
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft
File: B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft (raw, json)
Hash identifier: 5H74Xdk9fUqzdMq4tC0U+70Hw1zl9u3FO1aG3c/C5CM=
Subject key identifier: 06:D0:0B:51:6B:99:7D:85:82:5F:E4:01:E9:DC:38:C9:23:A2:B5:56
Authority key identifier: B5:E7:F6:FF:0C:34:6A:48:8F:01:A9:EF:AA:BD:E1:51:1D:7E:6C:96
Certificate issuer: /CN=B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96
Certificate serial: 265B1A35A9A13C9DE92067AF411A31D62D59BB7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 17:15:48 +0000
Manifest this update: Tue 02 Jun 2026 17:10:48 +0000
Manifest next update: Wed 03 Jun 2026 18:59:48 +0000
Files and hashes: 1: B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.crl (hash: n2loITPwLH9F5EhMHBr6DhdYfPITbik6nHXZA2j9hDk=)
2: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: 80JDffhOqKbZ05eh6nF84ipieFeMFx1jGKSA0CuNti4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.crl
rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:5b:1a:35:a9:a1:3c:9d:e9:20:67:af:41:1a:31:d6:2d:59:bb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96
Validity
Not Before: Jun 2 17:10:48 2026 GMT
Not After : Jun 3 18:59:48 2026 GMT
Subject: CN=06D00B516B997D85825FE401E9DC38C923A2B556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:5d:6d:d9:f2:0d:a9:78:8d:ab:76:a8:26:
3b:04:91:67:0e:ff:7b:52:eb:38:ea:09:04:4b:3d:
9e:f8:0c:d3:ae:6e:7f:9a:93:b1:35:9c:e9:00:8c:
3c:07:72:12:c5:71:64:05:43:f7:4e:3f:4a:f5:ea:
7d:b0:14:39:0c:5c:b6:56:06:dc:c2:e8:e8:c4:9e:
34:8e:9b:07:8a:95:72:2f:fb:05:9e:50:15:3f:45:
bf:f9:23:51:c0:d0:c3:1d:c9:0a:f6:4e:39:2a:7b:
11:f6:1e:21:85:10:d7:2c:f6:3f:2e:cd:0b:51:cd:
23:5e:1f:85:fc:55:c0:48:e0:5a:80:7f:c9:81:9a:
e8:bd:6c:b4:0c:a6:5e:d7:3c:fd:c5:3e:94:b8:20:
51:1d:11:fc:d6:96:c3:45:60:76:58:3b:80:e5:6e:
1c:54:29:f0:f3:39:a2:26:87:be:0e:7f:2d:ee:75:
51:15:f6:f8:fb:3d:a7:8d:5c:1e:68:50:36:67:d6:
0c:ba:3b:2e:f5:3f:cc:5d:d9:01:ca:e7:31:c9:98:
1e:95:96:42:1a:b7:6c:52:85:23:18:40:f5:bb:02:
74:e8:83:83:b0:03:ed:ee:76:03:9c:62:66:80:2c:
c8:2f:13:4d:3d:95:70:7b:ad:9b:9a:31:ab:0a:ef:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D0:0B:51:6B:99:7D:85:82:5F:E4:01:E9:DC:38:C9:23:A2:B5:56
X509v3 Authority Key Identifier:
keyid:B5:E7:F6:FF:0C:34:6A:48:8F:01:A9:EF:AA:BD:E1:51:1D:7E:6C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/B5E7F6FF0C346A488F01A9EFAABDE1511D7E6C96.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:78:6b:c3:2c:1f:d9:ad:0c:49:90:7a:39:09:1b:c5:c8:98:
6d:3b:8c:8f:74:86:12:8c:ba:55:ef:91:27:79:7b:67:bc:81:
4d:f7:0e:33:d8:e8:37:8b:be:71:94:15:e1:35:3b:0b:45:b1:
9f:58:9e:ac:60:42:b4:d3:d1:98:64:12:8e:28:b3:75:4b:68:
29:ef:a5:08:35:61:d1:b7:f3:56:e2:03:93:5d:c4:b8:5e:ff:
af:e8:3e:93:71:34:cd:a7:b4:8f:83:20:00:a0:1a:7d:ff:dc:
19:a2:0b:a1:33:6f:35:ea:e8:81:cc:0c:80:64:0c:c0:84:a1:
5c:a3:81:f8:85:fc:36:0e:ff:6a:e5:6b:a2:2a:2b:fa:7b:51:
c4:b6:3b:2f:3e:68:24:ec:14:bc:ba:47:02:c6:d4:39:c3:c8:
0e:e6:6d:f1:4e:18:5d:d2:67:3d:77:c4:a5:bd:8d:db:de:96:
80:5b:fe:ed:a7:f4:c9:63:ab:19:88:f5:1e:ab:d4:f6:08:bf:
d3:d2:7a:73:9a:b4:52:be:dd:34:cd:4d:c3:9c:db:88:6b:c5:
8a:4e:95:28:22:b4:50:18:84:6f:94:1b:e1:fa:7a:d5:fd:7d:
eb:ca:bc:53:5d:eb:6b:2b:ee:fd:2d:3e:33:f0:b4:43:9e:f7:
fd:87:c9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:16:03 2026 by rpki-client