
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
File: B40CD5496E7464C3983177F65AD14F8974DC2A05.mft (raw, json)
Hash identifier: 9qToWKHSkY0ggqu0XRE8/DAUkejMOIjBnVUVQtjoiuE=
Subject key identifier: 72:2D:7C:06:01:BF:33:D2:AD:07:54:BB:05:96:59:16:27:6A:9B:02
Authority key identifier: B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05
Certificate issuer: /CN=B40CD5496E7464C3983177F65AD14F8974DC2A05
Certificate serial: 72BB81967FBEBA512A59909AA7B45BCF252B6D77
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 14:24:19 +0000
Manifest this update: Mon 21 Sep 2026 14:19:19 +0000
Manifest next update: Tue 22 Sep 2026 16:41:19 +0000
Files and hashes: 1: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: vEw+yqWgiaF2B5YQkQGDlRaQsJEuUjBPF8vceXJ1lPs=)
2: B40CD5496E7464C3983177F65AD14F8974DC2A05.crl (hash: wa5i+DsP1f3o4KbZDxN5I7cuOtL77K431G8ZugmYXHQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl
rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:bb:81:96:7f:be:ba:51:2a:59:90:9a:a7:b4:5b:cf:25:2b:6d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B40CD5496E7464C3983177F65AD14F8974DC2A05
Validity
Not Before: Sep 21 14:19:19 2026 GMT
Not After : Sep 22 16:41:19 2026 GMT
Subject: CN=722D7C0601BF33D2AD0754BB05965916276A9B02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:b6:44:4e:43:ef:f1:f5:6c:1a:b5:38:19:
c3:b6:33:0b:be:fd:02:b0:6d:99:32:e5:70:b3:19:
58:8a:12:d1:db:6a:5d:a8:72:78:8a:65:48:93:36:
95:59:e5:d8:ca:d4:a7:29:20:74:1b:7e:88:15:29:
ff:22:07:35:f2:84:f8:60:6f:b9:6d:c7:c4:01:5b:
06:6f:af:e3:62:03:fc:9a:d9:0f:97:a2:6e:8e:73:
ea:86:a2:de:b0:e5:bf:ea:02:eb:ac:1a:9e:ea:63:
f2:6e:2c:54:a9:de:14:32:14:2e:5b:f1:c6:3c:ca:
04:18:31:95:97:3c:f9:2d:30:0e:c3:f9:11:cc:d1:
40:5e:5f:64:68:8b:fa:19:aa:78:35:de:0b:ae:ef:
17:9f:62:26:1d:12:10:7e:d2:53:87:fb:8b:ed:d0:
f4:5e:ff:b2:10:d7:be:c6:f7:f7:08:ed:ec:ab:6f:
9c:e8:2a:ba:90:23:b3:1d:0b:c2:97:d8:9b:da:c5:
eb:ef:ba:36:f5:1d:79:2e:68:9d:84:1f:33:bf:95:
15:5d:7f:18:a6:5d:2f:3d:a6:60:71:20:3f:a0:76:
4e:21:5f:71:b9:84:63:f7:49:ba:4e:39:4c:2b:06:
97:b6:75:98:8b:11:2c:9a:03:7d:ca:a8:fb:54:0f:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2D:7C:06:01:BF:33:D2:AD:07:54:BB:05:96:59:16:27:6A:9B:02
X509v3 Authority Key Identifier:
keyid:B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:82:7d:1b:ea:dd:28:65:7e:dd:6e:5f:ee:0d:05:ca:8b:42:
af:50:37:21:f8:a2:80:6c:6b:49:b2:96:87:ea:f4:65:7f:2d:
c0:7a:b9:6a:e4:de:36:cf:06:54:ef:f4:75:eb:3c:e6:66:24:
6a:e9:00:b8:d2:a1:93:9c:d3:4e:38:61:ff:c8:ee:30:54:e7:
ec:21:05:0b:e8:08:e1:d7:9d:e1:dd:33:7d:21:78:cf:f7:46:
68:39:23:11:90:01:ef:ab:13:9c:6e:1e:02:25:0c:e0:79:53:
b6:95:3f:76:b2:1a:31:7e:2c:65:0a:b7:94:4c:c8:b4:39:c7:
b0:c0:80:98:89:97:c4:39:04:46:03:70:6b:98:95:76:60:0f:
0f:e5:ab:53:bf:c1:76:d4:b8:11:46:55:b6:11:69:c0:74:67:
19:54:75:9c:a2:b1:a1:d9:57:47:e5:89:ac:61:84:67:72:23:
e7:4c:25:f1:cf:2e:82:80:63:a3:b7:4f:1e:96:88:f5:cc:e9:
aa:29:e6:e0:20:bf:14:d5:4b:85:65:09:e1:f2:69:e7:c6:1b:
f4:de:e6:46:ca:3b:79:7e:b7:1f:0d:8a:61:61:dd:ed:8a:17:
fc:9d:f8:01:be:6c:33:d9:25:8f:a6:13:33:11:c2:f9:4c:3e:
5b:db:26:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:52:04 2026 by rpki-client