
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft
File: B677F5476721449C1CB3D8F67673665A0A038595.mft (raw, json)
Hash identifier: 0sbCgIvMj8mOXLU6qqE2TS26WwVtSpQSk+00CKfD6B0=
Subject key identifier: DA:E7:41:CB:51:DC:2B:FA:EE:4C:43:FE:15:48:6F:84:34:C5:8A:A8
Authority key identifier: B6:77:F5:47:67:21:44:9C:1C:B3:D8:F6:76:73:66:5A:0A:03:85:95
Certificate issuer: /CN=B677F5476721449C1CB3D8F67673665A0A038595
Certificate serial: 33D93C788E1D201974FDD3EB690EFDFB60DCB4D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft
Manifest number: 42
Signing time: Fri 19 Jun 2026 23:59:59 +0000
Manifest this update: Fri 19 Jun 2026 23:54:59 +0000
Manifest next update: Sun 21 Jun 2026 03:44:59 +0000
Files and hashes: 1: 3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa (hash: lRUuWcUd02IZlpdvWX9KHM1+gKLrQM+l0jBHsP+smvs=)
2: B677F5476721449C1CB3D8F67673665A0A038595.crl (hash: Nv5T8XZ9rUCSXBbGP4egOsR+vPRVsWO0QKgzPCf8dkk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.crl
rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 03:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d9:3c:78:8e:1d:20:19:74:fd:d3:eb:69:0e:fd:fb:60:dc:b4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B677F5476721449C1CB3D8F67673665A0A038595
Validity
Not Before: Jun 19 23:54:59 2026 GMT
Not After : Jun 21 03:44:59 2026 GMT
Subject: CN=DAE741CB51DC2BFAEE4C43FE15486F8434C58AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:d6:b5:84:49:ff:48:5a:ae:8b:a4:46:08:
d3:6c:ab:fc:7a:62:05:30:97:42:e0:b6:82:7b:5c:
65:55:61:ad:fa:d7:34:26:5f:09:d9:49:d7:d3:cb:
a3:f5:9b:d2:2f:2c:54:5b:4d:c2:9c:8b:c6:9a:d6:
8c:18:66:4e:1d:3a:35:bc:73:a6:09:86:ee:c3:22:
65:8c:ad:0b:c1:57:50:da:5c:d2:d8:e8:08:eb:f7:
99:94:c4:31:ef:db:90:f3:95:ec:9f:57:06:99:d2:
63:2c:6a:15:6e:38:83:60:e9:d8:d8:d8:fc:f1:c4:
af:b8:cc:53:1f:c0:4c:6b:30:aa:36:3f:1f:93:83:
59:62:5c:f5:bc:a5:11:35:58:3e:c9:c3:40:c9:dc:
5a:78:27:bc:66:ca:1d:5d:19:a4:6a:b2:68:c8:06:
23:8a:3a:b9:2b:7d:3a:01:3b:7e:b8:ce:8e:6d:66:
5a:5a:89:36:af:b6:6a:25:de:07:5a:5c:7f:5e:93:
4f:7e:1a:e9:85:aa:43:cb:ec:c5:9e:7a:76:c5:cd:
e2:e8:e7:26:7b:df:cd:d3:64:a6:47:6d:0c:fe:a3:
42:c7:db:97:f3:77:f8:67:a9:e7:b8:8f:5d:5e:77:
ed:e2:48:75:ae:67:10:c2:42:f0:b6:aa:9d:56:78:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E7:41:CB:51:DC:2B:FA:EE:4C:43:FE:15:48:6F:84:34:C5:8A:A8
X509v3 Authority Key Identifier:
keyid:B6:77:F5:47:67:21:44:9C:1C:B3:D8:F6:76:73:66:5A:0A:03:85:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B677F5476721449C1CB3D8F67673665A0A038595.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/B677F5476721449C1CB3D8F67673665A0A038595.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:86:42:ab:44:86:6a:3a:60:39:d4:1b:c6:b1:7a:35:88:6b:
cb:8a:df:ad:75:e8:6b:5d:85:fa:5b:1f:7b:ef:13:1a:dc:06:
3c:90:bb:77:6d:f7:41:6e:16:7a:ee:77:65:bd:c5:9e:c7:66:
3e:86:8b:e0:61:3c:0e:41:18:bd:c0:1b:da:2d:52:8d:a7:8c:
22:fc:c7:d6:37:a6:d8:27:10:32:05:04:d3:db:6b:c8:9f:14:
11:d8:97:bc:08:ea:39:a9:c1:b5:88:4d:88:78:76:e0:9a:39:
d1:0b:b4:37:18:b8:45:83:bd:40:f7:a2:61:23:04:20:03:46:
fe:5e:c5:bf:26:0b:86:9d:ab:2e:17:22:cd:d1:c0:a8:a1:18:
df:76:9b:55:e5:e6:b4:09:ea:7e:93:d9:7a:5b:93:07:54:59:
d0:37:1c:5e:a0:ef:3d:79:b7:f5:a0:ac:3b:e8:01:14:f2:0a:
aa:4f:e0:80:e8:ec:e5:9f:dc:eb:5a:a9:0a:c7:ef:b8:10:ee:
4f:15:4f:92:dd:08:9d:17:2c:b2:0c:39:36:be:79:7a:65:8f:
e0:f6:72:79:bb:3c:18:a7:3e:66:94:39:47:f2:6b:eb:ed:55:
d7:e5:3e:fa:8b:ca:da:b2:36:b4:86:e3:75:29:a6:0d:ea:b2:
c9:51:9b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:18:20 2026 by rpki-client