
$ rpki-client -vvf rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft
File: B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft (raw, json)
Hash identifier: gMkMBODEoUwN00NkMjmUfiGJWZlghhkAOPee2p55P8A=
Subject key identifier: 94:D7:27:5C:4F:AA:9D:6C:0E:C4:46:BF:97:29:38:09:6D:29:53:07
Authority key identifier: B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70
Certificate issuer: /CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570
Certificate serial: 388158E6E7157FCC5078C22C94E5964A297D67F9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft
Manifest number: 2B
Signing time: Wed 03 Jun 2026 00:30:29 +0000
Manifest this update: Wed 03 Jun 2026 00:25:29 +0000
Manifest next update: Thu 04 Jun 2026 04:22:29 +0000
Files and hashes: 1: B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl (hash: 40hChBB03dNFF4uGPNFm500hwp7BU2TugC430iHEDv8=)
2: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: BFoAAOYL5cXcuIYHdcG6m2LVE3HWh1vuQutXqW1gBIM=)
3: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: 1XW8m/1HHafjwn856SxYeKjsgoK5KYpfAPCW/Yr3PaE=)
4: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: GK/q1qgmQxfM3voSc0k+YTmkhCDo78ptqyplH6DohgE=)
5: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: HJdyg1CH1wYNkX3IJPS7n0ig1ABVkAurwagIizZ3YJY=)
6: 323430353a636163303a313a3a2f34382d3438203d3e20313339393832.roa (hash: TOnsrcvIXglIicbrrGOcttljfn+j8zuH56+Uevu2CiA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl
rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 04:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:81:58:e6:e7:15:7f:cc:50:78:c2:2c:94:e5:96:4a:29:7d:67:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570
Validity
Not Before: Jun 3 00:25:29 2026 GMT
Not After : Jun 4 04:22:29 2026 GMT
Subject: CN=94D7275C4FAA9D6C0EC446BF972938096D295307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:d3:03:96:c3:f1:a3:5d:a7:ed:be:d6:ff:
1b:aa:b3:eb:f5:48:e1:ba:ed:38:60:34:a7:39:c4:
8f:03:fd:d9:67:ca:33:17:06:f7:68:3e:97:0e:26:
0a:5f:0e:fc:36:61:30:86:22:2f:ff:c2:80:f3:97:
30:4a:0f:61:b9:be:8a:87:16:9d:44:36:f3:e7:16:
4d:fd:13:1e:e5:a3:d7:7e:07:4d:f5:4a:45:d0:ca:
5a:9b:f3:23:60:f0:c5:c2:c6:b2:9f:c5:b8:6b:9c:
41:a8:98:cf:f0:b0:c2:36:e6:04:cc:3d:5e:a5:56:
44:e0:d0:0b:0f:95:8b:4b:d7:84:1b:a2:22:b2:88:
30:72:d9:23:8a:09:7e:bd:23:fe:6c:32:0f:54:96:
d8:14:49:df:87:f3:06:18:28:d3:ad:2b:7e:63:01:
1e:bc:55:5b:39:a9:6c:6b:f7:4f:dc:ca:6f:6c:53:
25:36:4b:76:bd:1d:d5:1d:a5:22:60:d6:50:6d:3d:
b4:0a:42:de:a9:46:8c:0d:93:42:ad:f1:1f:db:fb:
6b:ef:c8:05:2d:15:6f:97:ea:86:85:f6:db:b6:d2:
0e:92:be:08:66:2d:ee:66:5b:00:55:8b:92:19:12:
34:aa:3d:10:b4:fd:de:e8:ad:ff:36:72:c7:10:db:
