
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
File: B40CD5496E7464C3983177F65AD14F8974DC2A05.mft (raw, json)
Hash identifier: NkkYOHw9A15Xus8qXcSqhkwClNobCuQ+3nw0DENXL/g=
Subject key identifier: BF:E2:A4:9C:3B:76:8C:4F:F9:FF:1C:89:43:AC:24:41:E1:F4:48:99
Authority key identifier: B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05
Certificate issuer: /CN=B40CD5496E7464C3983177F65AD14F8974DC2A05
Certificate serial: 3C04801078051928F53737C596F3A7D99BC8B9D2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 23:45:52 +0000
Manifest this update: Tue 28 Jul 2026 23:40:52 +0000
Manifest next update: Thu 30 Jul 2026 01:40:52 +0000
Files and hashes: 1: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: vEw+yqWgiaF2B5YQkQGDlRaQsJEuUjBPF8vceXJ1lPs=)
2: B40CD5496E7464C3983177F65AD14F8974DC2A05.crl (hash: 9JX8DiQiYsL1QIKKnlpmbucbG0hAcj4zJPRPO3PR+lo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl
rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:40:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:04:80:10:78:05:19:28:f5:37:37:c5:96:f3:a7:d9:9b:c8:b9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B40CD5496E7464C3983177F65AD14F8974DC2A05
Validity
Not Before: Jul 28 23:40:52 2026 GMT
Not After : Jul 30 01:40:52 2026 GMT
Subject: CN=BFE2A49C3B768C4FF9FF1C8943AC2441E1F44899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:e4:1d:f9:17:65:bc:f9:02:64:54:cc:ea:
1f:f3:23:d8:ce:d1:b2:64:27:a9:3f:55:b3:e9:21:
60:c8:82:58:e6:4a:a2:1c:07:fa:a8:4c:52:9a:67:
44:59:a6:79:bd:f4:72:1e:4a:c6:52:d7:88:b2:66:
54:24:6c:ff:98:53:cc:c7:5a:bf:7d:ce:44:88:1f:
9e:31:ad:3b:cf:f1:c7:47:75:4d:57:62:b8:57:1b:
7a:ad:e4:0d:d2:48:89:a4:26:d5:77:76:e7:ed:bd:
1e:3c:de:3d:aa:cd:03:bf:43:61:2e:06:a0:b1:ed:
3c:b5:9b:4d:23:a3:45:e4:e9:5b:14:48:64:10:f6:
9c:37:64:fc:4b:9c:b4:0b:c0:c2:6b:c0:08:68:86:
50:6f:71:a1:22:b9:e2:76:bf:d9:ef:54:60:24:74:
dd:8f:35:c4:66:b2:38:4c:17:7e:52:9d:26:0c:8b:
11:52:c6:51:3a:b8:e4:24:59:22:75:d6:1d:2b:62:
c2:a1:37:a5:80:a2:9f:86:15:34:0b:b9:17:51:e0:
82:53:4a:f4:f8:9e:68:7a:c2:54:bd:f4:b1:08:73:
ce:23:87:e9:96:c9:cc:23:09:b6:d9:0c:41:21:42:
0d:f1:a1:69:2c:4d:4d:50:ca:cd:1f:06:b9:89:17:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E2:A4:9C:3B:76:8C:4F:F9:FF:1C:89:43:AC:24:41:E1:F4:48:99
X509v3 Authority Key Identifier:
keyid:B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:74:79:27:73:3d:33:c8:e6:de:40:88:00:0d:66:e2:4e:19:
