
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft
File: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft (raw, json)
Hash identifier: VfAujte6Pgm2KT4UuSUeUhmFu84Un30DYlylNkQ6XEI=
Subject key identifier: A3:88:AB:DB:96:A9:A3:4E:B5:42:B2:09:B0:40:4E:9A:5D:9D:66:AA
Authority key identifier: BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6
Certificate issuer: /CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6
Certificate serial: 101D2DA166B13BCF5FC9A886BFEFC0E284E81AEB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 07:32:46 +0000
Manifest this update: Thu 17 Sep 2026 07:27:46 +0000
Manifest next update: Fri 18 Sep 2026 10:54:46 +0000
Files and hashes: 1: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl (hash: obpv9pKr4jOPicYHg5IxSi2CBNgwRbiUvZsgXsrnW6M=)
2: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: tDYsDAflbcBxokNCYrVdFRBBRfHA9s3JtNKf99TBDJ4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl
rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 07:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:1d:2d:a1:66:b1:3b:cf:5f:c9:a8:86:bf:ef:c0:e2:84:e8:1a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6
Validity
Not Before: Sep 17 07:27:46 2026 GMT
Not After : Sep 18 10:54:46 2026 GMT
Subject: CN=A388ABDB96A9A34EB542B209B0404E9A5D9D66AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:e5:7d:82:ab:12:a4:6e:2f:65:dc:03:d7:
23:6e:ce:28:f1:31:9c:97:fa:3a:5a:93:fd:ad:84:
f0:e7:ed:72:ab:a9:d9:4e:af:6e:28:d2:86:b7:9d:
91:39:e0:fa:7f:67:4e:aa:05:81:a4:a3:f7:80:26:
80:82:2f:56:9a:10:98:88:79:0e:63:85:42:ee:d5:
45:da:9b:4d:5e:1e:ff:ff:7f:09:c1:dd:e5:c0:47:
ec:31:e3:db:49:76:3d:3b:56:4a:fb:9e:e1:cd:f4:
aa:60:7a:6f:c4:b1:c2:7a:e7:20:e2:94:f4:c7:1e:
19:77:87:aa:01:88:78:0a:39:13:c1:40:cd:72:15:
f7:be:64:bc:ba:07:cf:eb:83:d2:f7:97:90:6f:7b:
25:be:87:6a:0a:83:41:7a:28:72:a2:bd:0d:f1:b8:
11:54:82:bb:4d:d6:05:fa:89:c0:f8:ea:c1:a4:ce:
16:6d:1c:7c:2c:fa:2a:ea:18:61:87:b3:1b:55:d2:
0d:f1:f3:d6:66:bd:13:6d:8f:f6:c4:c2:91:fe:a5:
f3:b7:69:05:c9:b0:cf:27:ea:19:1c:fd:7c:27:1a:
b5:74:a7:b6:7d:c5:0e:ec:18:86:06:3d:fc:d7:68:
9e:d1:3e:89:cb:15:4c:2b:e2:12:3b:f7:c9:04:b0:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:88:AB:DB:96:A9:A3:4E:B5:42:B2:09:B0:40:4E:9A:5D:9D:66:AA
X509v3 Authority Key Identifier:
keyid:BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:0f:75:d7:a3:5f:f7:a4:86:51:c0:2f:51:39:5d:a5:d7:c5:
4e:8f:d8:2a:bc:00:bf:0f:9e:ac:6f:86:65:bd:5d:39:b9:9f:
bc:70:50:27:a8:6d:9f:20:28:50:e4:fd:f3:76:5e:04:f1:e3:
32:c3:e1:9e:7c:d6:56:cd:4c:94:37:0a:bb:35:3a:bf:4a:ec:
ac:0a:a1:c2:30:e9:a4:d4:b2:85:32:17:b5:69:73:84:26:50:
5c:39:7d:f7:fb:b8:fa:dd:d8:4f:39:b9:8d:42:b3:00:49:db:
f9:a9:d5:50:e1:34:9a:ca:6a:2e:60:c4:a1:82:36:94:8b:a1:
38:ee:26:50:34:a1:b7:8e:3f:78:9f:d4:8c:f3:8d:d4:0b:48:
c9:73:e8:b8:f8:96:c0:06:55:e4:e8:24:2a:9c:8f:7c:3b:3c:
c6:8c:c1:bc:43:b9:de:83:3c:97:cd:ad:f3:d1:27:72:cc:83:
be:d1:ab:b9:58:bb:fa:97:d0:59:ef:94:1a:a0:9f:fc:18:d9:
ee:46:51:c0:18:6f:51:e9:a3:1e:7f:1d:5a:25:dc:b4:f7:76:
35:04:36:ad:6b:ac:96:f5:c8:15:70:4b:27:33:a7:be:0d:32:
c3:6a:e5:a6:d3:86:ce:57:30:43:99:7a:cf:c9:5c:d0:af:f5:
3f:8f:5d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:23:38 2026 by rpki-client