
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft
File: B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft (raw, json)
Hash identifier: WpiSEyzwNprbqX9uIUDcn+lVvH6oTPitvxDxkfUIBTc=
Subject key identifier: CA:22:E1:4E:34:AA:98:1D:17:E0:2F:96:B4:AE:64:D8:14:41:3D:3A
Authority key identifier: B3:13:E8:A9:E4:64:C3:F7:DE:16:EF:E4:50:69:34:3A:95:2B:1A:AA
Certificate issuer: /CN=B313E8A9E464C3F7DE16EFE45069343A952B1AAA
Certificate serial: 228C146B2FCCBD18C0A6ACDE48F9445A95D7D26A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft
Manifest number: EB
Signing time: Mon 26 Oct 2026 06:55:25 +0000
Manifest this update: Mon 26 Oct 2026 06:50:25 +0000
Manifest next update: Tue 27 Oct 2026 07:47:25 +0000
Files and hashes: 1: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: bB08SpYPx/IIwPSFTyJewLNRJCCLadNTfgEzAwt/Uoc=)
2: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: Bl6WywSHBT/Yd5Hz0Bvr9cz9M/uy/fHxxr3Xf/52km0=)
3: B313E8A9E464C3F7DE16EFE45069343A952B1AAA.crl (hash: E7JPRAjKN+NG/XIywpF7ia1qKKS/0K07caPzM1fcVqE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.crl
rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 07:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:8c:14:6b:2f:cc:bd:18:c0:a6:ac:de:48:f9:44:5a:95:d7:d2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B313E8A9E464C3F7DE16EFE45069343A952B1AAA
Validity
Not Before: Oct 26 06:50:25 2026 GMT
Not After : Oct 27 07:47:25 2026 GMT
Subject: CN=CA22E14E34AA981D17E02F96B4AE64D814413D3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:31:f7:23:df:6b:51:9c:c5:17:3b:1c:b8:
9e:36:a5:08:93:ac:2b:a8:73:c3:81:d2:61:35:73:
97:84:5d:eb:62:02:a6:9f:2b:e7:3f:77:35:f5:a9:
93:60:83:39:b3:c8:56:7e:ae:ce:c9:cb:f8:f5:24:
c2:5a:e1:74:cc:b6:4b:0e:14:79:7e:5c:3e:89:46:
cf:d7:fb:3f:48:53:86:97:70:bb:fa:4f:78:c5:8a:
b3:6f:03:89:b7:45:0a:d4:8f:37:dd:4b:a5:80:81:
29:85:1f:7a:4b:d6:9d:89:e7:a0:67:fa:3b:2c:5f:
e5:53:70:ef:1d:27:1c:dd:1a:41:3c:cc:91:81:bb:
da:15:a0:33:38:56:10:b1:67:cd:69:d1:cf:63:39:
3d:cd:05:3e:f0:8a:d1:c4:fa:ef:63:5a:a0:e0:b0:
2b:04:e5:e2:0a:c5:7b:18:40:21:55:cd:be:48:cf:
be:94:fa:33:c6:65:b7:45:13:4a:05:62:e3:7e:81:
2d:b7:b1:ab:88:10:8e:51:f7:33:48:81:0d:b0:3a:
32:09:e1:3e:30:44:d1:02:35:a0:08:b0:89:ec:4e:
24:da:79:ee:ab:e9:ff:7b:e4:79:a6:15:54:20:8f:
db:3d:75:a7:69:b9:0b:1a:9f:36:1b:7d:2a:e2:da:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:22:E1:4E:34:AA:98:1D:17:E0:2F:96:B4:AE:64:D8:14:41:3D:3A
X509v3 Authority Key Identifier:
keyid:B3:13:E8:A9:E4:64:C3:F7:DE:16:EF:E4:50:69:34:3A:95:2B:1A:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/B313E8A9E464C3F7DE16EFE45069343A952B1AAA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4e:78:55:59:8b:2a:d4:f6:3f:f5:d3:fd:72:02:55:46:e6:
43:08:1f:fa:02:98:82:94:49:d6:75:f8:83:0b:db:8b:71:eb:
2f:f1:b5:e8:14:cc:20:dd:0e:e8:f9:78:83:1e:d9:6f:9a:c6:
4e:7d:d9:bb:4b:30:31:cb:aa:69:f4:77:a7:b0:b9:20:22:3c:
68:05:0b:56:89:05:78:b2:ca:7c:d0:62:67:44:f1:0d:23:95:
73:fd:e1:de:52:82:b4:e9:c1:5f:d8:63:8d:5f:8e:f9:04:7a:
5f:7b:88:76:17:fe:6a:e5:6b:8c:a6:0a:2f:ee:d2:7a:79:57:
fc:41:23:ab:33:38:23:fa:63:7d:13:90:47:1a:de:bf:c3:e1:
47:4f:27:89:12:40:6d:ff:d3:9b:21:fa:a4:f6:60:40:12:f5:
df:68:1d:70:35:a9:15:d8:6e:96:fa:4d:4d:46:29:62:ef:58:
e8:5c:c2:6a:25:a9:38:97:e1:d4:9f:b4:18:9b:10:fb:99:99:
1d:80:d5:48:fe:e5:55:b8:8f:c3:74:e3:73:b4:01:9b:0c:71:
ed:61:57:0f:97:c8:f9:d4:53:35:3f:40:57:dd:b4:66:73:f6:
e1:12:b4:71:d7:45:5a:fa:d9:c7:9d:06:34:b9:5a:9f:0a:ab:
45:19:3f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:54:20 2026 by rpki-client