
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft
File: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft (raw, json)
Hash identifier: u6X4S3nYuZqdD0zPRivobETti0yfAn1qUBN9jOhqjio=
Subject key identifier: 55:11:3B:4C:70:5F:09:4A:C1:88:C3:80:23:3F:FB:C8:AC:3F:97:81
Authority key identifier: B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85
Certificate issuer: /CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685
Certificate serial: 44EF6CBE2AE1CDC0960FE714746DB896471034BB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 05:37:48 +0000
Manifest this update: Tue 21 Jul 2026 05:32:48 +0000
Manifest next update: Wed 22 Jul 2026 07:14:48 +0000
Files and hashes: 1: 3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa (hash: SMAdsArRGPYxDZsZ/CCe6hdzjIJy0KvpAA+wvauroZY=)
2: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl (hash: pudJjG7bnlsVtdoltp8Tn1wWMGeZc1TJjNbXeMA4q10=)
3: 3130332e3138372e3232372e302f32342d3234203d3e20313439373238.roa (hash: ksYVDZOsUaPH9h3h6FXJXhC94WZiPEsTowZUMKAvBn0=)
4: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: sTfiDvuvbkVeyTPfpKYSFsI9nMpAT34o8x5bhe0xkFw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl
rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ef:6c:be:2a:e1:cd:c0:96:0f:e7:14:74:6d:b8:96:47:10:34:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685
Validity
Not Before: Jul 21 05:32:48 2026 GMT
Not After : Jul 22 07:14:48 2026 GMT
Subject: CN=55113B4C705F094AC188C380233FFBC8AC3F9781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:59:70:81:b7:fb:4e:0e:9b:fa:2e:48:9e:94:
ad:68:e5:92:3d:bc:8a:d7:92:90:c6:4c:6b:95:57:
67:1a:59:a2:51:4e:4e:33:86:a7:2e:05:da:6c:f7:
87:04:0d:db:49:3f:e1:a1:7e:09:6b:d2:f2:20:59:
9a:f8:49:55:f3:7a:f3:e1:f3:51:24:cb:1d:65:77:
89:19:3a:65:86:6c:65:6a:f5:74:38:6d:be:a9:56:
be:56:78:18:15:28:92:00:d9:e5:0f:cf:72:5d:1d:
28:a2:0f:c2:22:a6:34:cc:bd:5e:0f:ba:19:d6:16:
0e:40:83:da:2d:82:f6:3b:b6:78:75:9b:6d:59:ec:
e8:5b:3f:c2:c8:93:44:98:01:83:10:d9:80:65:74:
20:07:8d:45:9b:07:65:95:0a:a0:b6:a1:73:a9:db:
8f:8b:04:8d:fe:82:fa:f8:a4:35:a4:cb:5e:60:80:
bf:b8:46:5a:de:6e:5f:6d:d6:d6:67:ef:03:a4:9c:
06:df:30:50:8a:36:a7:fe:69:fa:cb:32:d8:c5:c6:
18:76:67:e9:75:6f:b0:7c:91:bf:d9:52:91:f2:98:
19:cd:b9:31:3d:4b:38:82:2d:72:5a:31:dc:d9:f0:
d8:05:23:c1:2a:38:fa:a8:d8:4c:e8:57:c1:16:a1:
68:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:11:3B:4C:70:5F:09:4A:C1:88:C3:80:23:3F:FB:C8:AC:3F:97:81
X509v3 Authority Key Identifier:
