
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
File: B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft (raw, json)
Hash identifier: Riv8RyEeJV24fHYLJInNF4CQJd3ffTMjgbKVVSB/HnM=
Subject key identifier: 67:1A:30:36:E8:80:D5:69:BB:96:AA:DD:C1:5D:8A:06:C4:88:97:A7
Authority key identifier: B1:5D:91:00:DC:8B:30:29:A0:16:F5:09:C7:D3:DB:B1:84:80:5A:A1
Certificate issuer: /CN=B15D9100DC8B3029A016F509C7D3DBB184805AA1
Certificate serial: 1997177616B3EDB8C168DBA69FB14EC203FD7B24
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 14:42:14 +0000
Manifest this update: Wed 16 Sep 2026 14:37:14 +0000
Manifest next update: Thu 17 Sep 2026 17:56:14 +0000
Files and hashes: 1: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: hdJk3P7tUKxgaAbM7WQzserDmvKDtOC0Ipsv3OLAf5g=)
2: B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl (hash: g4rfxlPU3l4Dz/YCGJM8/eP+l97v8rfdtA3HP9pouZk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl
rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 17:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:97:17:76:16:b3:ed:b8:c1:68:db:a6:9f:b1:4e:c2:03:fd:7b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B15D9100DC8B3029A016F509C7D3DBB184805AA1
Validity
Not Before: Sep 16 14:37:14 2026 GMT
Not After : Sep 17 17:56:14 2026 GMT
Subject: CN=671A3036E880D569BB96AADDC15D8A06C48897A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:25:32:c6:0f:b1:24:f1:bf:68:5e:7f:13:2d:
a0:01:be:50:1d:39:1f:ff:bb:56:0b:87:79:01:d2:
10:ef:e3:c5:a3:a3:57:41:11:4a:c7:9b:ce:c8:0b:
6e:d8:77:5d:e2:2c:21:bc:de:a4:bc:f4:f1:aa:f2:
cf:ce:54:5c:9e:b1:d3:da:3d:e2:1b:14:3c:d6:74:
7e:a8:e6:71:fa:99:09:be:86:c8:84:61:0f:35:f6:
ef:7e:a7:10:c5:8f:b5:77:d6:3d:7e:fb:23:d2:fa:
67:1a:59:8f:67:a4:04:0d:ec:b9:b9:fa:31:6b:3c:
a4:8a:dd:a4:4c:31:c5:43:63:70:d7:8b:38:85:a1:
f9:58:1f:c3:34:dc:5e:a9:ab:f8:96:91:5e:06:a2:
de:da:97:e9:dc:2f:3a:57:28:43:ef:04:75:da:1c:
87:54:9d:40:dd:cc:1f:c7:91:c0:9c:d4:55:83:a1:
b8:b5:2f:d3:e7:3c:d4:89:3c:82:dc:33:5e:f2:31:
d0:79:7d:fd:03:43:bb:a3:fc:ac:54:fc:cf:3b:46:
a8:5f:71:22:aa:77:ff:3f:f3:ee:2e:ff:81:78:70:
1d:03:7a:31:dd:e3:50:79:7c:85:8f:3e:36:b6:4d:
f4:3e:ee:93:be:6e:da:e9:3c:fd:4f:a2:c6:fe:3b:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1A:30:36:E8:80:D5:69:BB:96:AA:DD:C1:5D:8A:06:C4:88:97:A7
X509v3 Authority Key Identifier:
keyid:B1:5D:91:00:DC:8B:30:29:A0:16:F5:09:C7:D3:DB:B1:84:80:5A:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b2:1c:18:5e:50:f6:e6:84:b2:00:57:d0:dd:4e:11:7e:3d:
39:d8:95:cf:a3:51:9b:22:fc:65:09:90:03:92:b8:9f:11:ac:
68:d1:18:5a:49:b6:e7:11:e9:24:ab:0e:12:bb:cc:e4:c1:10:
8f:e3:0b:91:12:15:62:99:2f:48:d0:5a:2a:fc:cc:6e:b7:60:
72:c4:b5:3b:34:41:e5:e7:27:0f:85:20:33:72:65:04:8b:9f:
25:88:58:29:92:bf:9a:68:69:73:d5:54:28:d7:16:28:57:97:
15:a4:95:ba:58:d9:1a:06:93:c2:26:ca:ac:30:60:8a:a4:68:
67:5f:00:68:d8:42:9f:e3:3d:4c:ea:f0:a2:d1:3d:9a:b4:3d:
ec:8c:f3:fc:c3:c8:87:7c:2d:cb:60:58:de:dd:41:1a:3a:7a:
50:ce:fc:93:66:d2:ae:f9:f5:a2:40:ec:dd:c2:43:a0:96:c4:
1d:c5:c8:04:10:7a:8f:50:6d:8c:37:76:53:d7:25:b7:3b:21:
60:96:96:79:f9:96:b7:cb:3c:9a:89:a8:88:58:56:a4:2d:ce:
9b:6d:8a:48:16:a4:ab:3b:d5:68:0e:60:4b:3b:37:1b:1c:70:
30:c8:b7:f5:66:26:22:b8:fd:77:2a:f8:4f:d4:2b:d2:c7:74:
d7:77:0f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:46:15 2026 by rpki-client