
$ rpki-client -vvf rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
File: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft (raw, json)
Hash identifier: ZCaFSlHCDt86YbzlWT61yRM2y7p1ZEkTuH1tJt3Zl5I=
Subject key identifier: 91:B1:36:2F:DB:A6:8A:3B:9F:19:EC:64:26:6D:48:6A:37:68:85:E4
Authority key identifier: 0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F
Certificate issuer: /CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F
Certificate serial: 046556C4053EF86CA52EA9BE386501E5358AB807
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 19:02:27 +0000
Manifest this update: Sat 13 Jun 2026 18:57:27 +0000
Manifest next update: Sun 14 Jun 2026 21:05:27 +0000
Files and hashes: 1: 3130332e3136302e31352e302f32342d3234203d3e20313431363130.roa (hash: FeuEPBSyh4088t58wEF7WYPlFCQyhRPORfmVK/BUUf4=)
2: 0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl (hash: 5bQA1gFsDNPR5xd7s+9DVJTiMFROaPnsSByHkzwJ/8g=)
3: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: 6eZrQcS7fk+urKWjqhBrdX4ASTj5STJSLSE2pWSJoPQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl
rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:65:56:c4:05:3e:f8:6c:a5:2e:a9:be:38:65:01:e5:35:8a:b8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F
Validity
Not Before: Jun 13 18:57:27 2026 GMT
Not After : Jun 14 21:05:27 2026 GMT
Subject: CN=91B1362FDBA68A3B9F19EC64266D486A376885E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:4f:9b:c6:4b:0a:34:78:a1:b0:d4:f1:d3:
30:f9:15:3e:c7:ef:c8:68:79:1b:c9:c1:18:b2:d2:
40:50:3b:55:89:19:35:cf:36:cc:47:fa:f4:29:cb:
6a:24:61:d5:4b:3b:cd:5d:bc:c8:74:f1:48:1d:ff:
ce:38:02:bf:5e:df:c2:f1:cb:87:70:3d:77:84:ed:
ae:ed:67:59:83:04:2d:84:f4:46:ef:a2:fe:1b:01:
a0:e5:3c:b4:43:9d:5c:a0:57:86:0d:fe:28:56:d4:
52:59:29:d6:1e:b1:f9:b2:8d:67:11:ca:51:79:ee:
e1:8c:81:61:35:31:eb:75:2d:36:22:af:fa:40:33:
d0:09:b6:dc:09:53:8c:82:b1:de:2c:18:93:5e:e3:
8b:d0:9a:0b:e6:3f:3e:0b:40:de:4a:35:c4:63:05:
8b:15:57:10:8d:a2:c2:61:78:4c:14:ec:c2:bd:9b:
53:7c:bb:67:de:31:96:cc:bd:70:b4:ba:18:b3:2a:
e2:31:95:53:63:a5:da:14:dc:61:35:4f:f8:de:7b:
c4:1e:04:c9:7c:5b:da:0e:0d:81:e7:fc:e2:40:47:
68:48:1b:7e:da:9e:cf:0f:e6:ae:54:a3:64:a8:1a:
2a:72:f3:8a:55:4e:3b:2d:81:4d:9b:44:a0:9a:66:
3b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B1:36:2F:DB:A6:8A:3B:9F:19:EC:64:26:6D:48:6A:37:68:85:E4
X509v3 Authority Key Identifier:
keyid:0B:D4:E0:05:E4:D9:75:2F:A1:BC:4F:52:AE:F5:C8:07:5B:FB:9A:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/0BD4E005E4D9752FA1BC4F52AEF5C8075BFB9A0F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e3:2b:b8:c6:54:a6:fb:f8:1a:5f:ad:25:d8:32:16:8f:87:
4e:e1:ca:14:24:3e:d7:44:df:3b:46:0b:48:75:3c:a8:12:b8:
42:4f:0d:9d:1b:4e:5c:9d:c1:5f:34:cd:da:75:61:fc:9a:c1:
23:d9:36:90:76:3f:7c:0f:04:78:ea:2e:74:89:9a:0d:95:a4:
bc:f7:6d:0a:fa:03:9a:11:37:61:8c:5e:f7:2d:89:b8:53:f6:
42:ab:69:97:c2:c7:53:f1:e8:94:2b:c2:ca:cd:5f:e0:93:f5:
8b:ef:3e:4c:75:9b:65:55:4b:43:fc:f1:eb:9d:df:04:fa:6e:
1e:7d:2e:99:41:96:ca:2a:f3:fa:f1:5f:8a:6e:e4:ad:0a:5c:
a4:3e:6c:fe:01:6a:f3:8f:41:0e:c2:93:68:46:d0:9c:23:a0:
6e:23:8a:25:e6:4e:99:21:0e:9d:77:d1:f5:e5:07:e9:17:83:
27:ac:4f:27:a2:24:9b:6c:3c:cf:43:e9:15:76:3e:44:d0:49:
e5:c9:86:10:c3:17:37:56:fd:23:e2:48:ed:dd:90:09:44:97:
36:4c:a6:28:66:95:ec:df:58:17:8b:b7:9d:35:88:69:c3:49:
45:72:a7:c5:1e:67:d5:c5:e5:cc:30:81:28:3f:21:5f:6e:99:
10:d5:13:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:24 2026 by rpki-client