
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
File: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft (raw, json)
Hash identifier: 5INMqFoNadA2vKA9R1011G5XzfhTVZ7dxHRL7dw2GNw=
Subject key identifier: 8D:0A:2E:66:8C:06:3B:C5:18:E9:81:A7:58:50:83:30:24:16:95:C9
Authority key identifier: B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30
Certificate issuer: /CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230
Certificate serial: 23EB8CC97473F9FACCBA8C4E74745A91F882453E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
Manifest number: EA
Signing time: Sat 24 Oct 2026 00:55:14 +0000
Manifest this update: Sat 24 Oct 2026 00:50:14 +0000
Manifest next update: Sun 25 Oct 2026 03:24:14 +0000
Files and hashes: 1: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: BKnEE3t5/yyaN3HJnwE9Dy+SO+1ms0WO08R6OxZOm7o=)
2: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl (hash: O5HJ6z4Rf58exrZVKx8jnFCHmUd0W28OgAVkkw7VEmw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl
rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:eb:8c:c9:74:73:f9:fa:cc:ba:8c:4e:74:74:5a:91:f8:82:45:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230
Validity
Not Before: Oct 24 00:50:14 2026 GMT
Not After : Oct 25 03:24:14 2026 GMT
Subject: CN=8D0A2E668C063BC518E981A758508330241695C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:8a:a9:10:17:1c:97:73:09:e1:44:57:6e:
88:62:a3:4b:7b:90:ed:d0:8a:04:49:a2:ca:99:ab:
d9:60:ec:4a:d6:87:ca:83:70:24:7f:37:99:77:f7:
ce:82:53:25:1d:de:c1:09:15:d8:32:0c:bb:be:90:
02:e6:f4:c0:bb:da:12:8f:5a:15:e0:58:a5:24:ab:
00:61:01:38:b8:c1:c8:4d:8a:fa:96:de:c9:3c:56:
d2:a4:5a:29:c2:d6:3c:c6:b9:96:18:9e:a7:45:dc:
7f:f2:91:eb:80:2c:ab:43:56:5a:4d:d3:f0:2c:90:
54:99:51:e0:2b:32:8d:42:c8:39:09:6a:15:66:19:
03:f8:11:c8:af:6c:a1:c2:2f:a5:7b:2c:33:2a:85:
1f:92:25:1c:87:44:24:a7:6c:b2:ce:cb:5d:2c:69:
87:61:50:7d:4f:f6:9e:af:6e:33:15:b3:f6:f6:f4:
6b:33:b5:ee:6a:03:3f:47:e2:97:3c:bd:33:34:95:
6f:f7:dc:d5:aa:74:69:7f:34:a9:6b:61:9a:ee:a4:
f3:bf:05:ce:d2:d9:27:36:89:c2:bb:13:bb:02:1b:
0f:1e:e0:5e:69:d0:56:bf:59:42:0d:95:13:39:1b:
36:15:6e:de:d8:61:0d:4e:67:c7:ad:c3:db:ea:bb:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0A:2E:66:8C:06:3B:C5:18:E9:81:A7:58:50:83:30:24:16:95:C9
X509v3 Authority Key Identifier:
keyid:B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d2:10:c2:26:0a:95:b6:5b:02:d2:ef:c8:af:a2:c1:c2:b7:
67:60:e2:21:8b:0b:1e:e0:87:d9:4e:06:80:49:c9:66:05:d9:
16:ba:42:9c:3a:93:cd:24:9e:7a:28:4d:c5:a7:3e:2d:11:3b:
b1:7b:5c:11:e6:31:9e:89:9e:cb:34:95:7d:72:ac:4f:c0:1f:
7d:fd:ba:a3:b3:88:b9:08:f4:a8:3f:e4:c8:40:d2:14:30:ba:
e9:d3:04:66:f1:8a:56:8c:7b:04:a7:e6:0e:c8:c2:04:f5:d8:
9f:3f:d0:7c:a9:8f:59:dd:43:aa:66:71:7d:be:2b:e2:51:da:
11:0a:d7:cd:67:67:28:57:cb:ce:44:2c:6c:ed:81:85:36:b0:
2d:c3:2d:07:37:25:4d:f2:56:66:cf:9a:d9:0a:9b:61:b8:6b:
05:be:e1:21:a0:60:a3:87:5b:ad:62:bd:d6:6a:92:80:c8:60:
9e:3b:92:57:99:94:5e:43:be:4b:02:02:50:6a:61:c2:1f:f6:
45:00:e3:84:cb:59:f8:f6:8e:82:62:63:65:90:97:59:6d:8f:
60:0a:3e:9e:40:1b:2c:52:b9:7c:c6:1f:f6:9a:b4:2b:c1:dd:
2f:f7:a3:97:21:b6:8e:1c:10:67:b5:3d:03:a6:0f:1d:73:94:
a8:70:da:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:48:50 2026 by rpki-client