
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/01B0C001093D0622F6A0653371CA0798A79BF1CB.mft
File: 01B0C001093D0622F6A0653371CA0798A79BF1CB.mft (raw, json)
Hash identifier: jSYIL2IjhHio1l3z8h9+1o0FaOykOHPpu+/F4l11QCc=
Subject key identifier: DF:41:2F:2D:FE:B5:50:3B:22:F8:84:14:48:06:91:C1:94:A0:45:D9
Authority key identifier: 01:B0:C0:01:09:3D:06:22:F6:A0:65:33:71:CA:07:98:A7:9B:F1:CB
Certificate issuer: /CN=01B0C001093D0622F6A0653371CA0798A79BF1CB
Certificate serial: 46CC2BDD9252226DF57E8F38CAF9AE133852B31A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B0C001093D0622F6A0653371CA0798A79BF1CB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/01B0C001093D0622F6A0653371CA0798A79BF1CB.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 06:36:43 +0000
Manifest this update: Thu 17 Sep 2026 06:31:43 +0000
Manifest next update: Fri 18 Sep 2026 09:15:43 +0000
Files and hashes: 1: 34332e3232382e3137352e302f32342d3234203d3e20313532303235.roa (hash: izPF4g0XaDjUw1u0YXoJ9DX03+757vFwLCNVI/libSA=)
2: 01B0C001093D0622F6A0653371CA0798A79BF1CB.crl (hash: wj5oW7egmVnfv4R/vnoVbebMzNUM4HBgN3G8M92s65Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/01B0C001093D0622F6A0653371CA0798A79BF1CB.crl
rsync://rpki-rsync.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/01B0C001093D0622F6A0653371CA0798A79BF1CB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B0C001093D0622F6A0653371CA0798A79BF1CB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:cc:2b:dd:92:52:22:6d:f5:7e:8f:38:ca:f9:ae:13:38:52:b3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01B0C001093D0622F6A0653371CA0798A79BF1CB
Validity
Not Before: Sep 17 06:31:43 2026 GMT
Not After : Sep 18 09:15:43 2026 GMT
Subject: CN=DF412F2DFEB5503B22F88414480691C194A045D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:70:43:b6:32:66:90:38:1a:b5:c9:9c:dc:ad:
80:74:05:94:eb:b5:04:7a:6d:c5:01:1b:4f:84:bc:
b2:4a:4f:5c:bf:a2:81:5a:19:b9:8e:44:4e:c4:3a:
20:c9:0a:b2:d3:93:df:4b:a1:96:43:02:c7:52:d6:
23:53:1e:85:30:26:d6:5f:8e:f6:72:43:4d:dc:e4:
2c:8e:d1:32:07:d4:32:b7:6f:39:49:c1:c8:90:db:
78:0f:01:28:39:21:15:df:b4:22:7e:6e:fb:74:28:
85:92:b7:54:f5:67:3f:2a:30:f4:ed:bd:c9:77:f4:
55:e2:e8:dd:f8:59:16:5a:b1:9b:27:ee:77:92:34:
f6:44:09:a9:93:fd:f8:f4:53:a4:fc:83:b0:ed:49:
96:55:92:d3:7d:d5:98:52:8a:81:46:a2:9d:5b:01:
23:d2:20:33:70:d6:91:ad:9d:25:32:5c:61:e5:34:
4e:1b:30:8e:fd:a6:99:89:f0:71:23:68:f5:cc:7c:
59:0a:35:f3:74:a1:de:cc:8b:2b:7d:02:6f:39:fa:
9b:21:7e:ab:ba:23:00:63:bd:27:72:25:fa:2c:cd:
7d:73:be:9f:0a:10:36:21:e8:2f:8f:78:5b:9a:ee:
ed:95:16:fc:9d:22:fe:8d:35:b0:0e:27:0b:c8:44:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:41:2F:2D:FE:B5:50:3B:22:F8:84:14:48:06:91:C1:94:A0:45:D9
X509v3 Authority Key Identifier:
keyid:01:B0:C0:01:09:3D:06:22:F6:A0:65:33:71:CA:07:98:A7:9B:F1:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/01B0C001093D0622F6A0653371CA0798A79BF1CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B0C001093D0622F6A0653371CA0798A79BF1CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/01B0C001093D0622F6A0653371CA0798A79BF1CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:aa:4b:d5:f8:97:ee:49:2f:74:c6:c2:db:20:9e:22:77:33:
dd:3d:b5:af:3c:fb:03:6e:67:4d:c3:d5:f0:ef:59:67:08:8d:
d3:67:9b:be:56:73:7c:35:62:ee:5f:02:e7:20:89:f5:b4:36:
28:1e:8f:b2:82:39:d2:6a:ef:88:ee:0d:0c:e2:bc:cf:8a:28:
34:18:6e:47:8c:7b:67:4c:96:15:7a:25:f8:4c:14:b4:6a:38:
0c:16:2d:43:5c:19:42:23:f5:9b:41:47:bf:fe:bf:1b:e0:9f:
38:b3:ae:c1:28:62:95:c4:ba:d6:f1:6d:07:3a:64:e2:f7:6e:
68:38:c3:9b:97:c1:a5:3f:48:c5:d1:e4:02:31:ca:38:c5:6a:
47:cb:ac:92:da:bb:d0:8d:65:3c:8c:cc:46:9a:e3:26:4d:b1:
2b:ba:ba:b1:be:e2:47:06:f2:14:59:40:e3:b3:1a:2c:a7:b4:
56:de:45:f0:a9:41:e1:b0:d9:ff:d3:70:22:9a:89:b7:65:bd:
ca:8c:a7:c1:ae:8a:b4:b9:49:05:31:8d:28:54:c8:a8:90:bf:
b8:a8:6f:5a:63:84:aa:f4:a2:f7:64:51:ee:b1:36:27:5f:60:
bf:38:bf:d6:75:05:d3:39:e3:9d:d1:85:fd:cd:d3:bb:f4:6e:
b8:dd:18:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:05:30 2026 by rpki-client