
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
File: 0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft (raw, json)
Hash identifier: IWklDWQgqqLOZXghj4xYQigg6EFZrZ8tV7wOnmnD3TU=
Subject key identifier: 24:93:20:E5:56:F3:C3:82:7E:0A:DC:8D:56:5B:4F:EF:73:56:0C:F4
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Certificate issuer: /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial: 7FE56474ED731ABB79FADD4CFEE152E52DDC1DE6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
Manifest number: 69
Signing time: Mon 20 Jul 2026 16:32:00 +0000
Manifest this update: Mon 20 Jul 2026 16:27:00 +0000
Manifest next update: Tue 21 Jul 2026 18:49:00 +0000
Files and hashes: 1: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (hash: QXGWZFsc9f71b86soW4vxADReeKw3WdzjpJwgfFCmCI=)
2: 31342e3130322e3135322e302f32342d3234203d3e203535363533.roa (hash: 7m1lsj+R46fwy5EhA0AVTVR6lA5VWMrVBvJWrnKZtRo=)
3: 3230322e35322e31322e302f32342d3234203d3e203535363533.roa (hash: gb1IwBwgBC3bVtPwvnx/RPu7Ia6Ag29mP7Tz4sfDgHE=)
4: 31342e3130322e3135342e302f32342d3234203d3e203535363533.roa (hash: 2xEncKZB7XKpCLMYg2xigci5uudnJs/KRQjGyEQoyfA=)
5: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: wL/pHkWZYlSpOpNVjgz7YgIvq4xTapnBHJvFGC824+g=)
6: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: 2FalOm0wymIUOR6b6eMABH/GePb1gQsHB2PkapVhslQ=)
7: 3230322e35322e31352e302f32342d3234203d3e203535363533.roa (hash: VHZA3TuBf4nLKV2pTnmQZgiFCXveS7LsJ0nVeKIEvQQ=)
8: 34332e3234392e3134332e302f32342d3234203d3e203535363533.roa (hash: qdZ5s/RPKJd1zWpn0OA8oOkj/7C1tf+45M/HrbWmTwI=)
9: 3130332e31312e39392e302f32342d3234203d3e203535363533.roa (hash: tgMOLRKHLk6AeegSxwagm//NkkSHrRBSK1EEwqWmlG0=)
10: 31342e3130322e3135352e302f32342d3234203d3e203535363533.roa (hash: t0eDmBySGGi3M6vpcaHWuK77uuciFXZsi3Bv2CvN2vw=)
11: 34332e3234392e3134312e302f32342d3234203d3e203535363533.roa (hash: Bc5YFcqICb+bh4tRwH4x3D73YQXCDozUg5+ESseoBXI=)
12: 3230322e35322e31342e302f32342d3234203d3e203535363533.roa (hash: +X2AKDLUi7EEV0pZEa+LT88OPryzNndvmpim+oMxEjk=)
13: 34332e3234392e3134322e302f32342d3234203d3e203535363533.roa (hash: nVmldivYscT9yIlUPfak+eYDC8xGQfjxxTwl5kvmf58=)
14: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: UIaj9X3lfb9VOoNSMQt3FPXNkkUvi5Cnj1c6MU0v1/8=)
15: 31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (hash: 4TVT+M+1OynDiPmgdYeocC5p7/VKvqBlsqaUMV+uRAs=)
16: 34332e3234392e3134302e302f32342d3234203d3e203535363533.roa (hash: 2k2h/lLJh4y28GreNoFDXEw9j2lKUZ4eXzUUiII60sQ=)
17: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: M9ZVVTNiZw+8g7eKubBdE5bO++zVmlUills7R3bh+8E=)
18: 0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl (hash: F77FfyLa7xZ7oNdIynQBIUnAZ79A3h+w5vZIVNLZ1Fk=)
19: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: aTFM/g9W9unRb/uZnofVUS9SPuRIxxAlxUviQTXpEaI=)
