
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft
File: B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft (raw, json)
Hash identifier: KidLe+b9wA6zeVLfTt6tb0TncfVeMDTa+Tb5PKJJD+c=
Subject key identifier: 68:5A:D0:99:83:BC:18:00:65:D9:37:EB:6D:34:85:22:FC:FF:DA:C8
Authority key identifier: B5:06:7E:78:02:D7:B1:99:28:BD:FA:93:E6:D5:BA:56:61:41:8A:F9
Certificate issuer: /CN=B5067E7802D7B19928BDFA93E6D5BA5661418AF9
Certificate serial: 2BB5295086465A727A9C9F98147A802FE2118179
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft
Manifest number: 3B
Signing time: Sun 14 Jun 2026 09:34:20 +0000
Manifest this update: Sun 14 Jun 2026 09:29:20 +0000
Manifest next update: Mon 15 Jun 2026 11:58:20 +0000
Files and hashes: 1: B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl (hash: komUE82Y44CjVk747MNKbGZVHJzkpg/e70kkS3yub1s=)
2: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: 2jTqkZUMM6RgBn0H5+b2a8SLrtyFxeMaWfySgcjTtJg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl
rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 07:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b5:29:50:86:46:5a:72:7a:9c:9f:98:14:7a:80:2f:e2:11:81:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5067E7802D7B19928BDFA93E6D5BA5661418AF9
Validity
Not Before: Jun 14 09:29:20 2026 GMT
Not After : Jun 15 11:58:20 2026 GMT
Subject: CN=685AD09983BC180065D937EB6D348522FCFFDAC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4c:98:29:d1:17:c8:e6:72:ac:af:71:12:00:
4e:a2:e7:b6:26:59:79:ae:12:29:c4:76:4f:9b:ed:
e0:6a:36:8a:56:2d:86:1c:d3:07:64:17:92:7f:85:
77:cc:63:51:ed:ee:9a:3d:9c:63:47:96:e0:8b:f4:
a1:93:48:84:85:7f:07:6d:ce:e4:95:4a:99:09:3f:
67:cd:f2:e5:f9:00:22:9b:bd:9c:c2:5e:64:64:ac:
c2:85:4c:db:59:db:59:21:ee:41:fb:a7:31:58:bd:
db:78:f7:68:06:67:5c:c4:ec:82:1f:71:89:9a:96:
29:d2:03:ed:57:f9:88:67:81:ab:fa:79:c0:bf:46:
50:04:f0:e6:ed:46:96:5b:2c:4d:11:f1:d4:79:36:
6a:ca:fa:34:d1:44:78:ca:ab:96:2a:17:29:c2:c7:
51:0f:69:12:24:fe:75:75:21:98:c4:cd:61:62:b9:
6d:11:29:ea:76:65:9a:d7:2b:3b:33:30:0d:44:d8:
9c:72:ca:3c:36:74:fd:95:1c:04:78:a5:f9:99:ac:
58:dc:88:d7:c6:e5:61:c1:14:32:d2:6f:2d:fe:4a:
22:ed:50:a8:5f:e9:01:01:de:67:11:18:6b:af:c0:
3c:2c:2a:a2:67:50:ba:46:0f:10:33:cd:be:65:01:
4d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5A:D0:99:83:BC:18:00:65:D9:37:EB:6D:34:85:22:FC:FF:DA:C8
X509v3 Authority Key Identifier:
keyid:B5:06:7E:78:02:D7:B1:99:28:BD:FA:93:E6:D5:BA:56:61:41:8A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cf:e6:f5:6e:23:9a:63:3e:f0:32:c6:53:b8:58:df:32:68:
0d:ec:db:9b:db:46:aa:2c:c2:8c:98:54:9a:ca:df:16:06:29:
fb:e0:d3:ff:12:fd:d3:2e:c5:73:66:51:58:f8:a6:9f:24:f4:
42:5c:03:80:1b:ee:9d:6b:69:e6:06:dd:e9:a1:59:52:90:8b:
53:2f:26:6a:7b:58:80:3b:ad:11:c4:8a:51:75:1f:6c:4d:5d:
4d:e6:36:8d:59:ab:3d:10:b4:4d:0a:6c:b0:47:f0:32:c6:69:
3a:6d:5b:9e:6b:98:35:93:20:1a:bc:48:8b:d4:a5:48:cd:df:
04:45:7c:05:fa:81:5c:2d:1e:1c:2a:ca:78:40:42:c5:27:2c:
b9:e2:4b:4b:31:b0:67:59:bb:09:35:2e:e5:7f:9c:d5:6b:ff:
22:a8:44:31:03:84:c7:16:ff:e1:99:62:7a:a3:e7:a2:e2:96:
d4:70:98:33:cd:4c:de:c2:46:ef:9c:58:f2:99:ba:15:e8:b9:
ac:3a:43:60:00:1b:74:7b:25:6c:21:9e:2b:73:16:2f:d8:02:
6a:3c:c5:d3:c9:f0:74:83:c5:39:ab:4f:88:e4:e0:f4:cb:b9:
06:e0:a1:f9:66:0b:a3:9a:3e:e7:98:8b:57:e9:9a:d5:1b:8a:
3f:28:f7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:18:48 2026 by rpki-client