
$ rpki-client -vvf rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft
File: 00BA333E1070BAC4039454B475BAA9D7802B83D6.mft (raw, json)
Hash identifier: xgQF10xmRRJF4wB1BNssT7zsG6zqkJYNYr+qmifBuYY=
Subject key identifier: 3C:67:08:AD:0C:D2:E5:0F:F0:6B:14:79:11:CC:44:62:3D:D5:36:40
Authority key identifier: 00:BA:33:3E:10:70:BA:C4:03:94:54:B4:75:BA:A9:D7:80:2B:83:D6
Certificate issuer: /CN=00BA333E1070BAC4039454B475BAA9D7802B83D6
Certificate serial: 2879E937609809192B54CA24A8D6A24342B89158
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 10:44:42 +0000
Manifest this update: Mon 20 Jul 2026 10:39:42 +0000
Manifest next update: Tue 21 Jul 2026 13:47:42 +0000
Files and hashes: 1: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: IhRU7xqMF7ymzp1jTbklUO54eBcVkN56coUh2E855Uc=)
2: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: u58hGkofFGWAycHfS2yt+5KkCwu1d003TmCn4MuzF24=)
3: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: TkJj4PfQ/aDGlDkDNfKuq4Lop3tC8gbIR74WO1bqwO8=)
4: 00BA333E1070BAC4039454B475BAA9D7802B83D6.crl (hash: NuVWxZbpqBJ7zviVr66/zDAOPUWWBQ83q7AZDaWztrE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.crl
rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 13:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:79:e9:37:60:98:09:19:2b:54:ca:24:a8:d6:a2:43:42:b8:91:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00BA333E1070BAC4039454B475BAA9D7802B83D6
Validity
Not Before: Jul 20 10:39:42 2026 GMT
Not After : Jul 21 13:47:42 2026 GMT
Subject: CN=3C6708AD0CD2E50FF06B147911CC44623DD53640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:5d:43:40:7f:63:0a:fa:58:71:58:73:66:
e8:53:84:80:d9:65:f3:32:da:0e:1f:6e:78:4c:8a:
ac:ea:a8:d4:e5:52:60:64:22:a3:b0:40:9d:c8:35:
35:0e:41:b6:9d:38:a9:53:22:8f:41:44:e5:20:cc:
0e:77:eb:14:f4:a1:19:a9:02:20:c1:a1:4d:50:fb:
f7:3a:9a:60:cb:ee:a2:aa:74:fc:8d:72:dc:51:56:
0c:aa:73:6f:3b:95:89:40:7b:6f:70:47:7e:d4:03:
c7:fa:22:e8:94:26:89:ec:e6:11:f9:b4:13:3a:b1:
8e:5d:fc:e0:29:ce:db:91:b5:4e:91:97:b3:cc:6b:
40:30:27:3c:a0:c2:83:81:f6:01:8b:84:67:94:e5:
a8:fe:07:ad:50:52:b3:d8:59:e5:db:cd:bb:3d:a4:
34:80:28:70:d9:50:8f:93:5f:d7:c2:e7:7f:e8:79:
c1:2f:dc:eb:27:5b:94:16:46:24:54:2c:cd:5b:eb:
bf:ea:cc:d2:78:ab:a4:b1:78:be:08:36:8e:ad:0d:
d7:a7:eb:5a:31:8a:16:27:b6:e1:87:53:bb:04:d8:
79:bb:82:b1:76:cb:69:9c:50:26:92:4d:63:a4:67:
f2:f3:77:01:77:28:16:2d:fc:a9:ac:82:88:09:13:
6a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:67:08:AD:0C:D2:E5:0F:F0:6B:14:79:11:CC:44:62:3D:D5:36:40
X509v3 Authority Key Identifier:
keyid:00:BA:33:3E:10:70:BA:C4:03:94:54:B4:75:BA:A9:D7:80:2B:83:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ad:c0:c8:49:b4:61:4b:9c:8d:c2:7a:22:62:72:67:61:d5:
b2:8d:f6:8b:47:11:a7:d2:fa:7e:0f:68:91:bb:73:36:f3:c0:
1b:58:8e:1b:9b:d7:e8:de:cf:f2:ef:24:6b:7d:d6:9d:0d:99:
74:00:10:18:f6:d0:d0:b3:79:7f:21:b7:b9:9b:41:d4:25:62:
46:8e:82:05:be:d9:c0:05:be:fa:43:15:32:5a:2a:56:74:aa:
e3:27:1d:40:84:2f:4a:00:2f:b4:53:a9:56:88:11:6f:5f:b5:
1b:44:2f:cb:f2:f4:c1:50:9e:c6:18:b2:b6:a4:3b:32:78:73:
ce:c7:ce:3f:95:4a:0e:13:64:8c:1a:90:5d:02:ee:bd:85:28:
10:3a:4b:79:a1:96:5b:76:b0:25:11:54:68:26:d4:b7:87:cd:
c2:b0:fe:c3:03:5a:9f:7f:8f:86:32:b4:59:81:1b:0a:0b:85:
3a:70:8c:cc:6d:81:e1:85:e9:55:47:13:77:df:94:81:3f:1a:
c3:3a:08:f3:6f:00:dc:9f:77:b8:e7:64:8b:3b:50:cb:e9:21:
4d:53:33:86:1a:b5:b9:93:4e:33:52:11:79:90:88:35:93:f8:
17:54:66:d1:95:e5:a6:6a:f4:15:3a:33:a7:c0:85:1f:cc:fa:
41:7f:19:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:58:40 2026 by rpki-client