
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft
File: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft (raw, json)
Hash identifier: cRB92snsyrVuhQbrmIjZkt4ecx7MMRb0vK6A0qGKw1A=
Subject key identifier: 95:0F:F5:6B:19:CB:36:F2:79:CE:7D:5B:04:6D:C0:79:23:56:68:7F
Authority key identifier: B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB
Certificate issuer: /CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB
Certificate serial: 50135A6858876F8B1C4802361A618041255EC01B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 07:52:24 +0000
Manifest this update: Wed 17 Jun 2026 07:47:24 +0000
Manifest next update: Thu 18 Jun 2026 10:17:24 +0000
Files and hashes: 1: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: 8GvfzVduMFTtGlADd061A8wAjIa0JhN238PnLdk7UyA=)
2: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl (hash: GliFbrqdKEvyGuw5THgP4x8n0AqHhE+zo5pkXSj1B+s=)
3: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: lfMuEG6m1w+3L6wzJesoEfOVGjLJIPXAAFywmq7MUaw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl
rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:13:5a:68:58:87:6f:8b:1c:48:02:36:1a:61:80:41:25:5e:c0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB
Validity
Not Before: Jun 17 07:47:24 2026 GMT
Not After : Jun 18 10:17:24 2026 GMT
Subject: CN=950FF56B19CB36F279CE7D5B046DC0792356687F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:b9:73:ef:cb:ce:98:4c:c4:08:29:48:9f:
0f:78:50:2a:e7:08:04:21:11:15:f2:e1:8a:ff:ff:
99:28:60:90:6b:8d:e2:86:a6:8f:91:d9:cc:c8:37:
2d:2c:6f:e1:a9:e9:51:56:68:df:a7:87:37:01:bf:
b6:32:37:b4:d6:3e:e9:dd:27:6f:0c:5b:bf:70:b4:
ea:ba:c7:1d:dc:f7:ca:e0:ce:c0:1c:6d:3f:e1:12:
8a:95:0f:d8:ae:99:0d:5b:d1:47:39:4a:e2:05:40:
e8:cb:c9:2e:8d:bb:1a:0a:d5:c0:c0:ed:54:e4:c8:
ea:1f:ea:b3:fa:87:e2:0a:05:b8:e3:92:d9:f2:8b:
b4:82:31:dc:75:9a:d9:66:93:47:00:45:4c:61:4d:
cc:3d:75:f0:2b:03:30:32:53:75:df:6d:e1:9c:b2:
50:a5:a6:6d:2b:84:e0:b4:c6:7b:a0:cc:0a:5a:37:
8c:4e:46:cb:67:f1:3b:25:f0:76:22:4a:dc:4e:cd:
36:46:c7:2a:4b:fb:3a:f3:cf:91:04:a6:95:ad:e9:
0e:03:be:c8:02:aa:26:68:37:e8:08:e6:2b:dc:0b:
28:7d:bf:d3:e9:10:83:20:cd:ba:bd:8b:72:5f:32:
70:