
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.mft
File: B030517A0B1BD65FBFEE74838496299F0BA05F7F.mft (raw, json)
Hash identifier: mHpv922qqmOIBZlAWhdDKfKf7LChtWXz46IaoOTqlY0=
Subject key identifier: 23:1B:78:DC:0A:AD:5B:52:DD:F9:DF:F3:A5:A3:19:BA:F9:30:FB:3B
Authority key identifier: B0:30:51:7A:0B:1B:D6:5F:BF:EE:74:83:84:96:29:9F:0B:A0:5F:7F
Certificate issuer: /CN=B030517A0B1BD65FBFEE74838496299F0BA05F7F
Certificate serial: 47348FA63D7980693A336BBCA2003F5A46284CFF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B030517A0B1BD65FBFEE74838496299F0BA05F7F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.mft
Manifest number: EC
Signing time: Sun 25 Oct 2026 09:33:25 +0000
Manifest this update: Sun 25 Oct 2026 09:28:25 +0000
Manifest next update: Mon 26 Oct 2026 10:48:25 +0000
Files and hashes: 1: B030517A0B1BD65FBFEE74838496299F0BA05F7F.crl (hash: ZQN2lnhFj3e+Ie3B6OVvn6XALOTfFhrhy9IIezQknew=)
2: 3130332e3132312e3134362e302f32332d3234203d3e20313335343738.roa (hash: CiiqdwBZAVnGMR0qtGMfauV+tUH3q+Pz/RWqgcuzqbE=)
3: 3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa (hash: t30njUzebXe3AxcuIduvUxjNgMCTv9/yxa80hivgvRU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.crl
rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B030517A0B1BD65FBFEE74838496299F0BA05F7F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 10:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:34:8f:a6:3d:79:80:69:3a:33:6b:bc:a2:00:3f:5a:46:28:4c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B030517A0B1BD65FBFEE74838496299F0BA05F7F
Validity
Not Before: Oct 25 09:28:25 2026 GMT
Not After : Oct 26 10:48:25 2026 GMT
Subject: CN=231B78DC0AAD5B52DDF9DFF3A5A319BAF930FB3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:74:be:c1:8a:1c:b6:4a:ff:09:0b:75:a5:
46:75:06:07:4f:08:d6:8c:ce:fa:f9:a4:64:dc:6b:
cf:89:b6:fe:f4:d4:68:08:38:be:39:0e:b0:0b:93:
3a:4e:a8:6e:f7:87:2a:d7:86:8e:5c:ac:70:62:af:
e2:f2:52:da:2c:08:16:50:a9:a3:79:c2:2f:69:52:
39:99:6d:a0:ec:83:ea:6d:fe:06:ed:71:33:6f:7d:
d2:cd:53:a1:09:d9:aa:27:bf:f3:98:0f:7e:67:dc:
c4:5b:7f:5c:94:ca:dc:82:bd:69:cf:95:88:04:f5:
7d:b6:29:bf:d7:5a:9e:45:58:90:4e:29:5c:91:c9:
8f:d4:a1:29:b9:13:14:18:52:6c:1f:38:21:8f:76:
fc:ab:3e:e0:01:5c:b3:9e:5e:5d:91:2c:df:72:d7:
7e:ad:20:07:b7:dc:5b:bd:5b:d9:3b:03:51:36:65:
72:1c:1b:85:bf:95:00:f8:c5:2a:ee:5e:3a:83:d5:
8b:7f:27:8f:09:18:da:9e:9a:6f:97:12:77:06:83:
95:db:ec:77:6f:fb:41:28:5a:c0:60:21:47:a3:06:
43:6d:35:63:17:67:9a:6b:1e:32:de:cf:b1:31:65:
a8:bf:ea:a3:ec:91:41:f8:8d:17:be:03:76:e5:71:
b4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1B:78:DC:0A:AD:5B:52:DD:F9:DF:F3:A5:A3:19:BA:F9:30:FB:3B
X509v3 Authority Key Identifier:
keyid:B0:30:51:7A:0B:1B:D6:5F:BF:EE:74:83:84:96:29:9F:0B:A0:5F:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B030517A0B1BD65FBFEE74838496299F0BA05F7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/B030517A0B1BD65FBFEE74838496299F0BA05F7F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7b:67:0f:04:b0:6f:9d:41:84:7a:b6:15:8f:d0:60:dd:6a:
b2:e5:f7:e4:a5:d5:51:24:24:2e:95:97:15:1e:64:6c:29:b4:
ef:06:79:9b:26:86:d5:15:3f:6d:0c:0f:15:05:13:bf:2f:f1:
0f:17:73:50:dc:73:24:44:a1:b0:20:89:97:f5:ac:8f:c5:89:
12:55:dd:69:ee:f7:b0:bd:d2:09:17:9f:28:bc:43:24:30:eb:
95:5a:83:d7:c1:2f:19:65:3b:bf:2c:b2:7e:a5:48:24:59:bc:
2e:60:6e:ca:26:fd:1b:ba:be:31:00:08:c6:93:1f:b6:46:c0:
c7:7f:3f:8c:ca:2d:c5:91:77:50:be:c6:a4:d7:dd:66:4e:95:
d4:b8:88:e2:96:ae:39:92:c6:13:c0:a6:82:e3:94:4f:09:f7:
e0:81:75:d6:bb:89:11:a8:14:08:13:4d:e0:26:1d:f1:26:d0:
69:e9:f9:0c:c0:ca:c7:93:19:58:de:2a:7b:31:4a:d0:4c:7f:
ca:7e:a7:f4:48:31:07:93:65:7e:ef:46:54:a2:8f:93:a5:bc:
19:fd:c0:0f:9b:2c:42:4b:bf:12:2a:d6:30:87:91:aa:8a:ae:
22:19:06:21:d3:78:74:9b:65:4e:70:7b:38:75:b3:c2:e7:10:
b4:50:5f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 22:18:20 2026 by rpki-client