
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft
File: 01B748FE9E379A963DF80DAA39E554231A002AB4.mft (raw, json)
Hash identifier: oTYBB6hSmuVQh/0p3nnp2/D9jerL6jatVxp7t8Okm8s=
Subject key identifier: 6D:AE:78:CB:C6:96:69:FB:BA:F5:14:C2:F6:4D:23:82:88:5A:0C:EB
Authority key identifier: 01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4
Certificate issuer: /CN=01B748FE9E379A963DF80DAA39E554231A002AB4
Certificate serial: 4B5F9C664ED3951007A8980B4B209C1E5369D31C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft
Manifest number: BA
Signing time: Thu 17 Sep 2026 07:07:15 +0000
Manifest this update: Thu 17 Sep 2026 07:02:15 +0000
Manifest next update: Fri 18 Sep 2026 09:30:15 +0000
Files and hashes: 1: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (hash: OUi2dWqVUs4mn5PgnV5FjoZyNlm2gHfbdDmeMNM+lt0=)
2: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (hash: 5PA+RoFsU/KO7v+L0x7qbIvSiKy1qc9c1F5T1nVZmHM=)
3: 01B748FE9E379A963DF80DAA39E554231A002AB4.crl (hash: 1Av6Xzazobz50EWEHXAixgE39Podv1Kay8bkqtIQf8o=)
4: 3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa (hash: NB4ptyBbAbjhwyj4mleVlSYym5zGdWDUdcXFOkuUENA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.crl
rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:5f:9c:66:4e:d3:95:10:07:a8:98:0b:4b:20:9c:1e:53:69:d3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01B748FE9E379A963DF80DAA39E554231A002AB4
Validity
Not Before: Sep 17 07:02:15 2026 GMT
Not After : Sep 18 09:30:15 2026 GMT
Subject: CN=6DAE78CBC69669FBBAF514C2F64D2382885A0CEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:5d:dd:82:2f:01:34:1d:3d:7c:fe:84:20:
3e:31:83:09:82:3f:e8:01:17:fe:cf:e2:74:19:4d:
de:92:38:f5:75:d9:7e:8e:70:cc:fa:04:d7:70:e4:
6c:84:d8:ee:6d:26:49:c9:c7:fa:44:7f:8c:58:80:
b8:4b:68:d5:2c:3d:db:f9:a8:72:3d:ad:90:be:f2:
8c:4b:19:dd:5b:62:34:e5:da:e1:2c:88:82:b3:9e:
38:0c:e4:b7:06:6b:11:d7:3f:77:d2:5a:a5:de:66:
7a:3c:d2:47:e8:55:7b:e2:de:f2:2b:2a:9e:83:cf:
9b:de:98:d3:08:10:c7:e3:cb:31:dc:a4:4d:a3:80:
71:5f:27:fa:dc:a9:a8:8c:fa:98:5d:30:64:32:c4:
94:4e:dd:4a:c7:5d:69:17:52:11:5e:75:36:28:58:
91:80:95:69:5c:14:1c:57:92:49:e9:6d:c1:7c:34:
6a:af:3e:db:3a:11:16:1d:23:ae:49:70:2f:86:4d:
86:ee:3d:d2:6d:88:09:98:7d:7d:da:76:69:87:b4:
d6:dd:79:04:1f:71:00:c4:10:12:d3:6a:91:08:2b:
72:c7:f9:0a:a0:f9:bf:a7:32:27:26:dd:c8:d5:f9:
0f:8e:08:23:d7:54:c0:62:5a:c9:2c:7e:52:02:7b:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AE:78:CB:C6:96:69:FB:BA:F5:14:C2:F6:4D:23:82:88:5A:0C:EB
X509v3 Authority Key Identifier:
keyid:01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bf:b2:62:c2:93:36:64:d8:a6:fb:88:07:91:9b:da:04:9c:
ec:5e:e2:9b:2a:e1:13:90:99:d8:a2:42:c4:18:95:c9:ae:1d:
82:e5:61:a8:75:90:c7:29:15:56:49:4b:06:36:4a:68:83:5e:
60:4e:26:05:f1:09:fd:29:db:9c:d1:2c:ee:63:b7:97:74:62:
ca:75:c6:eb:b8:a5:ac:d5:10:97:aa:18:7f:14:1e:a3:a8:a8:
b8:23:2a:b9:1f:dd:33:01:39:e1:90:5e:f7:0d:b4:53:21:7a:
89:75:45:6c:fc:66:fc:e6:82:d9:3c:10:a9:da:57:99:29:8c:
9a:80:25:00:1d:1f:eb:4c:90:a3:91:07:07:cd:96:46:9a:c3:
bc:bf:a7:81:c8:e5:99:fe:22:10:76:80:26:f4:90:53:74:01:
8a:91:0b:dd:83:90:c1:4f:7c:b1:3e:70:5b:47:95:4e:8d:b8:
49:23:28:ba:09:c2:53:fd:8e:fc:80:17:06:98:4b:92:9d:d2:
0d:51:97:e0:60:29:8d:63:58:0f:91:73:49:ba:fc:9f:5d:0e:
2b:ed:3e:8d:52:ac:1e:3d:55:e0:c8:76:1e:8d:cf:96:96:87:
48:71:99:f7:ac:83:fd:b6:83:ac:4b:8a:1b:7f:76:dd:f5:76:
27:6f:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:31:02 2026 by rpki-client