
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.mft
File: 0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.mft (raw, json)
Hash identifier: pm5E+caGyGp4OMHvx1Gi04V2d660n36CXgOQ0niBIkM=
Subject key identifier: 43:B7:FD:51:30:5C:A2:BD:85:2D:85:11:72:9A:66:67:74:34:2D:B3
Authority key identifier: 0B:18:9B:4D:9D:00:55:3E:F2:F8:75:5E:AD:7F:A4:4A:A8:E9:05:9F
Certificate issuer: /CN=0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F
Certificate serial: 4B17996086AEDF993052F917138AFA629AE250C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 23:53:29 +0000
Manifest this update: Wed 16 Sep 2026 23:48:29 +0000
Manifest next update: Fri 18 Sep 2026 01:39:29 +0000
Files and hashes: 1: 0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.crl (hash: odRzqOqaFIzrQc4vlryS8yWjSogVzQAHchG6mmwfl0E=)
2: 3130332e3138362e38312e302f32342d3234203d3e20313336313235.roa (hash: qt8C98CNugMo7Hs3wPPfuZTKfdaxqA/LCjZgJh4oP7g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.crl
rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 01:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:17:99:60:86:ae:df:99:30:52:f9:17:13:8a:fa:62:9a:e2:50:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F
Validity
Not Before: Sep 16 23:48:29 2026 GMT
Not After : Sep 18 01:39:29 2026 GMT
Subject: CN=43B7FD51305CA2BD852D8511729A666774342DB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:52:3e:8d:d2:b6:65:b9:d7:5f:a6:3b:b3:
c4:f6:e3:f8:20:8a:7f:2f:f8:2f:a3:d0:2d:a9:be:
65:e4:3e:5e:15:bb:f3:5d:16:bf:bd:24:7d:88:8b:
19:9d:c4:5a:5f:5a:3f:b9:86:61:18:d0:c8:9e:f3:
ec:a0:fd:38:d1:09:98:bd:29:5e:46:33:1d:da:59:
84:b1:ca:3f:36:a3:05:3e:19:93:22:7c:df:a2:61:
a2:06:37:d4:d1:9b:c8:5b:c7:c2:4b:41:bc:40:a1:
ae:74:28:3c:9a:25:57:75:82:97:60:e3:5d:d6:c8:
d4:aa:a4:fa:7d:db:01:f7:04:7d:bf:b5:cd:cc:42:
ee:94:9c:bf:d1:2d:25:85:c8:de:c4:d3:32:3c:e8:
51:e4:b5:20:87:5b:16:54:16:77:0c:9c:49:ec:a5:
51:8a:b3:31:a8:89:89:91:71:be:92:ca:51:51:8b:
8c:75:3e:9b:71:7f:74:aa:16:a6:13:a0:bc:df:3b:
ec:da:98:30:75:1e:5a:c4:74:89:1e:73:df:d6:c9:
03:49:83:d9:ea:0e:e4:cc:37:3f:27:e7:19:bd:a7:
f0:92:9f:36:52:b1:81:13:e5:c2:14:1c:51:95:13:
1c:df:36:a2:82:1f:9f:99:57:cc:d8:26:07:b3:b1:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B7:FD:51:30:5C:A2:BD:85:2D:85:11:72:9A:66:67:74:34:2D:B3
X509v3 Authority Key Identifier:
keyid:0B:18:9B:4D:9D:00:55:3E:F2:F8:75:5E:AD:7F:A4:4A:A8:E9:05:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:76:3b:8d:e5:07:db:e8:1e:84:99:39:dc:f6:e7:da:13:7d:
4b:4d:c9:3e:22:10:4a:65:c6:fe:2e:7a:f6:bd:d1:cd:56:79:
e6:d7:e1:23:25:31:a0:34:ee:38:7f:c8:1c:9c:de:fc:15:be:
41:ed:86:22:28:c8:bd:4b:55:14:5d:0b:a4:06:f7:58:f5:22:
45:d5:eb:1e:1e:1a:d1:7d:21:69:df:eb:9d:a4:5c:da:fe:28:
04:12:b6:e8:78:0d:b6:a9:b8:3d:8a:1c:bd:70:74:ba:d4:c1:
c6:ff:9f:10:52:ea:46:a4:f7:38:75:f1:8e:85:d8:72:b7:a1:
8c:ee:7c:64:6d:15:f3:8e:ba:c1:25:ff:57:6b:fb:09:14:53:
24:b4:97:60:0f:95:16:98:ab:ce:a2:4d:89:2e:90:c5:96:85:
6a:34:59:b4:86:e7:d7:06:4d:33:63:81:28:50:15:fa:0e:5d:
5c:85:e2:f0:28:28:09:5f:84:2b:41:5f:bb:a1:f7:2d:28:61:
21:49:d5:54:20:9d:05:10:6a:28:8c:27:70:87:a0:d5:cc:86:
c6:b5:bc:5c:bc:23:ce:07:8d:80:97:a3:84:fa:5d:5f:64:f2:
ff:90:e9:5f:06:5e:95:0a:09:1f:25:14:ef:fb:20:0e:db:d6:
69:a9:bf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:23:26 2026 by rpki-client