
$ rpki-client -vvf rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft
File: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft (raw, json)
Hash identifier: rYRg1zPhgS4p0bDdEPk0o0kYvofse2wMNJRRA7svd4o=
Subject key identifier: F4:1E:EE:C7:B2:E7:76:82:9B:6D:B7:4E:EF:A6:90:FD:7D:0F:40:55
Authority key identifier: B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4
Certificate issuer: /CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4
Certificate serial: 3A104E520881DF5AC40A02316F98D71244DA3CAE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft
Manifest number: 8B
Signing time: Sat 15 Aug 2026 00:55:20 +0000
Manifest this update: Sat 15 Aug 2026 00:50:20 +0000
Manifest next update: Sun 16 Aug 2026 03:06:20 +0000
Files and hashes: 1: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl (hash: 17J8xhUBsAWmC7fz+7w6RwSdpPDxWugFM5DN8CYSvTA=)
2: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: xM4nPkfrKQ/KWF8+Mu6GtG7DRliUUO1OiNjm+6857dQ=)
3: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: XBcafkxD6M3SvFYGO48/RaxEmuX/AwJyNlM1io7xsgc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl
rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 03:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:10:4e:52:08:81:df:5a:c4:0a:02:31:6f:98:d7:12:44:da:3c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4
Validity
Not Before: Aug 15 00:50:20 2026 GMT
Not After : Aug 16 03:06:20 2026 GMT
Subject: CN=F41EEEC7B2E776829B6DB74EEFA690FD7D0F4055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:1a:23:91:bf:f4:5b:f8:d6:b8:c5:c4:27:
e5:e5:c8:bd:b5:3e:45:b7:f6:f9:2c:83:40:57:bd:
60:c1:89:08:76:9b:98:28:96:99:b9:57:e2:f9:76:
3b:a4:c0:a1:6d:9a:f6:6f:4c:cd:3a:89:58:ca:5d:
3a:59:2b:a0:5f:c0:6e:4d:88:0f:7f:ed:02:14:ef:
62:0d:da:ef:a4:94:4b:90:73:6d:84:87:28:29:26:
3f:53:ac:4f:aa:6e:73:66:71:0f:9b:d8:82:0f:7e:
67:af:b1:0c:9b:c4:15:c3:7d:81:5a:48:db:4c:ab:
b6:c9:71:4e:35:84:ed:4e:c2:80:d1:ff:f2:74:01:
51:5a:b9:d2:9f:3c:1f:61:12:01:42:cc:b6:d0:47:
ad:0c:23:0a:1b:69:b1:02:55:d1:a1:66:f0:b1:ef:
71:8a:78:3d:5b:c0:a0:c4:42:87:ba:26:4e:28:9c:
ff:11:6a:1b:1a:ed:e0:eb:71:f9:2b:7c:90:12:1b:
94:ab:64:be:65:f9:8e:97:2e:0c:8a:a7:a4:ef:90:
c0:b9:fb:a5:7f:c4:3b:6a:69:83:2e:b0:e4:95:46:
a8:7e:e0:a1:4e:c9:3b:a3:d4:1e:dc:6e:11:a1:56:
e5:a8:bf:db:d3:64:af:ae:57:40:77:8f:56:09:2b:
32:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1E:EE:C7:B2:E7:76:82:9B:6D:B7:4E:EF:A6:90:FD:7D:0F:40:55
X509v3 Authority Key Identifier:
keyid:B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:00:db:72:23:f4:ae:b4:34:5a:e0:b3:dc:a5:f2:9b:80:e6:
9e:23:5a:23:9a:19:d3:7d:a1:2b:70:45:da:b2:3f:3f:c5:29:
a2:72:7d:2f:dd:33:03:59:8a:d1:78:6e:d5:7b:5e:6c:c7:b2:
48:f4:39:02:66:e6:ec:2a:22:2b:c2:e5:54:e9:ab:5f:64:a7:
e7:67:2e:1f:61:e1:a3:6a:4e:9d:e6:3b:06:42:d9:7b:c6:59:
61:2c:31:94:1c:a0:d3:71:da:2f:82:12:84:51:bd:98:a6:4f:
e1:25:bf:a5:f4:19:44:f8:ef:77:9d:3c:b0:12:b9:aa:48:70:
2d:74:cb:3f:dd:17:5d:35:a7:73:36:0e:95:ca:e8:e9:51:bc:
13:c5:b7:a0:14:a5:22:07:78:86:f1:85:05:7c:ff:86:bf:81:
c8:c2:7f:86:ac:c5:fb:e5:37:ec:95:05:2f:f9:29:c2:94:9d:
1e:6c:85:0a:c9:41:84:ba:07:69:c1:51:b8:29:e8:e6:20:e7:
98:fa:12:ff:18:1a:07:c6:20:44:15:01:b8:2b:f3:2c:e1:43:
39:11:4e:b7:3b:5d:52:67:91:9f:9a:86:d8:10:ba:30:6f:9a:
b9:3d:00:31:7a:bf:df:84:7c:a0:34:ad:02:f4:ce:32:7c:cd:
82:d6:4d:39
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOhBOUgiB31rECgIxb5jXEkTaPK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3
Q0REQTlFNDAeFw0yNjA4MTUwMDUwMjBaFw0yNjA4MTYwMzA2MjBaMDMxMTAvBgNV
BAMTKEY0MUVFRUM3QjJFNzc2ODI5QjZEQjc0RUVGQTY5MEZEN0QwRjQwNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Whojkb/0W/jWuMXEJ+XlyL21
PkW39vksg0BXvWDBiQh2m5golpm5V+L5djukwKFtmvZvTM06iVjKXTpZK6BfwG5N
iA9/7QIU72IN2u+klEuQc22EhygpJj9TrE+qbnNmcQ+b2IIPfmevsQybxBXDfYFa
SNtMq7bJcU41hO1OwoDR//J0AVFaudKfPB9hEgFCzLbQR60MIwobabECVdGhZvCx
73GKeD1bwKDEQoe6Jk4onP8Rahsa7eDrcfkrfJASG5SrZL5l+Y6XLgyKp6TvkMC5
+6V/xDtqaYMusOSVRqh+4KFOyTuj1B7cbhGhVuWov9vTZK+uV0B3j1YJKzLNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9B7ux7LndoKbbbdO76aQ/X0PQFUwHwYDVR0j
BBgwFoAUsL+2a8Cum6ao+inIsDOMl3zdqeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Mjc3MjdjM2UtOWMxYS00NmRlLWEyYjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJD
MEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3Q0REQTlFNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMEJGQjY2QkMwQUU5QkE2QThGQTI5QzhCMDMzOEM5NzdDRERB
OUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy
YjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhD
OTc3Q0REQTlFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAF0A23Ij9K60NFrgs9yl8puA5p4jWiOaGdN9
oStwRdqyPz/FKaJyfS/dMwNZitF4btV7XmzHskj0OQJm5uwqIivC5VTpq19kp+dn
Lh9h4aNqTp3mOwZC2XvGWWEsMZQcoNNx2i+CEoRRvZimT+Elv6X0GUT473edPLAS
uapIcC10yz/dF101p3M2DpXK6OlRvBPFt6AUpSIHeIbxhQV8/4a/gcjCf4asxfvl
N+yVBS/5KcKUnR5shQrJQYS6B2nBUbgp6OYg55j6Ev8YGgfGIEQVAbgr8yzhQzkR
Trc7XVJnkZ+ahtgQujBvmrk9ADF6v9+EfKA0rQL0zjJ8zYLWTTk=
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:37:47 2026 by rpki-client