c:77:
fd:00:4b:fd:16:f3:58:d0:c7:13:5c:48:c3:f7:ce:cd:4a:c8:
28:8e:9c:4b:48:80:13:d8:b6:e8:d0:f9:00:b4:3b:5c:4b:08:
e0:c2:9b:57:14:0e:fc:35:1c:ba:2c:42:e5:db:06:75:5b:77:
6c:e3:b0:a7:10:a5:d3:4b:be:90:98:7c:6e:4c:74:1a:84:f9:
59:df:bf:cf:8b:66:23:b8:10:a6:ce:2f:3b:12:3c:1d:a8:0e:
d0:93:20:63:d9:ab:e6:a4:b3:f2:27:95:28:10:1b:2b:1a:f4:
df:9d:7f:7d:d2:ae:4f:fd:8b:ae:f7:aa:ab:71:a1:9e:e9:4d:
2b:8e:1f:08:ef:8b:62:f1:7f:fb:75:1b:b1:1c:2c:29:94:51:
6a:40:90:1f:4b:ed:f0:b9:e6:ef:2f:0c:ef:74:65:01:58:4d:
83:a9:75:3f:2e:1b:2f:11:eb:9e:15:cd:96:f7:99:15:74:a3:
1a:41:19:d4:cb:ee:de:e4:ef:3e:bc:0c:46:00:be:9d:73:ad:
52:08:e3:ae:71:c3:55:f9:5b:1d:57:af:56:4e:ad:c8:6b:e8:
ce:cd:b3:e9:29:08:74:a4:fc:27:95:70:bf:f5:1d:ba:7a:dc:
73:9e:a3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 15:29:09 2026 by rpki-client