
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
File: B9E54455BBADEE4051F79D907B7453E95F13B467.mft (raw, json)
Hash identifier: 20VueMFjP8uxnPF4JOuG2igBcqJsgsflpux30IctFRo=
Subject key identifier: 5A:9A:8E:27:CB:6F:B4:46:17:20:3F:D2:D4:1C:78:59:FC:EE:10:6E
Authority key identifier: B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67
Certificate issuer: /CN=B9E54455BBADEE4051F79D907B7453E95F13B467
Certificate serial: 7BB543E586AC2E7AB900CC4245134ABC021C0901
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 04:33:21 +0000
Manifest this update: Wed 17 Jun 2026 04:28:21 +0000
Manifest next update: Thu 18 Jun 2026 08:11:21 +0000
Files and hashes: 1: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: /KOgzrDFq/tIyDOkqLi1nhsbulS+0UUYSYry8OoTmJg=)
2: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: Mm+87+26OdYLR0WzbeBFR1Yx08pPggtvOd7SnjyjkXk=)
3: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: 8BxjP7wp2ny7XMMIeYWn2YhapQVIdzgBdHrT8RAE1hI=)
4: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: wr2AUAIBj15wOmk+O8JERfUGMC5W1ujwy25yjBMhvGA=)
5: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: 7pPEEFuxF2xingEKFsHlopxNVPNMkufYI24t0NlMTEY=)
6: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: vFfmqz/S7K4aLguWPn5rp+ugEbZkxGvqsu4n1XKxUAg=)
7: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: 2snLe8yK3Bohn4tsm/dGVrhksjjX4tISeXo0oWw/2NQ=)
8: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: UedpVAHn21ooqLw8ovvpIgJ1soqSurJAxq23sQ+qlfw=)
9: B9E54455BBADEE4051F79D907B7453E95F13B467.crl (hash: y5UTmkmDga3rt+96IcsPVh+FYl5KNaH2nUZFz79dXh4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl
rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:b5:43:e5:86:ac:2e:7a:b9:00:cc:42:45:13:4a:bc:02:1c:09:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9E54455BBADEE4051F79D907B7453E95F13B467
Validity
Not Before: Jun 17 04:28:21 2026 GMT
Not After : Jun 18 08:11:21 2026 GMT
Subject: CN=5A9A8E27CB6FB44617203FD2D41C7859FCEE106E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:33:a6:40:18:86:99:75:ac:b4:ba:f7:0b:
d7:8a:e7:4a:cd:da:0a:bd:54:29:26:0a:4d:7e:c0:
50:92:d9:7f:82:74:ec:a4:58:af:7c:d1:8e:51:81:
d2:23:28:29:60:4d:23:d8:a8:ee:71:2d:b5:56:43:
69:a8:64:1b:d7:7b:87:01:49:bf:56:7e:3b:7e:86:
fe:f6:b9:c1:34:4c:d5:c3:45:2d:f6:7c:0c:60:99:
7b:27:d5:e8:86:d1:46:36:26:c8:6d:75:8a:fc:4f:
0a:9e:63:64:d7:43:0b:72:ff:3a:31:05:3c:6b:7f:
af:8f:3a:c1:3c:6f:fd:86:f4:e4:f1:d3:b1:a8:1a:
40:87:3c:66:4d:20:c1:66:54:36:32:ac:b1:cc:7d:
4a:f9:a8:11:c2:be:56:d8:39:b0:7c:90:d9:3a:02:
cb:13:6f:14:ad:26:57:c6:5f:e7:55:a1:73:35:82:
58:9c:0d:5f:d8:28:fe:e8:c3:2c:58:2f:3f:64:78:
ac:82:c1:e4:fe:f2:31:97:15:b6:ae:56:98:6a:65:
97:22:36:ea:ee:8a:ec:28:0a:c1:08:57:4c:e6:b2:
b8:19:a8:37:6c:67:07:ef:d5:92:80:31:e8:40:7c:
23:29:b6:b7:b0:02:58:7f:f0:f1:c6:19:32:da:54:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9A:8E:27:CB:6F:B4:46:17:20:3F:D2:D4:1C:78:59:FC:EE:10:6E
X509v3 Authority Key Identifier:
keyid:B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7a:7a:58:0f:35:3d:f6:8f:ca:7d:35:80:11:9a:90:53:36:
22:91:b7:f2:d2:d5:fd:96:76:b0:17:ba:47:07:34:11:5a:ad:
bf:c8:f6:5d:41:29:2a:54:63:d4:96:30:7d:e5:bb:05:54:d6:
6b:f0:2f:06:23:d6:65:58:a3:d3:c4:e1:2c:f3:07:86:e2:02:
ac:44:70:bc:f8:ae:76:76:01:1c:00:e2:16:82:6c:8f:6d:77:
f3:8c:66:4a:b6:f4:e0:bc:25:d2:22:10:24:5f:ab:5f:ce:58:
cc:04:1f:0b:70:3d:f7:a5:7e:da:f6:d4:c3:28:fb:00:e2:08:
a8:c2:00:d8:ed:82:d8:7c:78:19:d8:da:6c:fd:5d:dc:2b:30:
ce:8d:c7:a1:e6:4d:a5:23:c0:dc:f6:0d:53:7d:d7:9e:cb:6d:
67:4a:b9:0a:7d:fd:71:ec:d7:24:3f:d7:15:b4:54:cd:9f:e8:
fb:b6:65:3d:d1:04:80:c1:48:c6:e0:0a:52:71:10:ff:fe:bc:
dc:91:bb:d8:2d:9d:38:04:94:e3:29:34:c5:a0:76:87:b0:fa:
28:6e:52:bd:46:ad:05:ad:30:03:9c:a6:ac:7a:a4:64:59:d6:
5d:9c:ea:23:63:81:b9:c6:df:0b:07:59:6a:5f:c1:67:33:ba:
d2:1f:a9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:47 2026 by rpki-client