
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
File: B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft (raw, json)
Hash identifier: J1GfG7bYBYKlqEnlY55FlD+ucb2OXPYwLp6xZw/N38E=
Subject key identifier: EC:1D:D0:E7:1D:FD:82:91:B9:01:38:59:1D:8F:6D:E2:D7:49:7D:CC
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Certificate issuer: /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial: 15FBF643F0916FA4ADD84B0DE8C5A47FB2F5382D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 09:06:16 +0000
Manifest this update: Tue 02 Jun 2026 09:01:16 +0000
Manifest next update: Wed 03 Jun 2026 12:57:16 +0000
Files and hashes: 1: 3130332e3232352e3137312e302f32342d3234203d3e20313333333339.roa (hash: HKtNGGIgOC9+B6KozAxjZkWtuOSi7Y4giMkSdFSsHeg=)
2: B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl (hash: F96M7y3R7Fg94W23pxhy+ST17R26spA6C1s31ZWGoKA=)
3: 3130332e31362e3133382e302f32342d3234203d3e20313338303737.roa (hash: xLR88IyMVCA8vdgyK8OQ+LkpI8JImP1CEA8k4aA9Syk=)
4: 3130332e31362e3133392e302f32342d3234203d3e20313338303737.roa (hash: fb0u8nL2mSZSjhRNXrQKe5m4wVsqo96iE9FDTVCkkuc=)
5: 323430303a396338303a313a3a2f34382d3438203d3e203538343031.roa (hash: tjiI+qv5K6jVgsJD0bWk0XAJK3Ch0HFCGyxU2fDhIKk=)
6: 3130332e31312e3232322e302f32342d3234203d3e203538333936.roa (hash: Z0euP4Mz5azIXz2gQa7C76gHRFvS6x+UlkXhOokx2h4=)
7: 32372e35342e3131392e302f32342d3234203d3e203539313536.roa (hash: B3Wv1yk9eEsCJIJwAJYVc/XQpH6HREmcziLtKnlPPPk=)
8: 32372e35342e3131382e302f32342d3234203d3e203538333936.roa (hash: Xej95JrdMsifVKYujoAl0DIGRkayLR1TXbEVcv1ObYw=)
9: 32372e35342e3131372e302f32342d3234203d3e203538333936.roa (hash: 0Oh1NBqzZ3I6VHN6/EtyqgY+6ATqaMWE9Ah1ExUBh+k=)
10: 323430303a396338303a3a2f34382d3438203d3e203538333936.roa (hash: bZNkhO5s5ouIXjJKaQv8PKfJDr/H/AM1kyrDd0wlyM8=)
11: 323430303a396338303a3a2f33322d3438203d3e203538333936.roa (hash: /ZR2Wmx8v5LSyzEH2Pl73ZaKPDz1ytePaIaN3xWd0I0=)
12: 3130332e31362e3133362e302f32342d3234203d3e20313338303737.roa (hash: gco5c7WXqpAUv26il0bYrypILflhue4cLfp0jrvC588=)
13: 323430303a396338303a3230303a3a2f34382d3438203d3e203538333936.roa (hash: sbLJ41IDFdN5IJsomNQRipWLxXGCHRyqteaWEwRsz7Q=)
14: 3130332e31312e32312e302f32342d3234203d3e203538333936.roa (hash: rQv5s8+gPpGYB/vGkK0E1KzGoHeIzauVQLPwV+zcAQU=)
15: 32372e35342e3131362e302f32342d3234203d3e203538333936.roa (hash: ZPKZ4RD7GSqwYP85NHWWHCZsGyMBOdDBCWsoKc9qF38=)
16: 323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa (hash: ofLAcZqnlKOmXqsmeIfCr72lWZy9ZeTWZkof0/9RVb8=)
