
$ rpki-client -vvf rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft
File: 2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft (raw, json)
Hash identifier: JArkyNJ8zZ6wLJgPaYbEodjxJ6L3Ao2q7ofL82RipAE=
Subject key identifier: 16:2C:F3:70:30:0E:AD:E5:90:27:00:4B:4B:5D:62:FA:7A:32:F3:81
Authority key identifier: 2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4
Certificate issuer: /CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4
Certificate serial: 76A13FC56017652EBC6F5495FF361D328DE7AEBC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 18:57:26 +0000
Manifest this update: Fri 24 Jul 2026 18:52:26 +0000
Manifest next update: Sat 25 Jul 2026 21:44:26 +0000
Files and hashes: 1: 3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (hash: YEpJ9MshH91OnFv/znxkxIYveM8j2r6OPnOxKsElZA4=)
2: 3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (hash: F/SUGaqSrvN9l0bA+VVFhafqTQPYwg8gVdDw3HwYYEg=)
3: 3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (hash: I+MpxcufYeam5pksOgKwBNTewvekIqJYxt3l7XuR42Q=)
4: 3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (hash: SSJvSdL4NA21o/quBBkRYHXaBZlnNisf6npebpyix0w=)
5: 3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (hash: cjqOi69hQ/DuVUUYy0IY+fZE1a6xIzJfgF06BFHgrL0=)
6: 2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl (hash: +ziu0IgQe74Mv6/TXcSfPRt8wXYx9HAe/JzFFRMkQ6g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl
rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 21:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a1:3f:c5:60:17:65:2e:bc:6f:54:95:ff:36:1d:32:8d:e7:ae:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4
Validity
Not Before: Jul 24 18:52:26 2026 GMT
Not After : Jul 25 21:44:26 2026 GMT
Subject: CN=162CF370300EADE59027004B4B5D62FA7A32F381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:48:aa:57:5a:d3:c1:04:dc:60:88:22:a6:
e9:8b:e8:f5:33:6d:f6:e6:b0:3c:88:a5:55:60:83:
62:4f:62:f9:ad:b8:b0:57:32:cf:25:d7:16:62:71:
d5:5f:bd:b8:f5:50:5c:12:35:fd:b9:6c:72:a9:f5:
60:44:c9:a9:d5:a9:f8:e7:a6:c5:22:69:a6:d4:05:
4b:30:5f:16:cc:e3:7a:42:fc:63:41:9a:d1:6c:ab:
c4:df:b9:f1:19:f4:19:88:af:24:1f:bd:50:10:84:
1a:15:21:d5:a2:a8:1c:c2:54:c4:a5:82:75:6b:b3:
f5:15:4a:1e:4f:1d:59:59:f9:ed:df:91:cf:6e:cb:
97:a7:34:e1:17:ab:8e:af:85:c6:31:da:de:44:e5:
be:38:7e:c7:c0:f3:68:26:91:8e:b7:c2:99:15:56:
01:74:6f:76:63:77:95:23:ab:5c:8b:be:8e:63:2a:
73:ad:5f:78:ef:9a:dc:58:2c:f0:9e:55:c7:41:58:
a6:ef:29:32:74:2a:83:ab:23:04:47:db:8f:c6:18:
24:50:bf:51:86:5c:f1:63:3b:28:68:33:5d:7f:b4:
57:a0:af:f4:a2:ea:df:74:85:29:a2:bc:00:e6:4f:
03:fd:35:cb:c7:a2:a7:83:4e:db:9c:70:1b:81:4d:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2C:F3:70:30:0E:AD:E5:90:27:00:4B:4B:5D:62:FA:7A:32:F3:81
X509v3 Authority Key Identifier:
keyid:2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:be:cb:75:4e:a5:fb:8a:79:f5:ef:e2:e6:74:7b:e2:71:88:
b5:b5:8b:89:f4:75:a9:f1:63:c2:4f:45:68:0f:66:d5:bb:02:
72:a2:2b:a6:6f:10:96:e8:ea:e9:82:0a:51:88:7e:1d:6b:e6:
76:64:50:6a:e8:8d:76:fc:14:4b:a2:38:c8:c7:84:b9:4f:69:
30:b8:d8:e6:92:9e:36:e3:f8:27:ef:66:06:d3:8f:88:22:79:
9a:fb:af:97:0e:09:eb:d7:96:ae:cb:c9:ea:ba:9a:1d:68:d7:
02:88:59:63:f1:4a:4f:ac:19:0d:9c:dd:15:13:69:e0:e2:33:
4a:27:5a:5e:48:25:f7:8c:1c:9e:d7:fc:76:5c:1c:7a:05:80:
ea:46:a1:03:14:60:bc:d9:53:8f:8d:02:bb:30:43:14:af:a7:
0f:21:38:2e:45:e6:53:ff:0d:1c:f1:2a:65:5d:d3:ea:b8:1a:
3a:69:8c:8a:ff:66:56:cc:89:b6:38:d2:20:97:dd:de:b0:69:
f2:b0:a4:20:c9:1b:a9:82:95:13:a4:cd:de:64:c4:25:8a:79:
bf:5c:46:cf:db:e0:0a:d8:ac:80:44:09:03:ad:87:ae:56:5d:
54:f7:15:d9:73:b0:c3:0b:95:a8:b7:c9:be:b0:11:03:ae:70:
a2:ba:cd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:13:27 2026 by rpki-client