
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft
File: B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft (raw, json)
Hash identifier: RUNWthBhEm02694kk1oYOaYvx5uTlUze17o/UZFM9e4=
Subject key identifier: AA:C2:9B:2B:6B:C8:BD:8C:9D:0F:A5:B4:F0:E4:6D:E0:11:06:55:DA
Authority key identifier: B5:B2:9A:B5:6D:2B:92:7B:DE:33:61:B6:CB:58:CD:08:53:92:62:B0
Certificate issuer: /CN=B5B29AB56D2B927BDE3361B6CB58CD08539262B0
Certificate serial: 22905CF402E118A568A88A8058C95A6C16B0F160
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 08:18:54 +0000
Manifest this update: Thu 17 Sep 2026 08:13:54 +0000
Manifest next update: Fri 18 Sep 2026 08:49:54 +0000
Files and hashes: 1: 323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa (hash: IbczqxcYZ+zxW3Aa+76klhFYL/3X9BCvNeRgAfb1vp4=)
2: B5B29AB56D2B927BDE3361B6CB58CD08539262B0.crl (hash: BFau1/kLQm8tIjxYn9JGRdjss3wzAyyDgfF4IBIUxic=)
3: 3230322e3132392e3232342e302f32322d3234203d3e203338373831.roa (hash: zUwwGmxcrXHUEybdjp6Ek486OiNzUkHwLan92qEDTQE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.crl
rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 08:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:90:5c:f4:02:e1:18:a5:68:a8:8a:80:58:c9:5a:6c:16:b0:f1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5B29AB56D2B927BDE3361B6CB58CD08539262B0
Validity
Not Before: Sep 17 08:13:54 2026 GMT
Not After : Sep 18 08:49:54 2026 GMT
Subject: CN=AAC29B2B6BC8BD8C9D0FA5B4F0E46DE0110655DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:75:81:ff:43:57:45:3e:cd:c7:dc:77:48:
63:6c:c5:02:60:23:7c:1a:70:10:3f:21:17:e3:61:
69:f6:0b:90:03:da:58:95:7b:0f:bf:ac:ad:33:24:
5d:63:7b:c8:8e:19:54:ab:6d:71:5e:cb:27:e8:bc:
48:3d:8f:ab:21:91:32:d0:92:8d:99:af:64:3c:94:
a1:ed:02:5d:65:bb:c7:0b:6a:67:eb:ae:0c:70:78:
a5:02:7b:6a:85:9f:5f:f2:47:55:ad:af:e5:46:30:
2d:6b:e9:2e:23:a0:a0:f0:cc:43:58:de:34:cc:80:
3b:b7:b4:d0:0f:90:90:5f:f6:14:6f:fe:3d:d3:30:
bc:d0:5b:95:15:78:8d:66:76:c8:b1:c5:bb:65:86:
4f:83:1e:21:7b:ba:3e:1d:6f:1c:32:b4:78:3a:5b:
73:7f:14:07:7e:02:d6:e4:05:43:75:fb:de:08:54:
db:45:f5:03:2d:8d:f9:15:3e:2b:aa:aa:bd:b6:cd:
14:fb:70:19:e2:75:1f:96:e5:cb:5e:5a:50:ee:f4:
4e:47:a3:4e:af:5c:61:42:dd:3d:52:d4:59:83:c1:
5f:37:84:fe:1c:41:71:9d:c1:d8:80:b2:77:12:74:
63:d5:b3:35:6c:60:55:9f:99:3c:f1:e1:b1:7b:f4:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C2:9B:2B:6B:C8:BD:8C:9D:0F:A5:B4:F0:E4:6D:E0:11:06:55:DA
X509v3 Authority Key Identifier:
keyid:B5:B2:9A:B5:6D:2B:92:7B:DE:33:61:B6:CB:58:CD:08:53:92:62:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:47:d7:4e:78:03:a9:fb:71:d6:62:b9:fa:61:46:a2:b4:ba:
e2:b1:4e:b2:0b:f9:68:87:38:35:55:f9:ed:ce:89:96:60:68:
66:f2:20:0d:7f:31:c2:39:7b:f7:f1:8f:b7:02:8b:e5:2a:36:
62:20:18:dc:55:ed:05:8c:3c:3a:fe:21:a7:9c:81:34:65:d7:
79:f8:ac:38:7e:f4:75:ee:3a:80:80:d7:2a:5c:b0:dc:37:ed:
b1:cc:3d:d9:9d:9d:b7:94:3e:80:94:85:3c:c4:51:54:9a:1b:
50:5a:e7:3e:8d:7b:39:7e:d1:b8:5e:e6:4b:ab:b1:32:4c:66:
94:41:54:7b:0f:53:db:d3:65:cc:a8:8d:98:26:a0:d8:88:63:
35:28:f8:bb:6b:1c:72:e0:75:11:cc:d0:5d:e4:6b:d2:72:52:
f2:80:55:a0:b2:a3:6a:a1:de:51:1f:27:8d:8f:ad:02:88:a9:
60:a9:64:88:48:95:52:8c:3b:91:a2:d1:e4:35:99:57:1a:c0:
8e:8a:7b:03:f8:7e:e6:21:8a:52:3e:d5:77:fc:dc:d8:b6:14:
a4:25:87:6c:74:02:8f:a3:6f:14:1a:cc:89:fd:81:e9:7a:40:
69:52:e3:df:8d:c3:24:1d:85:bb:28:80:b0:7a:5c:5f:f9:4a:
d2:f4:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:22:21 2026 by rpki-client