d8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D7:27:5C:4F:AA:9D:6C:0E:C4:46:BF:97:29:38:09:6D:29:53:07
X509v3 Authority Key Identifier:
keyid:B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5e:51:f8:28:fd:06:02:6e:3b:bc:2d:b8:77:9e:77:b8:2b:
83:6b:9b:ec:e2:28:25:31:0f:ab:cf:fa:f0:85:53:1e:96:63:
16:1d:87:b0:a0:c5:9f:44:3f:c6:1c:08:7c:df:ba:1d:bb:f8:
57:3a:a7:da:b1:fd:ad:46:58:7d:e1:d4:8d:f4:62:58:3c:fc:
f8:ed:26:49:51:5a:7f:0a:95:a7:9b:e2:e7:47:89:fd:ce:e6:
69:d8:88:0d:a7:47:bf:fc:69:29:b1:7a:bd:ad:b9:0c:2b:b1:
f9:ff:61:1c:7a:aa:b4:ca:c7:b3:73:02:88:90:06:06:93:9d:
33:74:54:4b:25:fe:f4:35:1e:cb:95:21:b9:a1:34:2b:b0:86:
dc:25:13:b9:a1:7d:d6:be:3c:d7:66:4f:ab:63:66:91:90:dc:
53:51:be:3d:2a:30:2a:f9:04:8e:1c:d5:57:52:ae:c2:31:45:
8d:5b:47:16:c7:ae:c4:7d:19:53:a3:4a:33:b6:6b:39:b6:07:
34:e1:16:44:75:ae:6e:71:a8:49:f9:8c:03:f7:4b:db:d7:27:
62:fc:7e:0c:88:15:55:13:77:30:8f:24:3c:94:d6:ae:28:b1:
89:13:91:5e:bc:79:fd:1b:06:7d:39:bd:ba:07:f5:0a:53:82:
0b:0e:23:d2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOIFY5ucVf8xQeMIslOWWSil9Z/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgyRkRGQzYyNkU3M0NCMjI2OEY1QjFFRkVGNTc2NzE1
RkU1QTU3MDAeFw0yNjA2MDMwMDI1MjlaFw0yNjA2MDQwNDIyMjlaMDMxMTAvBgNV
BAMTKDk0RDcyNzVDNEZBQTlENkMwRUM0NDZCRjk3MjkzODA5NkQyOTUzMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ttMDlsPxo12n7b7W/xuqs+v1
SOG67ThgNKc5xI8D/dlnyjMXBvdoPpcOJgpfDvw2YTCGIi//woDzlzBKD2G5voqH
Fp1ENvPnFk39Ex7lo9d+B031SkXQylqb8yNg8MXCxrKfxbhrnEGomM/wsMI25gTM
PV6lVkTg0AsPlYtL14QboiKyiDBy2SOKCX69I/5sMg9UltgUSd+H8wYYKNOtK35j
AR68VVs5qWxr90/cym9sUyU2S3a9HdUdpSJg1lBtPbQKQt6pRowNk0Kt8R/b+2vv
yAUtFW+X6oaF9tu20g6SvghmLe5mWwBVi5IZEjSqPRC0/d7orf82cscQ29jlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlNcnXE+qnWwOxEa/lyk4CW0pUwcwHwYDVR0j
BBgwFoAUuC/fxibnPLImj1se/vV2cV/lpXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODlmMjZmYjgtNzJjNC00OWQ5LTljYmUtODIyNjM5NzI3MWEyLzAvQjgyRkRGQzYy
NkU3M0NCMjI2OEY1QjFFRkVGNTc2NzE1RkU1QTU3MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CODJGREZDNjI2RTczQ0IyMjY4RjVCMUVGRUY1NzY3MTVGRTVB
NTcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj
YmUtODIyNjM5NzI3MWEyLzAvQjgyRkRGQzYyNkU3M0NCMjI2OEY1QjFFRkVGNTc2
NzE1RkU1QTU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADJeUfgo/QYCbju8Lbh3nne4K4Nrm+ziKCUx
D6vP+vCFUx6WYxYdh7CgxZ9EP8YcCHzfuh27+Fc6p9qx/a1GWH3h1I30Ylg8/Pjt
JklRWn8Klaeb4udHif3O5mnYiA2nR7/8aSmxer2tuQwrsfn/YRx6qrTKx7NzAoiQ
BgaTnTN0VEsl/vQ1HsuVIbmhNCuwhtwlE7mhfda+PNdmT6tjZpGQ3FNRvj0qMCr5
BI4c1VdSrsIxRY1bRxbHrsR9GVOjSjO2azm2BzThFkR1rm5xqEn5jAP3S9vXJ2L8
fgyIFVUTdzCPJDyU1q4osYkTkV68ef0bBn05vboH9QpTggsOI9I=
-----END CERTIFICATE-----
Generated at Wed Jun 3 03:50:14 2026 by rpki-client