
$ rpki-client -vvf rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
File: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft (raw, json)
Hash identifier: ygt4WWd+afD+gIjpS8RbMDfgi97wB1exvUiWaNG0vFI=
Subject key identifier: 6C:A7:BA:56:FA:14:87:A7:00:E0:63:94:03:65:36:A3:B4:5F:3E:90
Authority key identifier: 0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F
Certificate issuer: /CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F
Certificate serial: 138D438CD4CCB780C1578C3A777DF85380C328FB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
Manifest number: 75
Signing time: Wed 29 Jul 2026 00:06:24 +0000
Manifest this update: Wed 29 Jul 2026 00:01:24 +0000
Manifest next update: Thu 30 Jul 2026 02:34:24 +0000
Files and hashes: 1: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl (hash: EWk06wT69BpIIjq0FlU9Ps4pbWm3n+qzF7eavC/3Vbo=)
2: 3130332e3136302e31352e302f32342d3234203d3e20313431363130.roa (hash: FeuEPBSyh4088t58wEF7WYPlFCQyhRPORfmVK/BUUf4=)
3: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: 6eZrQcS7fk+urKWjqhBrdX4ASTj5STJSLSE2pWSJoPQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl
rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:34:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:8d:43:8c:d4:cc:b7:80:c1:57:8c:3a:77:7d:f8:53:80:c3:28:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F
Validity
Not Before: Jul 29 00:01:24 2026 GMT
Not After : Jul 30 02:34:24 2026 GMT
Subject: CN=6CA7BA56FA1487A700E06394036536A3B45F3E90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:dd:24:dc:e4:74:a2:2b:7d:9c:7d:c3:d3:
a0:b7:c6:ca:c0:22:fb:6e:b8:88:bf:cf:be:f9:9c:
ae:31:4f:bf:71:6e:44:4b:28:2a:ce:cd:db:91:eb:
06:46:3d:da:d0:87:64:98:96:29:e8:d6:1a:6e:1e:
7e:ce:0e:6b:65:c3:fb:e2:c3:5d:59:9b:de:41:73:
ab:b4:7c:1a:f5:f2:48:16:b4:80:40:e9:e5:78:2d:
66:20:94:37:50:9d:33:8a:34:93:c7:f8:e1:c1:2b:
83:f6:55:26:14:c4:f5:42:bb:45:01:2c:96:5a:f0:
62:39:2c:cd:f4:a0:2f:5e:53:9a:0a:0c:f0:67:c4:
b8:fd:9a:ef:c8:e7:c5:74:07:4d:fd:7e:c4:21:8b:
ff:96:54:bf:e9:85:31:68:ee:30:fd:f0:74:c7:27:
15:b9:2e:18:aa:56:55:3d:b2:a5:d2:c9:1b:8b:1a:
c9:a6:5c:75:06:5d:f8:74:ea:4d:8d:77:93:47:dc:
32:ee:6e:18:7c:05:9e:d6:e6:bc:c7:80:96:7d:75:
55:0d:ef:00:d1:da:ac:2e:89:a2:d9:1f:d3:b8:4f:
8b:fc:c5:cc:32:cb:31:6e:6e:c1:17:8d:ab:11:ff:
28:e5:65:0e:f4:41:a5:61:89:ce:cf:a9:2c:c0:bb:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A7:BA:56:FA:14:87:A7:00:E0:63:94:03:65:36:A3:B4:5F:3E:90
X509v3 Authority Key Identifier:
keyid:0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f3:82:6e:28:45:58:8f:99:73:97:a4:f5:f9:00:03:f3:05:
94:66:1a:41:b4:3a:16:85:13:9d:fc:44:03:a4:46:41:6a:87:
22:2a:3f:4c:33:91:05:7c:48:64:b4:6d:1a:40:d7:21:54:53:
ca:3f:71:fc:4c:4d:6b:9b:ee:aa:33:40:02:5c:5a:66:82:7e:
ec:72:dd:6c:3e:13:f7:b9:cb:1b:65:42:a4:9f:6c:94:31:e0:
bc:3a:a6:19:97:c8:c0:b7:e2:b5:02:86:6d:be:81:c0:ee:38:
f7:3d:87:19:20:ad:28:1c:69:71:4f:7a:02:f9:21:86:14:1c:
03:7a:8a:b4:15:f0:6b:b1:51:b5:5b:a6:90:44:e1:59:ef:45:
ce:55:6f:04:d0:5c:91:c0:9c:51:6b:5f:bf:a0:0c:ca:93:bf:
50:98:67:c7:90:86:a9:61:9b:12:52:6b:e8:81:08:28:46:41:
f7:a1:02:43:3d:91:82:2b:4d:ef:22:46:3b:38:40:8f:2c:d8:
c1:d2:45:3e:6b:3f:73:5f:e5:e6:40:44:47:64:77:53:cc:3f:
1a:6e:40:d7:1b:51:52:d9:54:9a:c3:eb:be:0a:96:b6:b3:6b:
b9:19:4b:6a:d1:80:c4:39:be:8d:4a:d7:4f:c0:b0:e2:bf:94:
59:92:da:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:39:51 2026 by rpki-client