
$ rpki-client -vvf rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft
File: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft (raw, json)
Hash identifier: JBoxrthprsUR14CHIAljZTzK2jPecK39VDJS16/bn2U=
Subject key identifier: D4:E8:49:8D:45:26:36:B8:3C:6B:FC:0E:0D:FE:52:DE:A6:5C:36:C6
Authority key identifier: B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4
Certificate issuer: /CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4
Certificate serial: 3477BBBF260D03258B9F74C16A2CED95EFAB6393
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft
Manifest number: 07
Signing time: Wed 06 May 2026 23:09:01 +0000
Manifest this update: Wed 06 May 2026 23:04:01 +0000
Manifest next update: Fri 08 May 2026 00:18:01 +0000
Files and hashes: 1: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl (hash: +3VXKscoyLDe67d/Ddv2JTCok+1m6vP4qRZ3IqtL6pg=)
2: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: xM4nPkfrKQ/KWF8+Mu6GtG7DRliUUO1OiNjm+6857dQ=)
3: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: XBcafkxD6M3SvFYGO48/RaxEmuX/AwJyNlM1io7xsgc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl
rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 00:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:77:bb:bf:26:0d:03:25:8b:9f:74:c1:6a:2c:ed:95:ef:ab:63:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4
Validity
Not Before: May 6 23:04:01 2026 GMT
Not After : May 8 00:18:01 2026 GMT
Subject: CN=D4E8498D452636B83C6BFC0E0DFE52DEA65C36C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:30:1f:b6:ad:c2:ef:15:3e:0c:f9:19:e1:
79:4e:fc:4e:6f:77:3f:92:8c:4b:8e:7a:e3:a5:e2:
a4:b9:63:f5:2f:89:26:c6:2b:f5:fc:97:68:f7:82:
1c:98:ea:fd:b3:b2:32:85:55:16:6a:4f:b9:fb:03:
02:36:cf:7c:48:5e:4f:5f:34:76:4e:72:2a:c2:03:
21:09:03:45:22:1d:18:8b:4e:89:6a:e5:a8:91:51:
b6:7f:da:99:d4:da:2d:8f:fe:ea:d4:a5:75:2d:8e:
67:33:a5:6b:3f:73:94:d6:b5:61:69:cf:d6:09:0b:
80:a0:be:cb:27:56:84:d0:b8:4d:a2:46:8f:57:78:
58:c8:21:5b:67:b9:19:a0:f5:08:6e:1a:69:3f:4f:
35:e8:69:0d:74:5f:d3:56:bf:e2:2a:a2:2a:5b:dd:
af:17:82:f1:ee:88:fa:7c:71:eb:06:7b:0f:66:1a:
25:fc:15:de:ea:72:32:5d:52:74:7a:d1:06:e2:90:
d2:d9:ef:13:39:43:8f:08:e0:dc:36:e2:e8:cc:05:
04:57:73:b9:b9:a0:57:82:37:3f:61:27:57:09:5b:
07:02:8c:3b:69:be:12:5f:53:de:e5:1a:ea:8a:8c:
52:af:37:76:4a:c2:78:65:0e:bc:29:88:de:b6:7e:
ef:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E8:49:8D:45:26:36:B8:3C:6B:FC:0E:0D:FE:52:DE:A6:5C:36:C6
X509v3 Authority Key Identifier:
keyid:B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:70:79:94:17:19:bb:d9:3c:62:39:ad:4e:4d:00:70:73:0e:
d4:a5:f6:6d:56:f3:88:7d:c2:ea:84:9d:8b:c4:13:43:9e:c1:
1b:bc:24:64:44:95:48:0c:f3:c0:7a:71:4b:3f:c7:99:1c:69:
31:30:9e:ef:46:0b:5c:ab:ec:8f:2e:f4:eb:2f:91:72:a6:26:
88:06:ae:c0:ab:9f:85:b9:e0:dd:9d:c8:84:e6:cf:79:b9:22:
46:be:4b:10:98:9c:4f:c2:7c:93:6d:9d:65:93:ea:53:19:35:
d0:da:48:b3:4b:15:11:31:80:fb:dd:b8:47:c4:d4:3f:03:0a:
41:42:6d:38:f8:a4:b5:bd:8c:cf:44:c6:53:fe:bc:0b:3c:2f:
72:6b:6b:2d:11:d7:6e:4e:fb:d1:5a:5e:0e:fb:b6:f4:0d:78:
ae:36:a4:ea:43:15:6d:08:77:26:88:67:a7:2c:b3:f7:44:d9:
bd:30:9d:6d:a2:0a:4a:85:b1:35:ed:db:0b:23:7d:9e:ce:fc:
36:f0:26:c6:5c:92:5a:71:41:89:72:e8:e5:c4:84:dc:56:3b:
c7:f0:4c:0d:af:55:56:91:04:5d:4e:70:19:bc:9a:eb:b5:75:
9b:87:c3:40:f9:08:18:c0:e5:4f:a5:90:25:67:f4:e7:5f:0b:
75:7d:0d:0a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNHe7vyYNAyWLn3TBaiztle+rY5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3
Q0REQTlFNDAeFw0yNjA1MDYyMzA0MDFaFw0yNjA1MDgwMDE4MDFaMDMxMTAvBgNV
BAMTKEQ0RTg0OThENDUyNjM2QjgzQzZCRkMwRTBERkU1MkRFQTY1QzM2QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbDAftq3C7xU+DPkZ4XlO/E5v
dz+SjEuOeuOl4qS5Y/UviSbGK/X8l2j3ghyY6v2zsjKFVRZqT7n7AwI2z3xIXk9f
NHZOcirCAyEJA0UiHRiLTolq5aiRUbZ/2pnU2i2P/urUpXUtjmczpWs/c5TWtWFp
z9YJC4CgvssnVoTQuE2iRo9XeFjIIVtnuRmg9QhuGmk/TzXoaQ10X9NWv+Iqoipb
3a8XgvHuiPp8cesGew9mGiX8Fd7qcjJdUnR60QbikNLZ7xM5Q48I4Nw24ujMBQRX
c7m5oFeCNz9hJ1cJWwcCjDtpvhJfU97lGuqKjFKvN3ZKwnhlDrwpiN62fu/LAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU1OhJjUUmNrg8a/wODf5S3qZcNsYwHwYDVR0j
BBgwFoAUsL+2a8Cum6ao+inIsDOMl3zdqeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Mjc3MjdjM2UtOWMxYS00NmRlLWEyYjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJD
MEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3Q0REQTlFNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMEJGQjY2QkMwQUU5QkE2QThGQTI5QzhCMDMzOEM5NzdDRERB
OUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy
YjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhD
OTc3Q0REQTlFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH1weZQXGbvZPGI5rU5NAHBzDtSl9m1W84h9
wuqEnYvEE0OewRu8JGRElUgM88B6cUs/x5kcaTEwnu9GC1yr7I8u9OsvkXKmJogG
rsCrn4W54N2dyITmz3m5Ika+SxCYnE/CfJNtnWWT6lMZNdDaSLNLFRExgPvduEfE
1D8DCkFCbTj4pLW9jM9ExlP+vAs8L3Jray0R125O+9FaXg77tvQNeK42pOpDFW0I
dyaIZ6css/dE2b0wnW2iCkqFsTXt2wsjfZ7O/DbwJsZcklpxQYly6OXEhNxWO8fw
TA2vVVaRBF1OcBm8muu1dZuHw0D5CBjA5U+lkCVn9OdfC3V9DQo=
-----END CERTIFICATE-----
Generated at Thu May 7 03:53:40 2026 by rpki-client