keyid:B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4c:46:94:79:56:10:97:b3:01:d4:57:a7:ff:c4:9e:a5:28:
39:cf:58:e0:f3:ef:52:13:aa:07:30:84:0d:f8:70:81:7b:4f:
90:19:a3:93:cb:d2:20:97:14:f8:ac:13:e0:3d:5e:16:0f:8c:
4d:0c:d3:a1:e8:c9:c7:c0:49:d9:b5:b3:e8:bf:b2:d3:3f:6c:
f6:61:41:ae:09:b4:40:d9:66:08:bf:41:d2:f1:71:9f:2e:13:
ee:34:2d:11:14:26:a9:94:8b:3d:13:1a:5d:3d:a3:68:4e:11:
43:b5:3b:63:15:74:73:a3:25:67:cf:02:16:e4:b7:10:79:fa:
c1:42:f4:09:da:d6:1c:10:86:49:ce:78:37:b0:4d:b8:2f:90:
cb:6d:1f:7b:d6:93:91:51:d8:75:c2:d2:48:06:dc:b6:59:0e:
4f:d4:bd:7e:f6:33:fb:84:6a:20:cd:a6:23:b6:08:ee:bd:f4:
21:f5:1f:6a:ef:f1:40:cf:83:c5:35:49:e9:71:1b:41:de:18:
a5:c6:9d:51:42:c6:e9:1b:99:1c:af:91:36:c9:0d:9f:2b:0f:
6f:0d:6f:bb:5b:25:ad:fc:2e:2d:f6:bd:32:b0:36:70:a0:03:
05:18:3b:ff:87:99:3c:7f:42:3a:52:2d:1f:bb:54:1c:96:23:
5b:35:bf:85
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURO9svirhzcCWD+cUdG24lkcQNLswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3
M0RBMTY4NTAeFw0yNjA3MjEwNTMyNDhaFw0yNjA3MjIwNzE0NDhaMDMxMTAvBgNV
BAMTKDU1MTEzQjRDNzA1RjA5NEFDMTg4QzM4MDIzM0ZGQkM4QUMzRjk3ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZWXCBt/tODpv6LkielK1o5ZI9
vIrXkpDGTGuVV2caWaJRTk4zhqcuBdps94cEDdtJP+Ghfglr0vIgWZr4SVXzevPh
81Ekyx1ld4kZOmWGbGVq9XQ4bb6pVr5WeBgVKJIA2eUPz3JdHSiiD8IipjTMvV4P
uhnWFg5Ag9otgvY7tnh1m21Z7OhbP8LIk0SYAYMQ2YBldCAHjUWbB2WVCqC2oXOp
24+LBI3+gvr4pDWky15ggL+4Rlrebl9t1tZn7wOknAbfMFCKNqf+afrLMtjFxhh2
Z+l1b7B8kb/ZUpHymBnNuTE9SziCLXJaMdzZ8NgFI8EqOPqo2EzoV8EWoWjRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVRE7THBfCUrBiMOAIz/7yKw/l4EwHwYDVR0j
BBgwFoAUsrSKnASLUc0TOtCu5vX563PaFoUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTYzMDk3ZjAtMzk3OC00OWNlLWI2OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMw
NDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3M0RBMTY4NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMkI0OEE5QzA0OEI1MUNEMTMzQUQwQUVFNkY1RjlFQjczREEx
Njg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2
OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5
RUI3M0RBMTY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKdMRpR5VhCXswHUV6f/xJ6lKDnPWODz71IT
qgcwhA34cIF7T5AZo5PL0iCXFPisE+A9XhYPjE0M06HoycfASdm1s+i/stM/bPZh
Qa4JtEDZZgi/QdLxcZ8uE+40LREUJqmUiz0TGl09o2hOEUO1O2MVdHOjJWfPAhbk
txB5+sFC9Ana1hwQhknOeDewTbgvkMttH3vWk5FR2HXC0kgG3LZZDk/UvX72M/uE
aiDNpiO2CO699CH1H2rv8UDPg8U1SelxG0HeGKXGnVFCxukbmRyvkTbJDZ8rD28N
b7tbJa38Li32vTKwNnCgAwUYO/+HmTx/QjpSLR+7VByWI1s1v4U=
-----END CERTIFICATE-----
Generated at Tue Jul 21 07:01:34 2026 by rpki-client