
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft
File: B9281144646657214FE1ADE5A3228E100E340E53.mft (raw, json)
Hash identifier: oDw3TO9959VLtaKwUpt0FFvrP49o3CPa4EofnwquiuE=
Subject key identifier: 0E:56:F0:C4:C4:CE:B7:24:B8:03:C2:86:62:43:33:31:72:46:6B:FF
Authority key identifier: B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53
Certificate issuer: /CN=B9281144646657214FE1ADE5A3228E100E340E53
Certificate serial: 682BB3D0101FF429ED764EFB5C0CD21A5A4DDF57
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft
Manifest number: 93
Signing time: Wed 19 Aug 2026 16:59:32 +0000
Manifest this update: Wed 19 Aug 2026 16:54:32 +0000
Manifest next update: Thu 20 Aug 2026 18:50:32 +0000
Files and hashes: 1: B9281144646657214FE1ADE5A3228E100E340E53.crl (hash: x1Txx1ZSZMWxeC1mxvo4sF4j4kpIbjSJJu6nEK2C8Ak=)
2: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: GkX4NBYIJf8jri1lDVBbCRWCXCtYyohsWxcf1tLEKh4=)
3: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: Tgez0mY6SPOTnuCIKB3HlrvFNAAadTv4QI32lWtN/DI=)
4: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: Ve4ocQOUOq8AQ9gpm5lYh6lO9aEe09tZrNXe/azearo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl
rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 18:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:2b:b3:d0:10:1f:f4:29:ed:76:4e:fb:5c:0c:d2:1a:5a:4d:df:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9281144646657214FE1ADE5A3228E100E340E53
Validity
Not Before: Aug 19 16:54:32 2026 GMT
Not After : Aug 20 18:50:32 2026 GMT
Subject: CN=0E56F0C4C4CEB724B803C2866243333172466BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:e6:56:33:67:30:b1:ab:48:42:69:93:7d:
9e:36:32:f5:7c:47:3b:80:92:63:bb:51:01:10:d6:
df:b8:f8:74:c2:cf:66:cc:5d:a5:2a:6f:85:7a:e9:
f6:72:12:eb:a5:4b:b4:fb:cb:dc:c5:68:7f:a7:9a:
37:dc:63:01:b5:94:48:b3:bc:5a:ee:56:18:54:7a:
e5:19:0a:6e:f5:33:f3:0f:72:57:77:ef:a2:21:90:
76:85:de:5d:0e:b1:c5:47:b0:32:fd:43:f0:83:19:
29:2c:a5:21:34:51:f2:d4:c8:ac:61:a9:83:eb:d5:
ce:9c:ae:2a:a1:17:4a:27:b1:0a:2a:83:17:19:ea:
c5:8c:6d:89:f9:9b:7b:62:30:e2:53:9d:b9:34:03:
69:e2:67:bc:df:28:09:5e:af:48:31:be:c7:b7:06:
10:22:98:eb:d8:52:33:a1:fd:f4:37:47:81:93:ce:
1f:1c:ab:3b:fa:5e:f7:e2:25:60:61:45:d7:fb:82:
21:5f:9f:be:d7:66:d9:db:e3:e7:df:2f:35:6d:3a:
69:8d:5a:53:fa:e2:a9:86:ec:22:f1:c6:92:1d:1d:
9f:1f:16:fb:4a:21:0c:18:88:e9:16:44:79:4d:e5:
77:31:2a:6c:22:8e:3a:66:a2:f6:f4:80:a7:00:f2:
f5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:56:F0:C4:C4:CE:B7:24:B8:03:C2:86:62:43:33:31:72:46:6B:FF
X509v3 Authority Key Identifier:
