
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
File: B40CD5496E7464C3983177F65AD14F8974DC2A05.mft (raw, json)
Hash identifier: Yszd7/xi7R1NSFXFqy/3sGrAy1bJ64ESsTYBkazb+nA=
Subject key identifier: 82:6A:7E:2C:36:17:AD:BE:D9:76:F9:CA:88:E4:AA:D1:50:AA:94:0D
Authority key identifier: B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05
Certificate issuer: /CN=B40CD5496E7464C3983177F65AD14F8974DC2A05
Certificate serial: 78AE2B4C75125EE0F1DE79C428EDE132131977A0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 06:52:17 +0000
Manifest this update: Sat 13 Jun 2026 06:47:17 +0000
Manifest next update: Sun 14 Jun 2026 09:58:17 +0000
Files and hashes: 1: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: vEw+yqWgiaF2B5YQkQGDlRaQsJEuUjBPF8vceXJ1lPs=)
2: B40CD5496E7464C3983177F65AD14F8974DC2A05.crl (hash: spdNp/dxkT7dUdGqwZ4KuhcJWfwL8aiqY/sofc3jHmA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl
rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 09:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ae:2b:4c:75:12:5e:e0:f1:de:79:c4:28:ed:e1:32:13:19:77:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B40CD5496E7464C3983177F65AD14F8974DC2A05
Validity
Not Before: Jun 13 06:47:17 2026 GMT
Not After : Jun 14 09:58:17 2026 GMT
Subject: CN=826A7E2C3617ADBED976F9CA88E4AAD150AA940D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4e:83:f6:d8:75:80:b4:7e:b6:57:b5:28:11:
69:71:2e:b4:d0:2c:87:72:a2:35:99:c5:87:7a:de:
f4:a5:9a:d6:17:ca:c0:4c:64:48:f0:47:96:a3:9d:
a0:bd:09:50:ca:6e:8e:05:3e:10:d1:c4:37:5a:32:
cb:e8:56:94:79:83:14:9c:35:64:16:68:65:40:f8:
e9:57:9e:0f:ce:98:89:da:65:f9:66:f1:46:9d:e6:
d5:c0:4e:3b:2e:af:96:b5:e0:2f:4d:5f:33:c3:6a:
ac:c6:5c:fa:ad:22:8e:7b:ee:46:d4:dc:c5:61:9a:
23:88:65:6e:0c:da:6c:fa:b9:76:30:46:1b:84:59:
95:0e:38:f5:da:e0:23:cc:3b:1a:ca:00:08:32:79:
fb:c6:32:e5:28:e4:d9:18:00:fa:cc:67:77:6b:78:
39:aa:e5:1c:60:1d:4f:7d:78:51:c0:ac:d5:4d:04:
00:8b:f3:26:be:69:1d:e6:13:3f:b8:0d:8e:e1:79:
c4:4e:57:64:2d:82:10:be:64:86:8e:ab:09:b4:48:
92:2d:a6:7c:dc:a0:99:d4:62:ef:e2:4f:3a:51:e4:
da:31:9c:1a:da:f3:85:c5:bd:67:af:99:02:d8:d7:
86:f4:c9:fb:09:38:62:70:3f:5a:5c:ce:0d:3b:37:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6A:7E:2C:36:17:AD:BE:D9:76:F9:CA:88:E4:AA:D1:50:AA:94:0D
X509v3 Authority Key Identifier:
keyid:B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:79:20:33:8e:cd:da:e1:a9:5d:6a:bf:c2:9c:7b:74:90:a9:
5c:12:8b:6c:b7:22:33:6b:d2:c6:f3:b8:2e:73:67:33:85:17:
24:c4:e6:5e:2b:1f:90:12:98:b5:cc:0e:60:1a:0f:d4:16:1f:
40:cb:29:5c:f5:2e:1d:13:8b:d6:ce:91:78:46:06:3a:9d:73:
bb:ba:e6:ae:b5:e2:3b:f3:0d:0c:df:bc:86:da:25:bb:8e:bb:
ff:ea:63:ce:6c:b5:ef:6e:2c:d0:fc:ef:db:9a:dd:13:ec:22:
54:39:fe:00:7f:f4:ca:63:81:54:ce:ea:98:c7:a2:02:1b:68:
0e:14:6b:db:58:a7:39:0e:f1:07:9b:ee:15:0e:2a:97:0f:b6:
bb:15:21:4b:bd:5c:34:e4:b9:58:e2:50:a3:28:0f:0d:0b:b5:
b8:43:b6:b8:1f:e7:f4:43:e6:e8:00:2e:30:5f:94:97:07:bc:
f5:b9:23:85:20:3e:2d:c9:16:9e:fe:5c:e7:16:ae:4e:d7:ac:
d1:d3:91:ec:70:30:88:4d:4e:ec:db:96:37:3f:d2:4f:e2:48:
30:62:01:6b:b5:fe:16:f3:cd:e2:b5:61:34:b2:d3:e5:8e:a0:
55:dc:c5:60:35:48:33:49:21:70:28:ad:fe:9a:60:31:c3:b3:
c6:f5:91:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:33 2026 by rpki-client