
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft
File: B977405A3167FC0E8490C54AB080E37B0920C4B4.mft (raw, json)
Hash identifier: TLb8TGdh9z/knC7xw1EOnnp63odvSOLlzEpb5SVLm/U=
Subject key identifier: 60:27:55:41:33:C7:AB:2C:65:B3:A6:35:C2:14:CF:1C:42:F4:C0:0A
Authority key identifier: B9:77:40:5A:31:67:FC:0E:84:90:C5:4A:B0:80:E3:7B:09:20:C4:B4
Certificate issuer: /CN=B977405A3167FC0E8490C54AB080E37B0920C4B4
Certificate serial: 329BE1B0CD1BDF14F28FF96A00A7162D4E4B0F32
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft
Manifest number: 6A
Signing time: Sun 19 Jul 2026 12:32:20 +0000
Manifest this update: Sun 19 Jul 2026 12:27:20 +0000
Manifest next update: Mon 20 Jul 2026 13:49:20 +0000
Files and hashes: 1: B977405A3167FC0E8490C54AB080E37B0920C4B4.crl (hash: G9pfvLimXOREedYqeHsMKb0h4HuV5eRCetbfVnI6oMU=)
2: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: TSVY5x+9VndlFploLHkJHga5L+L+3DIx++btPsU48bE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.crl
rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:9b:e1:b0:cd:1b:df:14:f2:8f:f9:6a:00:a7:16:2d:4e:4b:0f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B977405A3167FC0E8490C54AB080E37B0920C4B4
Validity
Not Before: Jul 19 12:27:20 2026 GMT
Not After : Jul 20 13:49:20 2026 GMT
Subject: CN=6027554133C7AB2C65B3A635C214CF1C42F4C00A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:dd:25:57:53:97:e4:65:7b:cc:e4:b5:cd:
bd:3d:9a:c6:5b:58:ff:97:1a:69:f8:07:82:31:a9:
f6:31:60:e9:a0:3c:08:30:79:28:f4:bc:52:2d:47:
ce:9e:0d:1e:d2:d8:7f:05:f6:58:08:5d:28:a3:f9:
6a:f5:a5:47:92:ec:1e:97:48:6f:9b:40:f6:7f:d8:
21:9e:5d:f0:24:16:3c:eb:6b:b6:e4:f3:d7:5f:33:
8d:e3:2a:5a:fa:bc:04:7b:b1:33:ac:37:71:24:05:
e8:b1:d9:36:c6:7d:2f:44:0d:0c:2a:49:cd:18:ec:
d9:4c:6e:65:2c:d3:b7:92:11:a9:a6:59:5b:28:b7:
47:7d:74:7a:00:de:04:a1:79:0e:31:88:bd:87:6f:
cc:67:e1:23:5c:fa:f2:8a:ea:99:e0:c2:49:d3:4f:
82:7f:e4:8d:3d:20:ae:1e:e5:3d:ab:aa:04:86:9e:
43:48:02:77:94:db:ad:bd:3f:a3:98:4f:ea:18:00:
be:8c:80:68:0c:82:f8:fd:8f:b5:25:74:b6:0e:09:
d7:b2:1e:94:9b:f9:17:5d:7c:f7:7d:fb:71:e4:a4:
26:7b:6d:fa:e3:5d:b4:f4:95:e6:b8:9b:68:54:fc:
70:2c:dd:31:36:22:07:2e:14:d4:ee:f2:70:75:21:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:27:55:41:33:C7:AB:2C:65:B3:A6:35:C2:14:CF:1C:42:F4:C0:0A
X509v3 Authority Key Identifier:
keyid:B9:77:40:5A:31:67:FC:0E:84:90:C5:4A:B0:80:E3:7B:09:20:C4:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B977405A3167FC0E8490C54AB080E37B0920C4B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/B977405A3167FC0E8490C54AB080E37B0920C4B4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d7:99:77:fc:8c:45:15:91:3c:69:64:f5:c1:e3:8c:70:2f:
2a:65:0b:bd:17:af:9a:f1:ea:6b:31:6c:94:42:dc:3a:75:f4:
76:82:d6:2b:48:d1:14:72:b0:62:18:b0:5d:b0:6c:d6:1e:57:
57:2e:7d:ca:75:c2:6c:06:df:40:73:20:f0:87:11:90:32:57:
a3:1c:9b:f4:e5:15:a4:db:1c:ae:a2:e4:a1:93:d9:68:de:ed:
d4:a2:ce:d9:f2:9c:35:60:2c:61:85:d4:72:24:bc:60:6a:f0:
d4:94:e4:d3:08:f9:58:18:9f:52:3c:11:aa:bd:97:b8:3e:3b:
49:23:96:8f:1f:3e:a9:d0:63:c5:ec:80:fc:0f:4b:14:28:27:
a5:ff:12:ec:36:1b:92:cd:af:96:01:f6:42:d4:ad:44:9a:ed:
02:0a:28:22:a1:09:2d:62:12:f0:67:56:36:e2:f0:53:eb:a2:
3d:44:45:08:04:62:5d:7e:4f:1e:10:80:a2:c5:3c:37:34:1e:
8e:db:be:a6:4d:99:9e:40:60:69:96:0d:42:c6:c6:3d:c4:56:
52:26:1f:ef:75:63:8a:e1:25:3d:d0:a9:b4:36:91:fd:8e:67:
e8:ec:e4:29:9f:eb:94:a0:95:3b:7a:c1:77:b9:2d:43:df:5d:
f0:0f:59:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 23:33:19 2026 by rpki-client