
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft
File: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft (raw, json)
Hash identifier: o4zZ/V7U47o8tMu9KQj2UrQmO5jtb7Kn5OsH7jTq0o4=
Subject key identifier: 77:1E:82:1E:C0:4F:4A:E6:BF:E0:B1:0D:C4:BB:54:D3:7E:D7:75:2A
Authority key identifier: B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5
Certificate issuer: /CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5
Certificate serial: 4905D910D1DC0B849130B6DE92DEB4A8002A06B8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 09:25:19 +0000
Manifest this update: Thu 17 Sep 2026 09:20:19 +0000
Manifest next update: Fri 18 Sep 2026 10:11:19 +0000
Files and hashes: 1: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: 0KpGk+Me0s5mBlSvDHCHu9w7qKthN0KZwNcXUygtBFI=)
2: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: G626nf3IkAH7IIThn3UlVRBOX9wH92EFofVHExk6vxQ=)
3: B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl (hash: l7DYlEta3hcQA5kTJaMgsRVsDtzT5zMEzHngtNhrAeQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl
rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:05:d9:10:d1:dc:0b:84:91:30:b6:de:92:de:b4:a8:00:2a:06:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5
Validity
Not Before: Sep 17 09:20:19 2026 GMT
Not After : Sep 18 10:11:19 2026 GMT
Subject: CN=771E821EC04F4AE6BFE0B10DC4BB54D37ED7752A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:4b:5a:76:9a:4f:bb:23:9d:d9:74:72:94:
9d:d5:23:46:e9:26:8b:93:cb:2d:81:3d:cd:2e:88:
45:cc:be:3f:b1:85:0b:66:3b:54:dc:44:a0:cf:c6:
7a:e3:dd:cb:45:a4:6e:75:be:46:69:86:a9:cc:20:
fe:b2:4e:4d:6c:e6:89:51:68:a0:51:1b:1c:38:73:
f8:a2:5c:06:78:61:af:c8:6d:1c:f0:58:ef:90:cd:
e6:3b:c2:44:f4:48:b9:6b:9c:23:54:20:ff:de:98:
03:94:4f:89:61:2e:93:ec:a0:9a:41:b9:33:4d:37:
68:b4:33:ca:0e:83:ad:77:f2:f2:21:04:fb:11:b6:
5b:36:96:a0:da:01:18:d2:41:a6:ad:a3:4b:19:4f:
e8:86:94:86:e2:d2:ad:58:52:e5:88:b1:84:1b:ca:
14:6b:15:de:3d:1d:5e:67:33:cf:16:4e:cc:ec:07:
e0:8d:01:a1:7e:27:25:a0:01:96:2c:a5:4c:40:d3:
66:d5:60:48:88:02:bd:53:90:f3:4e:3f:78:a3:f9:
f1:5e:ea:25:5b:30:af:04:ce:e1:e2:c3:b1:0e:ed:
d9:11:1f:11:10:97:ae:fa:a4:7b:03:1f:cd:14:83:
3f:7f:df:6f:7e:43:34:a4:ab:56:7e:38:86:b1:a8:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1E:82:1E:C0:4F:4A:E6:BF:E0:B1:0D:C4:BB:54:D3:7E:D7:75:2A
X509v3 Authority Key Identifier:
keyid:B7:CB:2E:9F:65:13:B0:AB:D6:9C:D2:A2:CC:60:4D:61:C1:5D:AC:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/B7CB2E9F6513B0ABD69CD2A2CC604D61C15DACA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:49:fc:b0:24:dc:6b:1f:0d:2d:08:dd:11:d5:6b:3f:65:4b:
f2:50:5b:37:ab:0a:9d:3c:c9:93:21:42:4d:dc:3c:b7:19:98:
bc:a1:84:55:49:1e:a5:11:c5:93:ec:09:b6:c9:ab:b0:09:c3:
c6:cd:a5:a2:a1:72:85:86:36:86:fa:d0:a8:6f:7f:1a:85:9c:
0b:ab:ac:d2:77:24:cd:c5:4c:b0:ee:cb:e8:81:4a:f9:df:46:
94:d7:cb:a5:3d:a1:4a:25:4e:36:3a:70:5c:25:8a:c7:07:2b:
45:79:db:ff:da:f0:21:6f:e4:10:3e:ae:fb:2d:92:0e:b7:e3:
5e:51:03:7a:d3:29:14:b2:b1:d7:ab:56:9b:5d:91:cf:f0:c5:
56:ce:18:19:4f:e7:93:a1:6f:1a:1b:22:2e:1c:8f:41:2b:ff:
7b:b1:45:5e:9c:dd:1b:64:d3:11:91:52:a6:4c:1c:86:55:07:
eb:c3:f5:ce:91:63:b9:be:f2:ad:df:a8:17:71:03:65:1f:e4:
a1:b7:12:fe:53:a8:d3:84:a6:a7:30:dc:bb:fb:85:e8:73:d4:
23:1a:02:49:68:45:ea:02:6e:31:d9:f5:d3:b6:9a:17:74:52:
f4:6a:36:27:71:bf:a7:24:67:6a:8e:53:f4:f4:8d:02:25:26:
cc:dd:47:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:40:30 2026 by rpki-client