3b:ac:c6:2e:27:50:96:93:a9:56:3f:7b:20:7e:ec:24:7f:7c:
db:36:6b:4b:84:24:fa:17:e5:cb:14:f5:8d:46:f5:4a:a4:24:
d3:b6:e7:11:80:ad:5f:ca:6e:43:68:3f:05:2e:a5:35:55:ad:
e3:2a:20:61:4d:f1:03:52:97:a0:50:f7:b4:fa:05:2e:61:c2:
2d:a7:33:ef:78:e5:b7:fd:fe:44:d3:bf:ee:58:26:80:d2:c6:
bf:86:0b:c0:ff:cd:41:ad:3a:33:82:c3:a3:e8:aa:f5:ec:b0:
3b:6a:1a:b7:60:09:7e:b1:48:c5:6f:e3:9c:52:14:b4:20:f5:
00:cd:59:47:ff:b2:f5:52:32:3b:bb:d2:8c:4e:67:28:c9:69:
5e:d4:a5:2f:ac:b8:40:be:71:ff:9d:42:23:db:20:96:99:f8:
82:c2:04:28:a2:db:91:82:74:f6:7e:b4:9a:85:ed:10:6e:bc:
c0:26:c8:90:96:d3:d7:e4:d8:fb:6f:35:da:81:65:06:d8:62:
80:ee:7f:66:07:cb:73:ed:74:10:d9:b9:b2:88:30:e2:f4:d2:
d2:d2:d1:b9:f3:ff:e5:9b:cc:ef:e4:32:ed:75:62:3b:4f:34:
56:c9:8e:2d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPASAEHgFGSj1NzfFlvOn2ZvIudIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQwQ0Q1NDk2RTc0NjRDMzk4MzE3N0Y2NUFEMTRGODk3
NERDMkEwNTAeFw0yNjA3MjgyMzQwNTJaFw0yNjA3MzAwMTQwNTJaMDMxMTAvBgNV
BAMTKEJGRTJBNDlDM0I3NjhDNEZGOUZGMUM4OTQzQUMyNDQxRTFGNDQ4OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEveQd+RdlvPkCZFTM6h/zI9jO
0bJkJ6k/VbPpIWDIgljmSqIcB/qoTFKaZ0RZpnm99HIeSsZS14iyZlQkbP+YU8zH
Wr99zkSIH54xrTvP8cdHdU1XYrhXG3qt5A3SSImkJtV3duftvR483j2qzQO/Q2Eu
BqCx7Ty1m00jo0Xk6VsUSGQQ9pw3ZPxLnLQLwMJrwAhohlBvcaEiueJ2v9nvVGAk
dN2PNcRmsjhMF35SnSYMixFSxlE6uOQkWSJ11h0rYsKhN6WAop+GFTQLuRdR4IJT
SvT4nmh6wlS99LEIc84jh+mWycwjCbbZDEEhQg3xoWksTU1Qys0fBrmJF93TAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUv+KknDt2jE/5/xyJQ6wkQeH0SJkwHwYDVR0j
BBgwFoAUtAzVSW50ZMOYMXf2WtFPiXTcKgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2Y2ZWEyMjEtNzdiNy00NzkxLWE4YTgtYjUxNjRiMDBmMWM1LzAvQjQwQ0Q1NDk2
RTc0NjRDMzk4MzE3N0Y2NUFEMTRGODk3NERDMkEwNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNDBDRDU0OTZFNzQ2NEMzOTgzMTc3RjY1QUQxNEY4OTc0REMy
QTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4
YTgtYjUxNjRiMDBmMWM1LzAvQjQwQ0Q1NDk2RTc0NjRDMzk4MzE3N0Y2NUFEMTRG
ODk3NERDMkEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJd0eSdzPTPI5t5AiAANZuJOGTusxi4nUJaT
qVY/eyB+7CR/fNs2a0uEJPoX5csU9Y1G9UqkJNO25xGArV/KbkNoPwUupTVVreMq
IGFN8QNSl6BQ97T6BS5hwi2nM+945bf9/kTTv+5YJoDSxr+GC8D/zUGtOjOCw6Po
qvXssDtqGrdgCX6xSMVv45xSFLQg9QDNWUf/svVSMju70oxOZyjJaV7UpS+suEC+
cf+dQiPbIJaZ+ILCBCii25GCdPZ+tJqF7RBuvMAmyJCW09fk2PtvNdqBZQbYYoDu
f2YHy3PtdBDZubKIMOL00tLS0bnz/+WbzO/kMu11YjtPNFbJji0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:11:35 2026 by rpki-client