17: 3130332e32332e3134312e302f32342d3234203d3e203538343031.roa (hash: Vxo1SAebkkXkXHrkJyQxo/evf7z4vPT/u0wpK8ACYKQ=)
18: 3130332e3232352e3137322e302f32332d3233203d3e20313333333339.roa (hash: IexADjY/vH+ci1AK/jeAttZdrOIQ48kpykD2boWk1lE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:fb:f6:43:f0:91:6f:a4:ad:d8:4b:0d:e8:c5:a4:7f:b2:f5:38:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Validity
Not Before: Jun 2 09:01:16 2026 GMT
Not After : Jun 3 12:57:16 2026 GMT
Subject: CN=EC1DD0E71DFD8291B90138591D8F6DE2D7497DCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:80:21:f6:0f:01:1a:73:a5:6c:d1:17:6c:
a7:3e:dc:dc:22:4d:9f:55:7c:21:4d:f7:77:01:17:
27:0f:0e:de:ee:13:74:3a:11:d6:40:20:97:80:e7:
78:bd:68:a2:e5:6a:ec:d3:27:77:72:de:1f:88:52:
fe:ab:47:c5:eb:31:04:8d:7d:2c:41:a6:ba:29:b2:
b3:e8:95:40:e1:e4:47:c0:81:9c:ba:88:1c:96:11:
95:6c:a5:f9:df:3c:80:d2:ee:58:fe:ae:92:76:6c:
72:d4:9a:68:16:07:83:50:87:1a:73:b3:34:e2:63:
78:c3:5b:7d:98:7d:6d:42:6c:d6:04:46:eb:5f:dd:
70:10:d5:cf:7e:fb:fa:9f:68:6e:86:fe:85:76:11:
ac:52:16:74:0e:6f:9f:5d:28:52:eb:d0:0f:85:6b:
53:f8:77:3d:57:2f:22:c6:88:c2:1f:4f:27:d2:53:
04:90:c6:ed:ed:c8:d1:f9:33:8e:44:86:89:ff:1b:
76:7a:c4:84:f4:10:70:4c:f3:7d:20:7c:4f:da:d7:
21:2c:53:0b:77:21:d8:bc:1b:ad:c5:32:4f:1a:28:
e7:92:e6:6c:28:1d:ac:58:da:b4:88:f6:2f:5f:98:
2f:d2:99:a0:f0:dc:da:11:4b:ef:dd:29:5d:5d:8e:
01:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1D:D0:E7:1D:FD:82:91:B9:01:38:59:1D:8F:6D:E2:D7:49:7D:CC
X509v3 Authority Key Identifier:
keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:38:75:36:19:09:5e:ae:f1:9e:f9:c7:e3:3e:9c:4a:06:bb:
13:c6:9e:04:f9:ce:ee:2b:ad:07:a4:cb:e9:4d:47:cb:b9:bb:
c5:2d:b6:43:7c:8b:50:88:5b:d4:7e:4f:35:06:83:10:de:30:
e2:ad:83:9e:8c:4b:18:43:11:5c:16:c8:93:d8:a7:84:73:85:
a1:b7:3b:c0:50:6a:51:25:10:38:ab:ee:a6:4d:46:a1:77:e2:
71:f1:a9:2d:42:83:55:64:67:ef:83:64:6f:2e:4a:a0:cb:4e:
97:c3:5b:b5:45:47:c4:b9:3e:ea:55:01:41:9f:ef:3a:09:2a:
98:1b:76:ac:65:dd:16:63:41:d8:3c:fa:2d:c6:d3:b3:b0:50:
53:18:c9:6c:5a:f4:c1:75:9b:ba:5b:c1:02:2d:34:9c:48:7b:
56:2f:7b:3f:fc:3c:76:42:4a:d4:3f:36:87:bc:5f:58:13:34:
15:3a:fd:05:e7:ef:6f:84:ea:57:47:f0:2c:80:de:70:5f:09:
db:c1:55:df:59:b8:d6:24:0f:3c:81:85:bc:01:ad:13:f9:dd:
be:ea:3f:20:95:15:72:ef:49:cd:c7:8d:b6:92:d5:43:93:47:
57:3a:9c:97:d0:ce:81:53:45:ce:76:2f:02:81:06:9c:6d:47:
38:bb:99:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:05:19 2026 by rpki-client