
$ rpki-client -vvf rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft
File: B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft (raw, json)
Hash identifier: 4vrTC2ymIQWi22hIQ9CgKsbMVxOES8My9cxJCSswoBg=
Subject key identifier: BB:66:52:C9:3D:C0:5C:0F:A4:7D:E5:3A:A1:55:3A:7B:96:AF:BD:2C
Authority key identifier: B2:A0:7F:17:48:E5:61:B3:3D:B8:C4:32:69:81:A5:5B:27:CE:E9:3D
Certificate issuer: /CN=B2A07F1748E561B33DB8C4326981A55B27CEE93D
Certificate serial: 344FDAB95F9AEAEF0EED1222488F1E3C37D20681
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 11:56:01 +0000
Manifest this update: Mon 20 Jul 2026 11:51:01 +0000
Manifest next update: Tue 21 Jul 2026 14:49:01 +0000
Files and hashes: 1: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: JtFDDBHLhFW7JsMlxs4g2eR/5c2AZrAbcpY0KNoiazs=)
2: B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl (hash: n80kc2CH8o0k8p/UDtIGHASTLh/WTDQ8QAcOEuLSrfI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl
rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 14:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:4f:da:b9:5f:9a:ea:ef:0e:ed:12:22:48:8f:1e:3c:37:d2:06:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2A07F1748E561B33DB8C4326981A55B27CEE93D
Validity
Not Before: Jul 20 11:51:01 2026 GMT
Not After : Jul 21 14:49:01 2026 GMT
Subject: CN=BB6652C93DC05C0FA47DE53AA1553A7B96AFBD2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:f0:c1:54:7d:80:24:6b:77:c0:29:26:21:
71:ec:e9:5f:2c:fe:b2:c2:45:2d:4a:4b:11:60:4f:
0a:16:23:89:50:8f:5d:53:49:5e:c3:f4:b4:c9:be:
59:99:f7:1e:89:bd:7d:43:01:fc:a1:7c:ca:d5:f3:
ed:9f:cc:21:ae:18:41:a7:a3:18:0d:39:ee:ba:7c:
b6:28:77:8e:9c:3a:91:39:24:a6:58:6f:cc:a1:dd:
eb:6e:13:ce:fa:50:d1:b0:ec:52:ed:54:fd:0e:b5:
6c:f5:06:f2:e0:89:4f:e9:b4:5e:18:90:8c:72:b2:
d5:f2:0e:07:ae:76:b3:a5:39:42:4b:b4:cb:6d:5e:
87:84:c0:d1:20:3f:c9:b1:7d:bc:ca:ea:f6:d1:4f:
51:99:0d:c6:18:b6:8e:1b:1b:b2:65:5e:69:d5:b1:
0e:e1:ab:51:d2:1a:08:5f:72:df:b0:b9:9d:ad:45:
ac:2a:43:e1:2f:f9:67:41:b6:40:01:5b:58:40:96:
f5:ce:45:26:a7:eb:38:f9:31:d9:a4:44:bc:6c:ee:
06:f5:28:f8:7e:3e:8b:61:f8:4f:0e:97:eb:ca:6a:
1f:62:2f:a7:10:96:8e:43:dd:8c:d6:ef:af:07:0e:
93:d9:ec:4f:d5:6d:83:38:41:97:50:68:2d:86:7d:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:66:52:C9:3D:C0:5C:0F:A4:7D:E5:3A:A1:55:3A:7B:96:AF:BD:2C
X509v3 Authority Key Identifier:
keyid:B2:A0:7F:17:48:E5:61:B3:3D:B8:C4:32:69:81:A5:5B:27:CE:E9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2A07F1748E561B33DB8C4326981A55B27CEE93D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/B2A07F1748E561B33DB8C4326981A55B27CEE93D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ad:47:43:5c:ce:58:06:9a:84:f5:a2:65:69:85:21:13:26:
2c:09:3e:55:1e:19:61:00:10:02:e2:6f:46:57:7e:47:4c:c6:
c4:2b:d3:62:85:f3:91:29:16:1a:49:29:b6:50:8d:c1:5d:d6:
db:92:04:f3:e1:b7:99:d9:c1:47:16:d7:62:4c:f9:53:0d:36:
20:48:e2:c5:12:d3:0f:1e:5f:c4:f9:de:89:89:07:a4:07:17:
81:4e:41:23:c1:f4:03:88:19:0f:52:eb:f0:88:3a:fc:06:ba:
3b:81:25:21:b0:58:37:23:01:99:fd:83:5c:27:35:58:e4:7b:
44:18:a7:c9:ad:c7:49:1f:d7:70:41:c1:21:06:89:60:8d:9b:
d7:65:58:6d:62:e9:34:df:3d:7a:21:7c:fe:ea:fd:95:28:8b:
d6:a5:ef:d6:2d:e6:4b:8b:26:69:25:76:4e:11:90:f6:ef:dc:
15:34:48:ee:4d:09:60:a2:c5:f3:75:f8:94:52:f7:51:81:71:
aa:53:0d:bd:ac:48:43:c9:1d:31:a1:43:a2:15:97:f8:e0:45:
00:1b:eb:20:17:72:95:87:fa:3f:d5:11:59:41:1b:32:4c:5f:
99:25:25:2e:a6:0e:1d:cd:61:5f:0b:a9:28:04:18:7b:72:43:
cf:2a:65:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:46:33 2026 by rpki-client