
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft
File: 20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft (raw, json)
Hash identifier: +W2h2rODKr6aZjfTMNZlACXT3d/kgamHdwKOJVqkbdw=
Subject key identifier: E0:DF:CB:79:B6:D9:0D:5E:84:2C:9B:E6:D0:13:E8:07:D0:F2:B7:DE
Authority key identifier: 20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39
Certificate issuer: /CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39
Certificate serial: 5729A5CA9641250715028A9752839830601633AA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft
Manifest number: 3B
Signing time: Mon 15 Jun 2026 06:34:22 +0000
Manifest this update: Mon 15 Jun 2026 06:29:22 +0000
Manifest next update: Tue 16 Jun 2026 06:34:22 +0000
Files and hashes: 1: 3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (hash: /+PtWpNaw+qxeLwPph3/hApvuooUAmWwP9ENPOfI0jQ=)
2: 3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (hash: 7ZieTOqY/KGyiMIehZ/2Tvd324Qe4ByAnaKXnii8UnM=)
3: 20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl (hash: Y3+S0FX+DGDo9FqpXwCsFNo16qDVaMWDjayQa93RRmY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl
rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 03:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:29:a5:ca:96:41:25:07:15:02:8a:97:52:83:98:30:60:16:33:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39
Validity
Not Before: Jun 15 06:29:22 2026 GMT
Not After : Jun 16 06:34:22 2026 GMT
Subject: CN=E0DFCB79B6D90D5E842C9BE6D013E807D0F2B7DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:7c:5b:4c:5c:96:a8:39:90:02:cf:66:b9:
35:71:59:2a:47:35:c2:ae:6c:6b:a2:c6:82:0e:09:
07:04:8c:4e:3b:74:f2:f2:5a:55:82:af:7b:5a:9e:
7a:e6:cb:e6:ba:99:dd:b5:bb:a7:ed:87:05:b4:8e:
8f:31:3c:da:3f:ce:5e:78:c3:bc:16:d7:d6:aa:6a:
95:1a:1e:2a:a1:cf:ca:6f:92:3f:ce:26:46:d4:35:
ff:8b:3e:ed:e0:7a:67:55:71:07:16:05:1a:6f:43:
d7:6e:8c:96:98:f7:9f:aa:b3:cb:ce:af:d9:56:90:
b7:45:93:8e:56:7a:ff:d0:be:bd:22:0c:23:45:7a:
2b:51:81:85:ed:04:38:0e:7b:60:50:3d:3e:0b:a5:
b3:f1:73:78:42:27:0f:28:bd:06:19:fa:3f:96:74:
05:33:7f:2a:d1:76:c5:47:10:7e:0f:ef:fb:bf:9f:
55:04:a1:08:b7:9b:5d:bf:69:91:8f:07:cc:ae:e7:
d8:fb:f3:51:08:ce:3e:09:c2:f8:29:58:1c:4a:5f:
e6:4f:91:5d:50:bc:99:d7:c6:09:87:c8:7b:a7:43:
cf:2a:4e:8d:53:60:a0:f2:00:5f:ed:4b:b1:3b:44:
ea:dd:15:db:2b:d8:03:7e:06:76:6d:63:16:82:3e:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DF:CB:79:B6:D9:0D:5E:84:2C:9B:E6:D0:13:E8:07:D0:F2:B7:DE
X509v3 Authority Key Identifier:
keyid:20:84:08:77:BD:CD:CB:9E:C9:ED:6D:CA:C5:F4:C8:5F:35:07:0D:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/20840877BDCDCB9EC9ED6DCAC5F4C85F35070D39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1a:e3:21:df:b3:53:15:c3:b4:a2:c0:a3:8d:e9:81:7d:d3:
94:75:59:19:09:58:7c:e2:ce:bf:c3:e3:90:9a:56:ba:c9:77:
0a:78:29:00:24:e7:2c:d7:d1:b6:4b:50:52:e4:d3:48:e6:c1:
99:15:35:a7:e1:7c:64:8f:1d:fb:76:57:5a:cf:6c:b0:e7:b3:
ba:d7:c3:f7:68:92:a4:1e:d7:d3:38:08:e0:92:46:08:14:e6:
09:54:22:46:89:da:5b:ac:51:53:44:3c:50:aa:75:71:4b:e7:
de:65:e6:63:8d:59:23:5b:37:23:d9:6c:61:b5:42:64:e7:02:
cf:17:e4:2f:b1:c2:13:be:d0:6f:9d:f8:7f:2e:b1:8a:a0:0b:
31:ba:4d:d3:27:4c:63:e4:b2:96:70:a6:00:b3:2d:f5:f7:f3:
2a:7c:e7:bd:3a:24:09:2c:a9:a3:dc:51:f9:13:79:a8:33:dc:
b9:a6:6d:9d:31:46:6e:3a:a7:72:64:a6:21:87:a2:ec:a4:c7:
ac:80:31:e8:85:ad:be:c9:b3:33:f2:9d:2d:6c:8f:d1:03:d5:
11:04:17:b0:d2:e2:ca:bf:16:82:f8:3f:9f:77:18:4a:10:2e:
8a:0d:2e:18:6b:b8:b5:43:d2:27:a0:a2:6c:f3:09:01:37:75:
22:01:99:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 19:42:58 2026 by rpki-client