
$ rpki-client -vvf rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
File: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft (raw, json)
Hash identifier: I5sFBIvTfsbFpXtkXJ1djyv+5BQS6xehKTxZ1aIPR1w=
Subject key identifier: 9D:13:9E:7A:06:2B:40:AE:10:14:A2:8D:C9:53:5B:F9:BC:7F:7D:A0
Authority key identifier: 0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F
Certificate issuer: /CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F
Certificate serial: 752E9618798654E08A909521C53ACE4B5D5B55CD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
Manifest number: 73
Signing time: Mon 27 Jul 2026 11:27:07 +0000
Manifest this update: Mon 27 Jul 2026 11:22:07 +0000
Manifest next update: Tue 28 Jul 2026 12:15:07 +0000
Files and hashes: 1: 3130332e3136302e31352e302f32342d3234203d3e20313431363130.roa (hash: FeuEPBSyh4088t58wEF7WYPlFCQyhRPORfmVK/BUUf4=)
2: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl (hash: yR1QkZqTGIztujM+wqfok4XZELYl4T4FG1gZd5/dah0=)
3: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: 6eZrQcS7fk+urKWjqhBrdX4ASTj5STJSLSE2pWSJoPQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl
rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 12:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:2e:96:18:79:86:54:e0:8a:90:95:21:c5:3a:ce:4b:5d:5b:55:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F
Validity
Not Before: Jul 27 11:22:07 2026 GMT
Not After : Jul 28 12:15:07 2026 GMT
Subject: CN=9D139E7A062B40AE1014A28DC9535BF9BC7F7DA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:e2:24:cd:a1:69:3d:89:02:65:f3:a3:a7:
ee:32:e8:5d:0f:ff:6d:27:cd:ea:ee:77:ef:22:19:
34:ce:a3:41:86:20:53:21:e3:f8:80:f8:a2:6d:ed:
d4:f0:46:3f:69:19:f8:7b:b7:e4:b1:dc:5b:0b:22:
c4:78:f8:ab:4e:ac:99:f1:27:0e:b5:09:e7:e4:57:
ca:75:4d:4b:13:3c:42:e9:67:e1:e7:a0:6a:55:34:
0a:dc:f6:3c:53:88:dc:04:c4:1c:3c:e6:73:aa:d5:
19:d5:21:4b:85:1a:84:8a:19:44:f3:42:91:a7:56:
97:f1:16:98:8e:44:3e:da:db:d2:c4:a6:9d:2f:13:
09:f7:2f:6a:0d:66:d4:52:8d:00:59:0a:b3:ec:58:
3a:11:06:fe:c5:81:cc:37:48:85:a2:91:0e:61:78:
7f:e1:cb:2f:29:4a:b4:0c:56:99:4e:31:81:aa:7e:
2a:31:16:8f:c8:41:86:7d:a7:9d:f8:2f:a8:17:97:
e2:f8:04:5f:91:a2:84:3e:91:32:8e:8f:7a:1d:de:
74:6a:1c:29:36:59:3b:87:92:ea:1d:a1:ff:a0:f3:
0e:d3:11:f8:d5:02:4d:f3:3c:99:16:20:b8:51:f4:
67:97:dc:f6:87:e4:39:f7:0d:58:8f:c2:c6:ba:b6:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:13:9E:7A:06:2B:40:AE:10:14:A2:8D:C9:53:5B:F9:BC:7F:7D:A0
X509v3 Authority Key Identifier:
keyid:0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:88:47:07:d3:bc:99:c0:b2:97:d4:e7:66:5c:46:e9:79:70:
aa:96:ce:79:f0:c5:3e:6a:a1:bb:4e:e8:ae:e7:53:63:5d:a4:
c3:7a:8b:0d:80:b5:c4:da:c7:a7:52:6a:f9:16:ea:bc:03:e3:
98:4f:e2:f5:d8:11:13:a8:f8:18:fc:a5:14:d5:cf:82:ef:b6:
d9:db:f9:6c:08:3c:60:25:c4:75:11:58:43:37:bd:9f:82:31:
73:a6:fa:6e:9c:51:c4:2b:a7:0f:53:5f:89:2c:14:79:66:71:
7a:d4:1c:be:ef:f8:15:ea:bb:66:aa:fd:78:f7:ee:fc:0e:4f:
52:ec:b3:7b:88:4f:17:01:08:e8:3c:34:b1:ce:b1:d8:a4:4c:
c4:ee:15:4c:93:4d:2e:ca:1d:14:8f:4d:2e:82:83:dc:02:2f:
15:cc:6a:bf:97:f9:18:a7:df:76:b3:43:15:11:6f:f7:7f:3c:
75:f9:ef:2a:ba:53:61:c4:84:9f:8d:ee:b0:00:ad:4d:30:21:
6b:df:75:37:f8:06:46:af:8c:a4:b0:28:91:30:79:76:84:ff:
c2:7c:7a:88:7c:de:05:55:0c:b7:74:b0:13:59:81:76:57:bd:
b1:25:28:63:25:39:b2:5f:29:99:11:52:60:6c:22:79:3a:ab:
ad:6a:91:05
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdS6WGHmGVOCKkJUhxTrOS11bVc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJENEUwMDVFNEQ5NzUyRkExQkM0RjUyQUVGNUM4MDc1
QkZCOUEwRjAeFw0yNjA3MjcxMTIyMDdaFw0yNjA3MjgxMjE1MDdaMDMxMTAvBgNV
BAMTKDlEMTM5RTdBMDYyQjQwQUUxMDE0QTI4REM5NTM1QkY5QkM3RjdEQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ZuIkzaFpPYkCZfOjp+4y6F0P
/20nzerud+8iGTTOo0GGIFMh4/iA+KJt7dTwRj9pGfh7t+Sx3FsLIsR4+KtOrJnx
Jw61CefkV8p1TUsTPELpZ+HnoGpVNArc9jxTiNwExBw85nOq1RnVIUuFGoSKGUTz
QpGnVpfxFpiORD7a29LEpp0vEwn3L2oNZtRSjQBZCrPsWDoRBv7Fgcw3SIWikQ5h
eH/hyy8pSrQMVplOMYGqfioxFo/IQYZ9p534L6gXl+L4BF+RooQ+kTKOj3od3nRq
HCk2WTuHkuodof+g8w7TEfjVAk3zPJkWILhR9GeX3PaH5Dn3DViPwsa6tkQ5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnROeegYrQK4QFKKNyVNb+bx/faAwHwYDVR0j
BBgwFoAUC9TgBeTZdS+hvE9SrvXIB1v7mg8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTJiNzE1MzYtNzE3ZS00NWRiLWEwM2EtMzM4ZjFkZmE0ODkzLzAvMEJENEUwMDVF
NEQ5NzUyRkExQkM0RjUyQUVGNUM4MDc1QkZCOUEwRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQkQ0RTAwNUU0RDk3NTJGQTFCQzRGNTJBRUY1QzgwNzVCRkI5
QTBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw
M2EtMzM4ZjFkZmE0ODkzLzAvMEJENEUwMDVFNEQ5NzUyRkExQkM0RjUyQUVGNUM4
MDc1QkZCOUEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFmIRwfTvJnAspfU52ZcRul5cKqWznnwxT5q
obtO6K7nU2NdpMN6iw2AtcTax6dSavkW6rwD45hP4vXYEROo+Bj8pRTVz4Lvttnb
+WwIPGAlxHURWEM3vZ+CMXOm+m6cUcQrpw9TX4ksFHlmcXrUHL7v+BXqu2aq/Xj3
7vwOT1Lss3uITxcBCOg8NLHOsdikTMTuFUyTTS7KHRSPTS6Cg9wCLxXMar+X+Rin
33azQxURb/d/PHX57yq6U2HEhJ+N7rAArU0wIWvfdTf4BkavjKSwKJEweXaE/8J8
eoh83gVVDLd0sBNZgXZXvbElKGMlObJfKZkRUmBsInk6q61qkQU=
-----END CERTIFICATE-----
Generated at Tue Jul 28 03:15:40 2026 by rpki-client