
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft
File: B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft (raw, json)
Hash identifier: scJgCFyrYUJYql6NhVComYdJ4jVsuIkOQ3t1Ayv2sNE=
Subject key identifier: 88:B8:6C:E0:A3:B7:B8:58:57:46:5F:2E:E7:06:96:62:FD:7C:84:D3
Authority key identifier: B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65
Certificate issuer: /CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865
Certificate serial: 4A683E370182C90AA842C1716126FA64302E26E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft
Manifest number: 3A
Signing time: Sun 14 Jun 2026 00:43:47 +0000
Manifest this update: Sun 14 Jun 2026 00:38:47 +0000
Manifest next update: Mon 15 Jun 2026 03:03:47 +0000
Files and hashes: 1: B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl (hash: rJLtA39BXHVPlMqohHfnZtMo5BQQ3ioGjTJwxFp64ms=)
2: 3131362e35382e3139342e302f32342d3234203d3e203338313534.roa (hash: 4hL7+e18qobBBQHbTnmFkA+ZM9pKWiAv/aAZLelInyQ=)
3: 3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (hash: +LPJ5wMBOnCiRiVVBw9/f075KEvSA/QkdJARXOeWxBI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl
rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 03:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:68:3e:37:01:82:c9:0a:a8:42:c1:71:61:26:fa:64:30:2e:26:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865
Validity
Not Before: Jun 14 00:38:47 2026 GMT
Not After : Jun 15 03:03:47 2026 GMT
Subject: CN=88B86CE0A3B7B85857465F2EE7069662FD7C84D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:c6:a6:cc:29:d5:47:48:4c:d2:84:97:d9:
5c:48:20:98:b7:83:dd:fe:f1:b7:32:1b:40:0a:fc:
84:bd:a3:1c:4a:72:96:fd:1b:6f:68:df:b1:1e:4d:
a3:82:84:53:1e:55:14:4b:d9:21:53:7f:35:12:6f:
72:a3:3c:fb:e8:ea:99:97:99:df:79:e7:c0:86:43:
46:f6:49:96:1d:fd:e3:be:06:86:ac:0d:1d:75:9d:
8b:83:95:ce:f0:7d:a9:ae:44:d4:36:aa:f9:a0:8c:
e8:76:89:68:92:18:be:17:de:00:d2:62:3a:b1:8f:
f1:dc:9b:3f:d1:20:93:42:3d:5c:df:07:ef:5b:31:
40:8b:98:e4:79:61:fe:5b:67:b8:0f:65:cc:0a:9b:
2f:a0:fa:7f:2c:86:bf:f6:af:11:5e:39:a9:fb:cf:
20:35:0e:d6:52:72:79:26:bc:de:5f:75:5e:f8:41:
1a:5f:6d:53:06:d1:b7:81:12:c2:90:cb:67:7d:10:
21:3e:3f:39:f7:11:87:d9:36:ff:d9:14:12:e8:6c:
99:70:e1:7d:a5:76:a9:30:64:16:10:b0:a3:e0:4d:
b1:18:9a:2b:de:47:79:78:7d:95:58:45:57:f6:05:
ea:cb:bf:ee:d5:94:b7:4f:26:67:63:bd:9b:7b:06:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B8:6C:E0:A3:B7:B8:58:57:46:5F:2E:E7:06:96:62:FD:7C:84:D3
X509v3 Authority Key Identifier:
keyid:B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e4:f2:24:87:9e:1f:b4:bd:b6:f3:ae:47:e2:38:26:49:12:
3b:c3:f0:ce:13:40:7d:6a:72:82:dc:c6:12:e0:ab:7e:92:06:
a7:a1:08:66:c3:6a:cb:6e:05:0a:c2:b8:de:5b:3c:40:16:fd:
61:d5:bc:a1:84:4a:78:96:d5:b7:33:d7:17:57:b6:65:6f:55:
45:48:52:24:95:a7:a4:df:1e:3a:be:90:cc:db:8c:76:67:0a:
97:b7:21:09:85:90:b9:54:1c:2d:8f:00:da:12:ec:aa:4c:59:
3c:6a:da:21:2d:55:01:cf:a7:3b:21:42:30:8d:b9:57:22:5d:
5c:c5:5a:7f:f5:dc:cb:74:d5:de:47:c8:cd:6b:af:23:d8:ad:
5b:1f:37:03:b4:14:90:49:8b:44:15:59:df:a7:92:f0:8a:5c:
f9:97:09:cc:56:dc:18:d7:d3:83:11:8b:02:09:1f:b5:1f:d5:
60:33:d9:2d:44:29:87:c2:9d:0b:1c:57:23:bd:dd:80:fd:df:
fc:a5:bb:c7:8e:13:db:5d:61:09:9b:6b:64:05:7e:31:2b:b2:
3e:95:f8:a6:7e:58:cc:38:f2:da:fa:fb:d7:ee:0a:b7:67:67:
f7:d5:35:80:2b:79:12:d4:8e:5d:2e:5c:92:4b:40:3d:ce:b7:
ba:e1:47:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:03:35 2026 by rpki-client