
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
File: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft (raw, json)
Hash identifier: KpQrwzbBNOuRhYRdsx3S7ta0xLcyjcOUWqwshY2X2Fc=
Subject key identifier: 40:9C:B5:F9:0E:0F:2D:ED:CF:49:1D:99:EB:58:13:4B:02:9C:26:BE
Authority key identifier: B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30
Certificate issuer: /CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230
Certificate serial: 03FC5254037B1A5CAD17E394A45987A6338B794A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
Manifest number: BF
Signing time: Tue 22 Sep 2026 04:01:29 +0000
Manifest this update: Tue 22 Sep 2026 03:56:29 +0000
Manifest next update: Wed 23 Sep 2026 04:10:29 +0000
Files and hashes: 1: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl (hash: v/u3fmApAy1z8EJvCDMPPfVcJuY0Sj5CmvBNP2Qfkhw=)
2: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: BKnEE3t5/yyaN3HJnwE9Dy+SO+1ms0WO08R6OxZOm7o=)
3: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Gy6gsEzVMHwZHSwsQeHdnkzzEfB+MjqsZcuu2XFRbNQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl
rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 04:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:fc:52:54:03:7b:1a:5c:ad:17:e3:94:a4:59:87:a6:33:8b:79:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230
Validity
Not Before: Sep 22 03:56:29 2026 GMT
Not After : Sep 23 04:10:29 2026 GMT
Subject: CN=409CB5F90E0F2DEDCF491D99EB58134B029C26BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f5:02:84:f1:58:96:6d:23:65:aa:49:09:7f:
6c:de:4d:61:dc:6e:be:ec:67:2e:d8:05:45:8b:fc:
ab:88:1c:10:4d:d4:dc:d4:a1:c6:36:19:d1:08:cd:
8f:02:ef:d8:18:f1:0c:c9:54:0b:9f:e6:fe:e0:f3:
be:74:dc:79:84:33:a1:5e:8b:9e:2a:e4:dc:8e:2d:
3a:b1:76:63:d2:ce:43:7a:1c:1f:3b:0f:25:18:a9:
da:32:d1:1a:a6:e5:1e:dc:b2:58:f5:75:9b:39:10:
9d:b2:8b:7f:60:ff:e9:6e:8a:b2:ae:58:e8:76:91:
1f:f2:51:81:12:ed:17:5a:95:57:59:68:b3:d1:c2:
20:b8:5c:7d:82:92:c4:29:ef:a3:69:29:9a:b4:24:
1f:59:db:34:6e:a3:09:31:3d:96:cb:a0:c7:5b:dc:
51:e0:c9:6c:10:9e:3f:43:a9:b2:dd:9b:ce:45:dc:
76:aa:53:9e:90:4b:a8:24:63:5f:5d:e0:44:78:1e:
6c:34:12:bb:9c:b9:66:41:d6:89:10:6f:c8:86:c1:
b3:ad:68:56:6e:dd:d5:ef:ab:b3:4f:e7:cb:97:0b:
fc:cd:f4:41:e4:d1:d4:11:98:d8:b8:7d:d5:52:bb:
52:cf:86:80:f0:40:dd:a3:88:17:49:f7:d0:d4:a5:
a9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9C:B5:F9:0E:0F:2D:ED:CF:49:1D:99:EB:58:13:4B:02:9C:26:BE
X509v3 Authority Key Identifier:
keyid:B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:dc:c7:34:0a:e5:fa:f8:3a:26:69:7c:5f:33:28:35:54:12:
0d:d7:75:b5:45:69:9a:22:a0:69:68:eb:aa:9f:89:3e:0e:76:
fb:c2:6e:5b:99:87:7b:e5:c3:40:2e:14:ba:6b:f5:63:ba:52:
ac:46:9d:cc:a8:63:be:54:cd:c2:6d:0c:fe:e2:d8:aa:d8:2c:
bb:c8:c8:e9:2a:5e:65:97:e8:0d:a5:29:7a:6b:1e:ab:6f:53:
65:d7:4c:b2:98:ab:76:7f:8c:e5:0a:c2:79:6c:c8:b4:d6:dd:
08:e2:76:24:40:14:70:c3:36:98:93:89:5f:c0:06:bc:0f:59:
6d:6a:1d:6b:e6:fa:de:76:ee:44:f4:a9:f5:a2:76:29:72:be:
02:3b:3e:ba:3e:39:d1:ce:9e:91:4f:e7:17:5d:a1:7f:87:7a:
4a:05:0d:ae:bb:3c:66:55:b8:a8:80:5e:f1:cb:47:88:13:59:
fa:c0:21:7b:e5:89:3b:84:51:02:15:3f:b5:a1:02:87:25:47:
2d:ab:9c:fa:51:45:41:11:66:ca:c1:99:03:ed:a3:99:81:c8:
84:9c:e5:f3:b1:6a:f3:7b:fb:8b:d4:3e:3a:a0:fc:c2:e0:84:
12:87:12:fa:ab:36:16:8d:32:d3:a8:ba:c2:0d:03:e8:87:7a:
26:4b:c1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:32:47 2026 by rpki-client