
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
File: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft (raw, json)
Hash identifier: ysnqP/thEBy93DodLoOiu4HYWGdVyT3EBxJXhSxSbAc=
Subject key identifier: 3C:C1:DD:CA:55:9A:5F:ED:2F:FF:97:74:C8:9B:E9:F6:D2:DC:45:75
Authority key identifier: B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF
Certificate issuer: /CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF
Certificate serial: 55A4AF7186459F9DDDA10E42D81F72FFD15CED5B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
Manifest number: D4
Signing time: Thu 08 Oct 2026 05:50:17 +0000
Manifest this update: Thu 08 Oct 2026 05:45:17 +0000
Manifest next update: Fri 09 Oct 2026 07:42:17 +0000
Files and hashes: 1: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl (hash: 9+zsz7xwVSNwHViyZ7DOYJIG+0RAcz3Si9Zzl5mLxns=)
2: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: JbJvmvToLRsj/pbiH1e96nax2mjHa9GpGHMhuuSXERU=)
3: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: vO+Q8HZjgmJonBgHOxFWAnJzI9j2ku3exsOHuLSofhs=)
4: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: r+nuLztYujAHMA3h3J8e3UnpoppY1KFa5/V4VYVp7Wg=)
5: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: rh10KjKVWoQwoKdQAU/xuosvzsdN9Rw59HlxfUxCKPU=)
6: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: ArAw1U/ObqC6nylMjrPDR+er3LEvT016ghjJZD3baiw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl
rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 07:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a4:af:71:86:45:9f:9d:dd:a1:0e:42:d8:1f:72:ff:d1:5c:ed:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF
Validity
Not Before: Oct 8 05:45:17 2026 GMT
Not After : Oct 9 07:42:17 2026 GMT
Subject: CN=3CC1DDCA559A5FED2FFF9774C89BE9F6D2DC4575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:5e:48:de:59:0e:cd:b0:e4:7f:6a:3b:1e:
10:0a:e1:75:fd:86:e1:ab:1d:7e:09:35:de:41:c8:
34:ee:a4:c4:73:58:71:80:03:3f:69:f3:2d:12:34:
e0:bf:a3:bf:d2:64:96:4d:a0:9e:ff:b1:8c:93:f8:
f8:8a:e6:37:9b:3d:28:c7:70:d3:bf:ba:28:d0:39:
1c:36:c0:f9:5c:f1:3c:46:07:bb:a4:b5:b9:31:37:
d1:e8:0b:29:18:f2:75:0f:a6:1d:9b:19:62:d3:2f:
b5:a1:53:6c:2b:2c:3f:29:59:4a:e8:90:95:f0:2e:
3d:d6:35:d7:43:95:d6:19:a2:f3:43:2a:85:2d:c3:
dd:ac:f2:14:52:0c:65:89:0e:c0:67:8e:4a:1c:9b:
e2:e5:7f:1d:7a:2d:15:f5:10:93:6f:9f:37:30:39:
6e:de:69:30:70:83:34:3a:21:46:df:f9:a2:61:48:
0f:10:9e:77:1d:d4:1a:d7:3e:1f:4c:74:c4:e9:74:
5c:31:61:6d:d1:17:2e:67:3d:99:a5:69:54:95:7c:
25:5c:eb:0f:ab:6a:c7:f1:f2:c3:bb:b0:29:3b:e4:
7f:f7:e7:21:98:0d:36:b7:ff:ba:7c:d3:64:b7:3e:
5e:e7:f9:ec:6b:4d:cd:de:40:b0:0d:97:fe:47:74:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C1:DD:CA:55:9A:5F:ED:2F:FF:97:74:C8:9B:E9:F6:D2:DC:45:75
X509v3 Authority Key Identifier:
keyid:B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:dd:0a:0e:fb:f7:5f:ad:e1:25:39:9c:13:b2:e5:88:0b:a4:
b8:63:f8:8b:de:a4:c1:d7:17:7a:91:27:6e:24:fd:3d:cc:4f:
19:ba:e4:08:8a:e0:23:33:28:a8:99:ba:3a:56:81:e9:49:b0:
71:8b:c2:90:00:ae:59:88:5b:58:32:c4:ec:b4:b2:c1:d3:c3:
07:7c:b8:80:23:7e:21:7c:dd:5b:34:46:7d:16:37:98:ce:ea:
80:cd:c3:84:5a:36:51:7a:b3:78:6b:12:6e:41:f0:d6:a6:79:
98:ed:02:1f:7c:b5:55:ed:a5:7e:fb:ef:28:cd:e0:a2:45:1d:
fd:b0:07:9f:01:d2:0f:c8:30:d7:0a:ae:e7:38:0e:8e:b4:53:
74:87:ce:16:c6:4a:0c:2f:c0:82:c7:f0:10:79:1e:88:06:e4:
b7:80:84:f6:81:9a:0d:01:cc:e6:8e:7a:01:03:24:e2:fc:9e:
07:2c:a9:3b:18:27:15:ce:7d:56:16:6c:85:76:02:42:a9:3c:
04:52:d1:43:c1:e4:50:dd:21:90:c5:1a:48:75:8a:b8:fd:de:
dc:c9:57:69:8f:6d:c2:7b:bc:32:f2:d0:bf:59:eb:a5:ab:5a:
57:b4:d7:30:76:4c:b8:30:70:9e:b5:a5:ab:88:1a:96:99:0e:
21:e1:55:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:32:04 2026 by rpki-client