
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft
File: 0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft (raw, json)
Hash identifier: 3Mm74pn3N3oWlb2nYVEqG79aS0TDDRXYwl0OtUJWRqc=
Subject key identifier: 7F:FD:70:50:17:97:07:CC:50:A3:90:97:33:41:1F:CA:11:23:F3:2F
Authority key identifier: 0B:1A:75:6D:6F:1B:18:8E:DE:FA:5D:D5:CC:34:25:D3:3A:23:AC:9E
Certificate issuer: /CN=0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E
Certificate serial: 1E99D73E9488EA226118D2CBABDBFC8649173647
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft
Manifest number: BA
Signing time: Thu 17 Sep 2026 00:44:26 +0000
Manifest this update: Thu 17 Sep 2026 00:39:26 +0000
Manifest next update: Fri 18 Sep 2026 03:42:26 +0000
Files and hashes: 1: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: /5dNawMylgFAUVXMnACcE1jgMAFNneCBr14eai7kMCU=)
2: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: FBsWEYtMf7mRaTuEZ/0PxyglRDybKAQxH+CcBw6tqDM=)
3: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: yzj0R3It9R2jU9wBDpqzfiEHW+8PEhf6218rNQIPbSs=)
4: 0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl (hash: ltJzHx7OaXZFsMGyh+DAK5V1+QDNCbh8imtmqYcsZq4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl
rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 03:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:99:d7:3e:94:88:ea:22:61:18:d2:cb:ab:db:fc:86:49:17:36:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E
Validity
Not Before: Sep 17 00:39:26 2026 GMT
Not After : Sep 18 03:42:26 2026 GMT
Subject: CN=7FFD7050179707CC50A3909733411FCA1123F32F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:ea:5e:e6:5e:e1:bf:fc:80:cb:0c:d7:5f:
b7:44:52:ee:b5:6d:db:c8:e5:91:66:54:eb:75:e4:
f7:81:5c:2e:19:08:a8:0e:3f:16:0f:cc:43:91:c6:
9d:89:f0:b7:0c:6f:c9:8a:36:46:4d:39:d8:3e:eb:
98:ee:ae:3c:2b:05:7e:48:14:f5:ab:46:6e:33:38:
f3:73:1f:59:5d:99:20:12:3e:eb:22:4a:b4:0b:75:
c1:b5:37:75:d4:a7:2a:dd:b7:5f:1e:fa:a6:11:ee:
f7:92:dd:5c:b5:df:69:92:fa:fd:f9:1c:7c:84:b8:
f4:cc:bc:62:be:66:ad:77:36:45:9a:c8:65:47:e8:
11:4d:80:17:a7:e1:bc:22:d9:7b:47:af:37:2b:61:
2a:80:f5:39:fe:ee:46:f8:f0:bf:01:99:5f:69:ba:
c1:17:43:f0:b6:fa:6c:b6:3e:d8:f8:0e:ce:e4:59:
aa:d7:06:9c:22:a4:5f:73:a3:0c:de:31:ce:08:4a:
28:fc:e8:a2:1d:54:1f:4d:11:4d:f5:5a:68:d9:8c:
a0:da:f5:d2:e6:37:93:ad:fb:d2:f5:32:c5:de:dd:
e6:41:43:cf:f5:0e:3e:8d:c6:cd:d3:98:8b:a8:74:
9f:51:87:41:0f:d4:f6:71:1b:5b:cd:98:3a:80:a8:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FD:70:50:17:97:07:CC:50:A3:90:97:33:41:1F:CA:11:23:F3:2F
X509v3 Authority Key Identifier:
keyid:0B:1A:75:6D:6F:1B:18:8E:DE:FA:5D:D5:CC:34:25:D3:3A:23:AC:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/0B1A756D6F1B188EDEFA5DD5CC3425D33A23AC9E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:0c:45:f5:5e:85:ff:6a:ba:35:82:29:5b:4d:36:9d:8e:3b:
7b:15:48:ca:6d:2d:47:d0:7e:dd:f8:a9:26:e0:a7:e3:18:3e:
84:35:39:d1:c6:5d:ee:f0:73:b8:f1:d4:a8:a0:a6:b3:d4:3f:
d4:44:6e:7a:82:5e:a3:11:cd:95:a1:ec:b9:62:c2:fc:a1:5d:
6e:6a:c5:45:4e:97:8d:75:82:cc:b0:58:48:2c:b7:5b:bf:70:
c5:2e:c6:29:a4:ac:6f:d7:0a:1d:39:c0:67:a1:fa:b2:ab:e6:
01:c5:91:80:82:6f:c8:d2:51:b7:68:56:70:8b:77:ea:79:97:
20:c6:67:ca:00:9a:83:89:df:44:cd:0f:63:b2:fc:4a:06:cb:
af:e5:d1:b9:2c:a8:f3:08:53:90:1e:04:db:02:a2:17:c8:e4:
87:91:30:f2:a0:2f:bf:16:0d:64:2a:39:43:fa:ec:9f:bc:17:
75:b5:a4:b6:c5:bd:0b:cf:2f:1f:30:88:5b:c6:f6:d2:f4:be:
28:e5:f9:31:ef:8f:c7:11:eb:61:d9:de:8d:44:89:c6:77:d9:
e4:24:9c:75:6b:39:f6:09:65:0d:e9:c9:cb:47:76:f7:48:c0:
8c:25:d3:ca:02:6d:19:a7:02:93:76:ea:aa:29:03:b1:f3:86:
de:68:a8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:14:57 2026 by rpki-client