
$ rpki-client -vvf rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft
File: 2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft (raw, json)
Hash identifier: GXrZcRtlQxJKcRWL5ik0b/W60zDdZVDB5Letk93aqqE=
Subject key identifier: 8C:EC:9F:59:9B:D6:C2:F0:47:3D:CF:B3:F2:E6:EE:8A:14:2C:A8:F6
Authority key identifier: 2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4
Certificate issuer: /CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4
Certificate serial: 4832E0754E62373912D3D6219591C1E95C3A2C22
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 09:10:01 +0000
Manifest this update: Sat 13 Jun 2026 09:05:01 +0000
Manifest next update: Sun 14 Jun 2026 12:38:01 +0000
Files and hashes: 1: 2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl (hash: Y2W4gteLsYz11TpVGmYUVH+BE70uLJntzEV9RiK4bqk=)
2: 3130332e3130302e39372e302f32342d3234203d3e20313336383338.roa (hash: SSJvSdL4NA21o/quBBkRYHXaBZlnNisf6npebpyix0w=)
3: 3130332e3130302e39392e302f32342d3234203d3e20313336383338.roa (hash: YEpJ9MshH91OnFv/znxkxIYveM8j2r6OPnOxKsElZA4=)
4: 3130332e3130302e39362e302f32342d3234203d3e20313336383338.roa (hash: F/SUGaqSrvN9l0bA+VVFhafqTQPYwg8gVdDw3HwYYEg=)
5: 3130332e3130302e39362e302f32322d3234203d3e20313336383338.roa (hash: I+MpxcufYeam5pksOgKwBNTewvekIqJYxt3l7XuR42Q=)
6: 3130332e3130302e39382e302f32342d3234203d3e20313336383338.roa (hash: cjqOi69hQ/DuVUUYy0IY+fZE1a6xIzJfgF06BFHgrL0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl
rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:32:e0:75:4e:62:37:39:12:d3:d6:21:95:91:c1:e9:5c:3a:2c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4
Validity
Not Before: Jun 13 09:05:01 2026 GMT
Not After : Jun 14 12:38:01 2026 GMT
Subject: CN=8CEC9F599BD6C2F0473DCFB3F2E6EE8A142CA8F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7e:51:d6:01:f8:83:0c:58:70:a9:73:89:31:
47:78:5c:93:56:30:c9:24:59:38:44:dc:85:e6:e7:
dc:a6:d8:8c:b2:6b:ab:f0:94:07:44:2b:2f:12:e5:
a3:fa:fd:c7:3b:20:b6:e9:75:3a:cb:bf:92:fa:97:
8c:29:26:89:8b:8b:e5:07:9d:89:ac:2f:fc:3c:a5:
7a:69:ec:64:7c:8f:5b:26:a7:58:c9:ed:2e:e5:01:
d9:5e:fe:58:08:bd:c0:3b:94:42:a7:59:0f:3b:2e:
dc:b3:fc:a8:d0:08:b4:77:85:c9:08:fa:de:97:9e:
78:b2:37:7a:45:c8:fb:2a:25:fb:0d:82:6f:67:ae:
1a:66:dd:85:0c:9d:ab:04:fa:7b:7e:ca:ed:75:51:
96:c2:09:c4:4e:19:59:a5:8a:cb:b0:9d:5e:7e:2e:
e9:be:40:88:17:1e:21:82:e6:22:df:50:ac:64:fd:
cf:73:43:c9:be:d4:f4:a6:78:f7:19:19:14:75:fa:
98:28:3e:80:1b:d2:bb:0c:2b:08:ba:59:b0:a8:a6:
a5:cf:f4:2e:da:25:12:0c:db:1c:76:f1:ca:09:75:
bb:b0:bd:f3:a8:3c:8b:c1:bc:4a:42:c7:ec:e7:6b:
3c:de:39:ee:b7:9b:43:dd:f9:3a:88:3e:c9:4d:4d:
dc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EC:9F:59:9B:D6:C2:F0:47:3D:CF:B3:F2:E6:EE:8A:14:2C:A8:F6
X509v3 Authority Key Identifier:
keyid:2B:5A:07:8B:9D:8A:31:7D:A7:A2:AD:40:20:90:C9:AE:72:A1:D0:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13d80643-d5e9-41af-94df-6d94fbf46487/0/2B5A078B9D8A317DA7A2AD402090C9AE72A1D0F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3b:00:c4:17:1b:2b:f7:4b:c4:61:66:4d:eb:3b:f0:25:23:
4b:f5:de:5d:1c:02:95:7b:08:f1:d6:df:34:a3:62:3a:28:fb:
0d:62:24:65:bb:18:04:36:0d:cb:ca:a5:6e:19:48:77:14:91:
c3:28:e4:49:e7:4f:76:32:f6:6a:1b:fc:2a:34:6e:49:6d:58:
ae:b5:ff:37:7c:5f:4a:f6:05:8b:82:31:1c:07:2a:52:f9:22:
38:bd:13:6f:c1:75:70:18:9d:64:17:0a:fd:c4:b2:16:37:07:
fc:33:28:05:8d:cd:cf:cb:f0:83:a2:96:cd:db:57:78:fd:29:
88:7c:71:b0:1e:f9:f2:b4:29:d3:d0:35:68:6a:be:94:48:81:
a4:bb:0f:2e:c2:ed:7d:05:d0:81:6d:85:c7:18:0e:83:39:27:
3b:ef:62:b0:15:70:2e:a8:28:01:1e:ef:22:74:0e:4e:ad:37:
63:53:7f:ac:1f:0a:41:bb:ee:04:d2:fe:aa:6a:65:95:1a:39:
91:f3:0f:6a:46:5e:05:dd:24:c9:5e:3f:57:31:f5:75:bd:a4:
02:35:67:fd:4c:aa:87:14:01:80:71:8c:8c:77:06:06:01:44:
eb:4f:1b:87:75:4c:a6:7b:28:f5:a3:68:dc:78:68:e9:71:21:
31:e6:58:d3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSDLgdU5iNzkS09YhlZHB6Vw6LCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI1QTA3OEI5RDhBMzE3REE3QTJBRDQwMjA5MEM5QUU3
MkExRDBGNDAeFw0yNjA2MTMwOTA1MDFaFw0yNjA2MTQxMjM4MDFaMDMxMTAvBgNV
BAMTKDhDRUM5RjU5OUJENkMyRjA0NzNEQ0ZCM0YyRTZFRThBMTQyQ0E4RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiflHWAfiDDFhwqXOJMUd4XJNW
MMkkWThE3IXm59ym2Iyya6vwlAdEKy8S5aP6/cc7ILbpdTrLv5L6l4wpJomLi+UH
nYmsL/w8pXpp7GR8j1smp1jJ7S7lAdle/lgIvcA7lEKnWQ87Ltyz/KjQCLR3hckI
+t6XnniyN3pFyPsqJfsNgm9nrhpm3YUMnasE+nt+yu11UZbCCcROGVmlisuwnV5+
Lum+QIgXHiGC5iLfUKxk/c9zQ8m+1PSmePcZGRR1+pgoPoAb0rsMKwi6WbCopqXP
9C7aJRIM2xx28coJdbuwvfOoPIvBvEpCx+znazzeOe63m0Pd+TqIPslNTdz5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjOyfWZvWwvBHPc+z8ubuihQsqPYwHwYDVR0j
BBgwFoAUK1oHi52KMX2noq1AIJDJrnKh0PQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTNkODA2NDMtZDVlOS00MWFmLTk0ZGYtNmQ5NGZiZjQ2NDg3LzAvMkI1QTA3OEI5
RDhBMzE3REE3QTJBRDQwMjA5MEM5QUU3MkExRDBGNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQjVBMDc4QjlEOEEzMTdEQTdBMkFENDAyMDkwQzlBRTcyQTFE
MEY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTNkODA2NDMtZDVlOS00MWFmLTk0
ZGYtNmQ5NGZiZjQ2NDg3LzAvMkI1QTA3OEI5RDhBMzE3REE3QTJBRDQwMjA5MEM5
QUU3MkExRDBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAF87AMQXGyv3S8RhZk3rO/AlI0v13l0cApV7
CPHW3zSjYjoo+w1iJGW7GAQ2DcvKpW4ZSHcUkcMo5EnnT3Yy9mob/Co0bkltWK61
/zd8X0r2BYuCMRwHKlL5Iji9E2/BdXAYnWQXCv3EshY3B/wzKAWNzc/L8IOils3b
V3j9KYh8cbAe+fK0KdPQNWhqvpRIgaS7Dy7C7X0F0IFthccYDoM5JzvvYrAVcC6o
KAEe7yJ0Dk6tN2NTf6wfCkG77gTS/qpqZZUaOZHzD2pGXgXdJMleP1cx9XW9pAI1
Z/1MqocUAYBxjIx3BgYBROtPG4d1TKZ7KPWjaNx4aOlxITHmWNM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:25 2026 by rpki-client