
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
File: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft (raw, json)
Hash identifier: O4vWGKdVV6GUxAW7tS2Xd9TI3RILnvOz/92dG9ec/G4=
Subject key identifier: 25:06:00:71:8D:71:51:0B:94:ED:7C:58:59:B8:3D:CA:93:16:C6:26
Authority key identifier: B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF
Certificate issuer: /CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF
Certificate serial: 077E0F4325A2BB0D1093D28A8D77EE0040EB715F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 21:28:11 +0000
Manifest this update: Mon 21 Sep 2026 21:23:11 +0000
Manifest next update: Tue 22 Sep 2026 22:42:11 +0000
Files and hashes: 1: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: ArAw1U/ObqC6nylMjrPDR+er3LEvT016ghjJZD3baiw=)
2: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl (hash: t1W6VUNTd9cTHyzwM7YRAbXs9oCBoOGzkiBfN/cKZVQ=)
3: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: vO+Q8HZjgmJonBgHOxFWAnJzI9j2ku3exsOHuLSofhs=)
4: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: r+nuLztYujAHMA3h3J8e3UnpoppY1KFa5/V4VYVp7Wg=)
5: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: JbJvmvToLRsj/pbiH1e96nax2mjHa9GpGHMhuuSXERU=)
6: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: rh10KjKVWoQwoKdQAU/xuosvzsdN9Rw59HlxfUxCKPU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl
rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 22:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:7e:0f:43:25:a2:bb:0d:10:93:d2:8a:8d:77:ee:00:40:eb:71:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF
Validity
Not Before: Sep 21 21:23:11 2026 GMT
Not After : Sep 22 22:42:11 2026 GMT
Subject: CN=250600718D71510B94ED7C5859B83DCA9316C626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:6e:dd:76:84:44:31:a8:22:4f:2a:3d:13:
11:b5:9a:2d:03:7a:2b:27:4a:5d:77:06:a0:b7:9f:
6f:a3:c5:00:14:0b:26:ef:b2:a9:a3:cd:c7:3a:b7:
27:17:bd:22:69:c1:c8:30:ad:79:da:c0:fd:0c:cb:
86:bc:c2:e9:24:94:c9:45:b0:05:e6:a2:ca:3c:4d:
78:fc:51:de:e4:dc:bb:c5:c2:45:e3:48:54:81:c0:
b3:1e:c8:92:e4:d7:df:d1:d5:8a:d3:89:77:fb:61:
d3:d9:e6:80:82:c6:38:cd:25:54:6a:5c:75:c8:c8:
de:18:cf:fc:cb:48:36:76:3b:3a:02:f4:4c:d6:c5:
b5:35:69:fb:68:e3:02:e0:56:f4:4c:68:a3:42:4e:
f8:df:7e:3b:60:61:5b:a7:2c:db:f6:ee:00:5d:4a:
8e:85:7b:aa:8b:13:ff:57:e1:22:0c:01:a7:17:a1:
06:2e:83:a3:1a:fd:77:da:23:62:fe:2b:fc:5e:cf:
f2:cb:ad:5e:2c:f3:94:df:7c:57:6e:bf:21:9c:cf:
e2:8e:5f:9e:95:46:78:e4:eb:f2:80:37:fa:95:ba:
dc:f4:40:9f:7d:f3:bd:e6:77:4c:f7:1c:40:54:b2:
87:1a:b6:57:d3:0d:18:da:6e:60:61:49:6d:2c:f5:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:06:00:71:8D:71:51:0B:94:ED:7C:58:59:B8:3D:CA:93:16:C6:26
X509v3 Authority Key Identifier:
keyid:B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a2:e6:28:af:14:e1:0d:39:92:8c:23:7d:98:eb:9a:03:61:
e4:40:bd:c8:39:ad:fa:2f:c9:fa:70:b7:e2:e8:94:c3:67:ac:
b4:0b:09:b7:c2:e3:e6:de:32:07:ae:d7:36:73:5f:e8:c3:b9:
81:b9:e5:bc:d6:81:2a:54:a6:72:6b:7f:e5:42:f0:81:6f:c3:
a9:46:57:fd:d0:b0:8a:61:f4:3d:54:b2:1d:ba:b1:0e:e2:5d:
33:52:32:88:79:2a:94:a4:5d:ef:d9:72:9f:b1:44:0f:3d:1a:
ee:7a:73:e7:da:6b:8f:18:f3:23:b5:54:46:6e:40:ea:74:79:
da:66:3f:5b:82:77:4f:ec:40:09:8d:e4:ec:04:d6:96:f3:14:
2c:81:0c:01:a8:f7:70:ee:81:84:86:df:71:77:db:63:49:ea:
5a:69:01:1e:fd:0f:30:9b:51:a5:74:52:47:82:db:31:ac:a5:
e4:6b:ab:9c:6f:65:40:dc:ba:6c:d8:de:70:e5:32:82:6a:e7:
0c:c8:ba:d1:a9:11:f0:20:6d:e3:e0:97:d4:5e:23:6d:96:19:
95:6e:15:76:88:18:74:72:70:9b:76:bb:81:c0:5c:5a:56:1d:
63:3a:90:8b:9b:f5:42:df:f8:fc:6d:bf:4b:bb:18:59:04:44:
9d:c8:1d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:21:03 2026 by rpki-client