20: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: HPeBWQRE7Nzk6K93OWZYdv8ZiGkz5Xm/tDmbLAYTX/8=)
21: 3130332e31312e39382e302f32342d3234203d3e203535363533.roa (hash: 1Ar9cC6jZkLzAdlFLEVr635I57ciOymkfzzDC1PNwsE=)
22: 3230322e35322e31332e302f32342d3234203d3e203535363533.roa (hash: RTunN5WvZPwzhuRDaOCGYBctUeKdomE1xa5xw2crzZk=)
23: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 7kCoo2bMrWx+NgrVIZTs8BnZTFozYrI1Yx+Eu/FeGxM=)
24: 3130332e31312e39362e302f32342d3234203d3e203535363533.roa (hash: Ou8COM1+4QBZTfW7oPb8lvGJwrPW2b9YrMH3Sw2uBUo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 18:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e5:64:74:ed:73:1a:bb:79:fa:dd:4c:fe:e1:52:e5:2d:dc:1d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Validity
Not Before: Jul 20 16:27:00 2026 GMT
Not After : Jul 21 18:49:00 2026 GMT
Subject: CN=249320E556F3C3827E0ADC8D565B4FEF73560CF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7b:f8:ba:7a:50:43:73:b9:db:50:75:50:4c:
7a:73:58:95:0c:ff:00:83:0d:d9:4d:ba:d4:a7:21:
86:59:84:bc:d3:c1:65:1a:50:87:49:92:fa:96:fb:
fb:0e:62:d7:65:33:51:92:8a:8d:f8:f4:f6:51:77:
29:2a:fa:3a:79:67:d1:86:9a:f4:6c:b6:13:4a:b6:
26:16:e4:e9:0b:4b:ff:b3:a9:ab:30:74:d2:77:3d:
97:37:2b:a9:64:6f:bc:2a:1b:3f:fa:2d:23:6f:eb:
71:18:1a:01:30:33:5d:6e:9f:76:3b:42:1d:fb:27:
6c:06:dd:11:62:9e:48:2f:21:64:18:0a:15:ec:82:
3e:7f:c1:aa:97:7f:3b:96:51:21:5a:dc:88:77:58:
dd:5c:75:ef:74:a8:08:29:bd:a8:33:09:6d:40:a3:
09:46:33:97:17:26:2b:35:cf:b8:27:b5:c5:2c:98:
d3:cc:cc:9d:65:35:28:19:32:e2:27:20:4e:49:ee:
f8:19:e3:1f:72:fd:d0:24:84:22:5b:42:e2:0e:e5:
56:94:52:42:84:8f:dd:e4:ef:87:b9:0e:f9:a7:1b:
45:86:87:ee:5c:7a:6f:73:ca:32:71:5c:ae:38:8e:
f9:d7:cc:37:9c:03:f6:ca:99:71:c9:89:91:86:9e:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:93:20:E5:56:F3:C3:82:7E:0A:DC:8D:56:5B:4F:EF:73:56:0C:F4
X509v3 Authority Key Identifier:
keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0e:2c:da:9b:f5:98:f3:a7:aa:a1:aa:a7:10:84:81:0f:18:
f0:b7:a8:93:ca:19:eb:0d:a0:33:f0:0c:11:a6:72:0e:68:5c:
18:01:2c:84:7d:53:01:86:97:dc:c9:29:16:6b:0b:a0:7a:47:
a9:2e:e5:bb:7f:37:85:90:f3:a2:a4:e3:0b:f9:01:e6:99:15:
ad:06:bc:eb:1e:9f:17:8c:bd:48:58:64:1e:84:5e:c8:0a:21:
7f:c4:76:14:58:60:34:08:45:8a:b7:d0:79:50:9a:7a:f8:8d:
2a:e7:bc:13:5f:62:ed:66:59:53:47:8d:26:34:79:68:a1:40:
ec:07:c7:8e:03:58:77:e1:20:f9:d0:69:eb:cf:02:d4:3f:79:
ef:69:48:f9:cb:c9:82:85:dc:03:78:9f:80:5e:41:79:6b:ef:
33:7a:e4:52:f0:3d:98:f6:55:7e:d5:a7:91:ff:c6:c5:ae:85:
b7:c1:85:28:40:1b:91:fd:43:30:cc:05:3e:85:e2:7e:58:2e:
67:f2:84:f2:e6:61:25:7b:51:3e:4b:26:eb:38:c4:aa:55:3b:
22:1b:e5:de:69:44:8a:07:5c:08:49:97:60:8c:17:08:f8:3f:
d9:7a:de:e0:5d:5e:b0:f2:57:bd:1f:96:a0:0f:d5:08:c9:0d:
de:a8:f3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:50:03 2026 by rpki-client