keyid:B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bb:55:81:05:c1:a2:83:bc:20:a0:71:8b:36:b6:f6:74:ec:
94:e6:43:0a:0b:f8:79:73:cc:29:2e:5d:3a:73:5b:30:54:9b:
1a:19:f3:c0:54:ff:fc:a9:a8:7f:7a:f3:ab:04:54:18:77:3a:
ce:a4:fd:e7:3c:77:90:96:5f:bd:1b:7c:53:60:33:43:55:f1:
86:4a:00:d7:a6:16:b9:6a:4a:91:5c:9d:0b:7e:7d:62:ec:8d:
55:a1:82:f1:5e:9e:88:ae:88:dc:64:0b:07:ba:52:03:82:2f:
f3:b4:b9:08:68:a4:0e:7a:1a:49:4c:8a:33:bf:d0:73:14:6d:
26:e2:9c:4b:0a:51:20:29:65:61:d7:e8:60:5e:8a:0a:95:54:
59:e9:67:2c:18:0d:7e:d6:e5:62:81:9f:25:ee:d5:a1:39:45:
8d:76:1d:82:09:b8:62:44:97:77:00:33:bc:30:ed:e3:7e:6b:
a1:1a:fd:36:00:6f:d9:e8:94:b3:79:4d:02:e6:cf:a3:5a:d7:
81:91:bb:3b:43:b6:d6:43:58:b6:ba:ff:86:db:0c:b8:3e:0a:
fd:1b:e1:fa:57:41:3c:86:3c:53:4b:ed:22:56:67:26:2f:af:
d3:22:f8:2e:eb:bd:d9:04:14:b1:aa:8d:93:39:e2:f8:29:fb:
57:a6:c6:60
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaCuz0BAf9Cntdk77XAzSGlpN31cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAw
RTM0MEU1MzAeFw0yNjA4MTkxNjU0MzJaFw0yNjA4MjAxODUwMzJaMDMxMTAvBgNV
BAMTKDBFNTZGMEM0QzRDRUI3MjRCODAzQzI4NjYyNDMzMzMxNzI0NjZCRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVNOZWM2cwsatIQmmTfZ42MvV8
RzuAkmO7UQEQ1t+4+HTCz2bMXaUqb4V66fZyEuulS7T7y9zFaH+nmjfcYwG1lEiz
vFruVhhUeuUZCm71M/MPcld376IhkHaF3l0OscVHsDL9Q/CDGSkspSE0UfLUyKxh
qYPr1c6criqhF0onsQoqgxcZ6sWMbYn5m3tiMOJTnbk0A2niZ7zfKAler0gxvse3
BhAimOvYUjOh/fQ3R4GTzh8cqzv6XvfiJWBhRdf7giFfn77XZtnb4+ffLzVtOmmN
WlP64qmG7CLxxpIdHZ8fFvtKIQwYiOkWRHlN5XcxKmwijjpmovb0gKcA8vVBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDlbwxMTOtyS4A8KGYkMzMXJGa/8wHwYDVR0j
BBgwFoAUuSgRRGRmVyFP4a3loyKOEA40DlMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2E4YTlhODEtMGE1Mi00YTUwLWI3ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2
NDY2NTcyMTRGRTFBREU1QTMyMjhFMTAwRTM0MEU1My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9COTI4MTE0NDY0NjY1NzIxNEZFMUFERTVBMzIyOEUxMDBFMzQw
RTUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3
ZjYtYTM2Zjg2ZjNkMmM3LzAvQjkyODExNDQ2NDY2NTcyMTRGRTFBREU1QTMyMjhF
MTAwRTM0MEU1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGi7VYEFwaKDvCCgcYs2tvZ07JTmQwoL+Hlz
zCkuXTpzWzBUmxoZ88BU//ypqH9686sEVBh3Os6k/ec8d5CWX70bfFNgM0NV8YZK
ANemFrlqSpFcnQt+fWLsjVWhgvFenoiuiNxkCwe6UgOCL/O0uQhopA56GklMijO/
0HMUbSbinEsKUSApZWHX6GBeigqVVFnpZywYDX7W5WKBnyXu1aE5RY12HYIJuGJE
l3cAM7ww7eN+a6Ea/TYAb9nolLN5TQLmz6Na14GRuztDttZDWLa6/4bbDLg+Cv0b
4fpXQTyGPFNL7SJWZyYvr9Mi+C7rvdkEFLGqjZM54vgp+1emxmA=
-----END CERTIFICATE-----
Generated at Thu Aug 20 07:01:54 2026 by rpki-client