
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
File: B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft (raw, json)
Hash identifier: Ypb1+YdDQw8VE4Jz6hU+AYl/mfZ+kgsKzTXYjQ23BZ0=
Subject key identifier: DB:FE:E6:5E:1A:C7:39:CD:03:B1:2F:FB:CF:7B:6C:6D:87:1D:45:4E
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Certificate issuer: /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial: 0459080B3BA2141841A80197A32ADA5A4C6F16F8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
Manifest number: 67
Signing time: Fri 17 Jul 2026 20:58:40 +0000
Manifest this update: Fri 17 Jul 2026 20:53:40 +0000
Manifest next update: Sat 18 Jul 2026 21:57:40 +0000
Files and hashes: 1: 32372e35342e3131362e302f32342d3234203d3e203538333936.roa (hash: ZPKZ4RD7GSqwYP85NHWWHCZsGyMBOdDBCWsoKc9qF38=)
2: 3130332e31312e3232322e302f32342d3234203d3e203538333936.roa (hash: Z0euP4Mz5azIXz2gQa7C76gHRFvS6x+UlkXhOokx2h4=)
3: 3130332e31312e32312e302f32342d3234203d3e203538333936.roa (hash: rQv5s8+gPpGYB/vGkK0E1KzGoHeIzauVQLPwV+zcAQU=)
4: 32372e35342e3131392e302f32342d3234203d3e203539313536.roa (hash: B3Wv1yk9eEsCJIJwAJYVc/XQpH6HREmcziLtKnlPPPk=)
5: 3130332e31362e3133392e302f32342d3234203d3e20313338303737.roa (hash: fb0u8nL2mSZSjhRNXrQKe5m4wVsqo96iE9FDTVCkkuc=)
6: 32372e35342e3131382e302f32342d3234203d3e203538333936.roa (hash: Xej95JrdMsifVKYujoAl0DIGRkayLR1TXbEVcv1ObYw=)
7: 3130332e31362e3133362e302f32342d3234203d3e20313338303737.roa (hash: gco5c7WXqpAUv26il0bYrypILflhue4cLfp0jrvC588=)
8: 3130332e3232352e3137322e302f32332d3233203d3e20313333333339.roa (hash: IexADjY/vH+ci1AK/jeAttZdrOIQ48kpykD2boWk1lE=)
9: 323430303a396338303a3a2f34382d3438203d3e203538333936.roa (hash: bZNkhO5s5ouIXjJKaQv8PKfJDr/H/AM1kyrDd0wlyM8=)
10: 3130332e32332e3134312e302f32342d3234203d3e203538343031.roa (hash: Vxo1SAebkkXkXHrkJyQxo/evf7z4vPT/u0wpK8ACYKQ=)
11: 32372e35342e3131372e302f32342d3234203d3e203538333936.roa (hash: 0Oh1NBqzZ3I6VHN6/EtyqgY+6ATqaMWE9Ah1ExUBh+k=)
12: B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl (hash: utNjjGuzIjinI5Fer95/9txHyUkK3+HyauoTUx1AyS8=)
13: 3130332e3232352e3137312e302f32342d3234203d3e20313333333339.roa (hash: HKtNGGIgOC9+B6KozAxjZkWtuOSi7Y4giMkSdFSsHeg=)
14: 3130332e31362e3133382e302f32342d3234203d3e20313338303737.roa (hash: xLR88IyMVCA8vdgyK8OQ+LkpI8JImP1CEA8k4aA9Syk=)
15: 323430303a396338303a38383a3a2f34382d3438203d3e203538333936.roa (hash: ofLAcZqnlKOmXqsmeIfCr72lWZy9ZeTWZkof0/9RVb8=)
16: 323430303a396338303a3a2f33322d3438203d3e203538333936.roa (hash: /ZR2Wmx8v5LSyzEH2Pl73ZaKPDz1ytePaIaN3xWd0I0=)
