
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft
File: B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft (raw, json)
Hash identifier: VonLLYrV+mGT0cdqTJzFh2WQnh/bNK3SSoakTjkFEMI=
Subject key identifier: 75:D4:EC:38:8E:27:47:2B:05:E6:04:4A:C4:68:D1:0C:03:4E:09:6A
Authority key identifier: B5:6B:A6:6A:CB:6B:28:A7:5C:F8:B9:26:29:F3:89:88:E6:BC:E5:F0
Certificate issuer: /CN=B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0
Certificate serial: 1BE2F90CE9D50D9FBE39E2CDCA6C95C6F7C47CB9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 21:20:25 +0000
Manifest this update: Wed 16 Sep 2026 21:15:25 +0000
Manifest next update: Thu 17 Sep 2026 23:44:25 +0000
Files and hashes: 1: B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl (hash: zL8vzr3KaXQljyHEoSq1M598XvWCxKXrHz649AQUza0=)
2: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (hash: 4neWrZ2U5Ifz5ZV+5kk+4b2Vcx4ltU0Zb9JXxN912Dk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl
rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 23:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:e2:f9:0c:e9:d5:0d:9f:be:39:e2:cd:ca:6c:95:c6:f7:c4:7c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0
Validity
Not Before: Sep 16 21:15:25 2026 GMT
Not After : Sep 17 23:44:25 2026 GMT
Subject: CN=75D4EC388E27472B05E6044AC468D10C034E096A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:10:da:ad:04:e3:21:65:39:89:de:d5:2a:
9f:c0:44:eb:92:59:cc:4c:6c:0b:37:9f:8d:51:1e:
27:e0:9d:7c:0d:03:75:c9:eb:61:0e:fd:ec:8d:be:
62:a1:93:74:87:16:88:d0:17:5a:c7:fc:31:5c:c1:
f1:9c:21:62:c2:87:eb:cc:31:86:b2:1d:ba:88:a5:
98:ea:ba:64:d3:bc:a1:ae:8c:c0:ea:55:16:f4:48:
ac:7d:ee:e8:e9:0e:86:ce:29:5b:6b:cb:b9:9e:63:
8f:27:98:3f:ea:f9:04:b6:89:f0:18:dd:c3:36:8c:
74:4c:aa:b4:c4:ed:09:ea:93:c0:87:14:8a:fc:eb:
a9:f6:aa:db:e4:bc:5c:fd:fb:aa:f7:85:7b:f6:e6:
51:b0:54:5d:b8:7c:b4:ae:14:b2:58:9a:bc:17:21:
4d:ab:c5:41:23:ca:06:8c:02:df:c1:9a:0c:2c:4c:
23:90:3b:bc:b4:ed:7b:2f:5a:03:2d:30:b0:bc:9c:
3d:6d:86:f4:5b:dd:34:15:5b:ea:0d:68:b5:aa:06:
ec:ae:51:12:11:3f:fc:0c:ac:d3:08:e4:74:fb:95:
7d:c0:cd:3c:75:0f:87:4f:fd:04:b2:db:ee:8c:0d:
fa:22:5d:57:b5:7f:aa:4a:a3:8e:ee:ae:b0:84:ad:
c9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D4:EC:38:8E:27:47:2B:05:E6:04:4A:C4:68:D1:0C:03:4E:09:6A
X509v3 Authority Key Identifier:
keyid:B5:6B:A6:6A:CB:6B:28:A7:5C:F8:B9:26:29:F3:89:88:E6:BC:E5:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:aa:2a:56:a7:58:83:33:3d:3a:0b:ef:18:8c:f4:6c:58:1a:
eb:75:a3:27:cb:18:43:94:92:22:02:57:3a:24:94:de:eb:21:
4d:54:14:2a:79:99:55:3a:1f:dd:c8:3c:10:59:50:40:cc:f5:
17:d6:46:31:6f:59:09:3c:80:7c:9a:b4:57:d4:3e:9d:0c:55:
75:49:b1:38:1e:e6:06:c0:40:1b:3a:08:33:8a:d6:90:5e:51:
f6:e1:52:0c:df:ca:bd:55:fb:64:9f:14:c9:ff:95:12:09:0e:
20:4b:9e:3c:31:ce:8d:06:d2:fe:09:c8:fb:7d:19:0f:1e:3f:
69:45:2d:d2:1d:1f:da:98:41:a5:0d:7e:8e:d7:eb:90:a7:ea:
cb:42:fe:db:c7:11:e0:43:a7:44:0c:35:45:7c:f5:e0:ec:29:
e4:e9:13:55:61:7d:25:de:1a:c9:d1:64:7b:c4:61:b1:72:0d:
d0:eb:74:82:fc:32:25:94:b7:65:e4:9f:1e:82:10:7c:a5:cd:
52:9e:76:6d:39:57:ea:fe:f9:65:30:d0:49:c2:9a:58:86:62:
ca:d3:d3:f2:35:ab:96:ff:9e:83:03:f7:28:a2:06:39:78:d9:
f9:0f:52:2c:03:37:0e:33:63:81:e0:65:fa:b3:53:85:78:3b:
cb:fe:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:52:24 2026 by rpki-client