
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft
File: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft (raw, json)
Hash identifier: eHOYGRFMlNzrVJosart3pSHJq8pTKJa2MvZTo6ikzas=
Subject key identifier: BB:BB:E8:25:F8:41:E7:01:A1:48:65:42:34:14:66:73:CF:ED:44:6E
Authority key identifier: A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77
Certificate issuer: /CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977
Certificate serial: 11B12521CE9849EFA928B7CB037039CD9E0232A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft
Manifest number: 7B
Signing time: Sun 02 Aug 2026 19:05:36 +0000
Manifest this update: Sun 02 Aug 2026 19:00:36 +0000
Manifest next update: Mon 03 Aug 2026 23:02:36 +0000
Files and hashes: 1: A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl (hash: pryYAHt2iRLfPysppY8cfDah4VmpjtZScW7VmxT441Y=)
2: 3136302e32302e3235302e302f32342d3234203d3e20313532383132.roa (hash: TlXm5FUEfPUbwvDslESvInZ7QzJfvEoxUutevfTlhzM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl
rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 17:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b1:25:21:ce:98:49:ef:a9:28:b7:cb:03:70:39:cd:9e:02:32:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A376E2382C6AEA7FC6259501A72BF1CBC58DD977
Validity
Not Before: Aug 2 19:00:36 2026 GMT
Not After : Aug 3 23:02:36 2026 GMT
Subject: CN=BBBBE825F841E701A148654234146673CFED446E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:e0:b4:b2:da:21:fd:85:e5:e0:cc:3f:5f:
fa:7d:2a:6b:b0:b2:2f:91:90:af:e2:25:8a:2b:84:
6a:a9:a0:76:61:f4:a9:78:65:c4:2f:6b:41:c8:d6:
4c:e1:33:5d:61:ba:d3:85:2e:05:77:68:1b:74:d1:
2e:a3:97:94:1b:7e:e1:ce:28:a8:0d:05:60:c0:7f:
1c:a2:47:d9:b0:5a:eb:e0:da:26:43:74:97:23:bc:
23:3d:3e:30:eb:1c:2e:b5:64:fe:ff:2d:00:4d:42:
6a:e2:52:2b:6d:68:bf:2b:1d:4d:cf:cf:c3:28:52:
a1:26:97:dd:60:b6:f8:13:85:a4:25:8f:b5:18:8f:
3c:76:ea:3d:aa:82:a8:94:9e:99:af:4b:db:5d:7d:
a3:1c:b6:2b:9e:c4:1f:35:26:ce:a9:cb:48:1d:ac:
4c:df:d4:3b:b2:32:d1:9c:7f:6b:82:ab:f7:3b:87:
d1:b4:e5:ec:e1:5f:fb:5c:79:95:73:ec:e5:95:a3:
d5:77:5a:4a:38:3b:20:de:fa:a5:f8:ea:42:4f:15:
81:7e:37:14:9d:98:0f:f2:39:5e:a2:aa:39:d9:7b:
71:67:82:4b:d0:3d:12:49:4b:c5:1e:a6:c6:b6:1d:
e8:ff:8b:82:64:b2:f3:9a:90:4f:3b:db:02:9e:82:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BB:E8:25:F8:41:E7:01:A1:48:65:42:34:14:66:73:CF:ED:44:6E
X509v3 Authority Key Identifier:
keyid:A3:76:E2:38:2C:6A:EA:7F:C6:25:95:01:A7:2B:F1:CB:C5:8D:D9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bbed6dc4-d38b-44ba-9f0b-428455b276ee/0/A376E2382C6AEA7FC6259501A72BF1CBC58DD977.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:73:07:4c:39:00:c4:98:6b:75:d6:ab:56:01:9b:98:d4:ba:
ba:c1:e1:24:fb:71:88:fc:29:34:6a:6f:49:71:d7:94:6c:15:
fb:ac:d0:b2:48:f6:c8:d6:13:0f:90:e4:af:07:8e:73:d0:87:
69:db:84:3d:20:2c:fd:c0:a0:a0:e2:94:af:4f:b3:a6:5d:26:
ff:6a:7d:bf:e0:8c:d4:73:23:0b:9d:ab:b5:58:13:22:c1:c9:
50:99:c7:c6:e6:56:f5:0a:d4:c6:a4:fb:c9:b6:af:78:5c:eb:
3d:39:4f:19:ff:f6:6a:da:a3:c3:d4:4e:c3:28:f2:60:c7:a4:
9b:86:da:7c:08:9a:fb:ac:5f:e0:40:32:da:d1:9c:c0:0d:94:
a1:b2:bb:99:b4:e2:7e:40:23:98:97:d2:b8:36:a8:27:9b:a6:
08:a3:b9:17:e5:13:a3:7a:1e:9d:36:b9:29:8f:80:0d:9c:f3:
92:40:eb:b3:09:f9:69:0e:f0:53:fb:d7:e6:33:aa:a2:98:94:
1c:1f:16:a5:f1:1b:8a:e1:1c:1c:9d:45:12:29:08:d8:d6:28:
3b:10:54:1e:3f:6b:be:b8:38:1f:36:42:2d:aa:99:99:a8:5d:
65:7e:17:e7:5e:d0:7a:80:37:13:99:30:72:5e:93:22:14:b4:
c2:99:6a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:36 2026 by rpki-client