
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
File: 0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft (raw, json)
Hash identifier: 7pDmVKUhqdXd2bpQLanj7VaTvt8vj8gZl8ezfnp+nGU=
Subject key identifier: BD:42:FE:6A:8F:94:F1:EA:D7:EA:1C:35:33:36:89:2D:24:F0:AF:3A
Authority key identifier: 0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B
Certificate issuer: /CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B
Certificate serial: 3497941093DD77BDCE041F8FEB035649C6223D09
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
Manifest number: A4
Signing time: Thu 03 Sep 2026 03:37:14 +0000
Manifest this update: Thu 03 Sep 2026 03:32:14 +0000
Manifest next update: Fri 04 Sep 2026 06:21:14 +0000
Files and hashes: 1: 3130332e3235312e34342e302f32332d3233203d3e20313331373735.roa (hash: L72MNFWs2/TCwq6F2L6j0rz6XVlkqh9uNTreRhurkKw=)
2: 3230322e37342e3233382e302f32332d3233203d3e20313331373735.roa (hash: Ht0VezJ4KIWCDr66hCxSQYWb1Dq0K65XBemGOv1TcQc=)
3: 3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa (hash: uPncvP1Okkrf/KpwWjJFMH8U1aVMZjmRtyTj19SObI0=)
4: 0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl (hash: mZ6PYr7LvSoyOgquzKYjbppFbSoK3Tpqlf4kxS9JHKY=)
5: 3230322e37342e3233392e302f32342d3234203d3e20313331373735.roa (hash: A4kpcsQqVoWwVBNEfjq/CynxKvKVE62mleHwZXUsKos=)
6: 3130332e3235312e34342e302f32342d3234203d3e20313331373735.roa (hash: 2gQ9649f0ndaTmtOcqaJrXV4bKlAfn8pEGxSt46Gu58=)
7: 3230322e37342e3233362e302f32342d3234203d3e20313331373735.roa (hash: CL+9kkFdZB1yJCIEMLA3vz2l4BhvC9xFNrhK/p8qNDc=)
8: 3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa (hash: zqcics87PZHEsmOvrEn/LcF+KjiPqSCgEE2g8ZVSVI0=)
9: 3130332e31362e3139382e302f32332d3233203d3e20313331373735.roa (hash: sxS8L7umdKtGUeT2wWhEoM1JoZ/BT1Jv1zxeZbH381g=)
10: 3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa (hash: EDtByMK6TjQp0hyoWNPeAL24hwV2DhNIgESuhbW7CKA=)
11: 3230322e37342e3233382e302f32342d3234203d3e20313331373735.roa (hash: eGNJ1n8bDbQmoRq42DR0txAWzu8nV66h2S77nx17RKM=)
12: 3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa (hash: nvDEHVXbGDG+kKml4fz3Sd8nG2pVg2Fj1k1Un7attMA=)
13: 3130332e31362e3139392e302f32342d3234203d3e20313331373735.roa (hash: Aj2bJsLbEDIrOPmhvglJ6dR9+tL1DPZS/JEdmKKswFk=)
14: 3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa (hash: QzYDwyPq+ZTPv+eibCiOEvPDQMFXiIE8GpKBHMdWRXQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl
rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 06:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:97:94:10:93:dd:77:bd:ce:04:1f:8f:eb:03:56:49:c6:22:3d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B
Validity
Not Before: Sep 3 03:32:14 2026 GMT
Not After : Sep 4 06:21:14 2026 GMT
Subject: CN=BD42FE6A8F94F1EAD7EA1C353336892D24F0AF3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:2e:28:91:c2:04:e9:93:5d:56:40:ff:4f:
db:9a:11:ae:67:48:58:93:d9:bd:a1:65:50:08:08:
9e:09:2b:f6:b5:2e:13:07:9b:dd:27:c6:6a:7b:89:
14:96:ff:91:3e:19:04:74:a3:90:07:8e:34:d5:36:
2d:ae:0f:ad:1c:dc:32:71:21:98:a9:f6:d8:74:d0:
f7:56:31:ec:04:37:96:a6:b9:c5:dd:23:03:c4:77:
35:46:fa:7b:41:0b:1c:8a:90:06:f5:06:ce:2c:2b:
11:d7:61:d7:17:55:f8:ba:7f:e2:9d:34:bf:8a:2e:
75:ec:2f:f5:e8:68:55:b7:70:b8:17:bb:86:08:1d:
03:58:55:2a:c1:c1:ea:9f:32:c8:f6:85:2a:bb:66:
bd:62:42:77:91:05:49:59:6c:68:d9:ae:d0:61:11:
9d:df:9a:3e:c2:e1:8e:7c:1f:fb:38:ec:0d:5c:90:
94:e1:84:c4:a1:97:be:ac:c4:c2:6b:fd:b4:10:48:
de:c9:c5:67:41:93:30:88:d4:1b:c1:b2:1e:2b:5a:
0f:f5:c5:15:d3:95:55:63:28:70:47:3c:84:16:62:
28:cd:db:ed:62:08:e7:38:62:a1:ec:b4:b9:f9:03:
6c:39:56:4b:07:e8:43:38:23:0d:b3:70:a0:60:26:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:42:FE:6A:8F:94:F1:EA:D7:EA:1C:35:33:36:89:2D:24:F0:AF:3A
X509v3 Authority Key Identifier:
keyid:0B:CB:AF:8D:D0:B6:39:1E:71:5B:01:36:3D:7C:9B:A2:D5:5E:3A:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/0BCBAF8DD0B6391E715B01363D7C9BA2D55E3A6B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:17:ef:6e:3b:59:6c:35:b7:5e:a6:9b:2f:36:74:29:08:b1:
2b:33:57:59:9e:14:47:a1:1d:2e:3f:1a:78:0c:7d:04:b6:26:
14:2b:70:49:1e:bc:ee:fb:dc:78:4f:f7:31:14:57:9c:4d:99:
8f:eb:e7:4f:6d:fb:cd:a5:1f:96:53:24:b8:82:39:97:68:da:
dc:78:f1:ca:8b:00:a5:3d:70:fd:17:94:18:28:a7:36:8e:b3:
f0:ae:63:47:a2:ed:e9:ad:66:fc:56:f2:bd:a2:43:04:f4:19:
69:76:ec:22:42:47:b3:af:47:53:85:81:08:9e:6f:dc:ac:5b:
b6:9b:13:14:66:6c:1c:b2:ac:93:f5:e9:51:4b:b5:cc:2a:af:
24:10:2e:44:ae:ff:3d:aa:09:3f:4a:69:18:8f:99:48:c1:da:
e3:6e:c6:07:02:3a:2b:f3:cd:34:2d:e9:fe:76:91:9d:92:d6:
52:ca:00:da:64:82:5e:7b:a6:41:a8:8d:41:73:4c:22:74:44:
4d:49:55:ee:8d:26:79:f9:51:7f:50:53:3d:a0:1f:b4:f7:5d:
e6:60:6b:2e:17:40:e9:bd:eb:9a:75:02:c5:0f:df:5b:a2:69:
20:57:9b:3e:a2:3e:23:f4:10:81:1a:83:fe:97:ac:b0:a4:e3:
9f:23:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:36:15 2026 by rpki-client