17: 323430303a396338303a313a3a2f34382d3438203d3e203538343031.roa (hash: tjiI+qv5K6jVgsJD0bWk0XAJK3Ch0HFCGyxU2fDhIKk=)
18: 323430303a396338303a3230303a3a2f34382d3438203d3e203538333936.roa (hash: sbLJ41IDFdN5IJsomNQRipWLxXGCHRyqteaWEwRsz7Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 20:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:59:08:0b:3b:a2:14:18:41:a8:01:97:a3:2a:da:5a:4c:6f:16:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Validity
Not Before: Jul 17 20:53:40 2026 GMT
Not After : Jul 18 21:57:40 2026 GMT
Subject: CN=DBFEE65E1AC739CD03B12FFBCF7B6C6D871D454E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:c5:a2:4b:de:05:bc:e7:86:fe:5a:d0:1a:
91:aa:f2:f5:70:5b:b4:32:29:b7:53:54:cf:8b:02:
72:e5:21:45:25:76:32:d1:0b:a1:5a:28:f1:f3:28:
60:cc:1d:9c:2f:93:f9:12:a5:0d:37:03:aa:06:0e:
0e:d5:2b:c2:98:e0:7e:4a:4c:06:e9:57:95:ca:29:
1b:c3:c0:d8:ae:3f:b9:86:68:b1:da:19:39:30:a1:
35:20:95:79:f5:5d:67:45:4e:41:15:0f:e9:6c:71:
19:50:f5:dc:5c:81:5c:15:d2:be:6c:25:50:f8:75:
7f:6a:69:6b:f2:ca:2a:49:94:16:88:4f:77:0f:38:
3b:bd:97:a2:1c:69:7e:e1:57:38:85:64:42:d7:be:
c3:83:c2:7a:2c:21:35:99:12:8c:d3:42:ad:fb:19:
24:ba:fc:8e:1a:e6:6c:d5:2e:d8:e1:14:6b:c3:2c:
ef:58:f8:46:c9:d3:b9:a9:11:71:cf:7d:21:6d:30:
ad:f2:29:0a:de:a9:fb:a2:06:49:cd:5f:c7:f4:5c:
a7:02:4f:b1:d8:4f:8a:c3:7e:08:be:1f:59:1b:a7:
4a:9f:08:c2:77:94:91:1f:eb:87:16:62:dc:15:cb:
f6:fb:fa:b6:fd:a1:d6:03:cb:4b:05:32:05:17:6d:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FE:E6:5E:1A:C7:39:CD:03:B1:2F:FB:CF:7B:6C:6D:87:1D:45:4E
X509v3 Authority Key Identifier:
keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fe:d8:16:e1:d0:58:e4:80:a3:3f:bf:b1:7f:bc:39:76:3a:
e3:3f:d4:38:03:9d:21:c8:cb:00:30:b3:b4:45:be:1a:a6:27:
f5:ed:73:2f:5c:bb:3c:3c:30:f4:7a:7b:05:4e:3d:6d:0b:55:
5c:a0:a9:8a:8a:db:74:c2:83:df:09:3d:b3:3b:1e:fb:56:7b:
d6:a1:6b:c1:13:41:60:ab:9e:1f:a8:99:cc:a5:02:56:ce:da:
c3:48:7b:e1:d1:61:e7:c9:e0:34:34:30:76:59:31:d7:2b:75:
1f:a8:42:b9:10:7d:cc:58:32:49:8f:31:cb:84:b9:5c:92:79:
4f:33:66:c9:e1:28:67:78:95:8a:7b:18:1c:86:66:e2:40:21:
51:1d:0d:d8:0a:e6:c8:9b:f3:be:63:82:48:44:8c:be:8f:a9:
52:44:89:03:3a:c3:b1:34:fe:0e:29:e5:ee:83:b0:bc:7b:bb:
c6:57:4e:34:cf:a9:cb:00:e9:52:f0:ec:d9:a8:cd:1a:79:d1:
32:4f:da:27:1e:7b:9e:6a:93:12:70:17:bd:f9:06:3c:c9:2f:
ac:a5:c9:05:9c:8e:da:a5:f3:5b:5f:81:28:bc:7a:49:ac:f8:
b6:c7:1c:2b:5f:c8:be:fc:8e:c7:9a:02:3b:1a:ea:32:01:52:
76:36:6b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 11:10:36 2026 by rpki-client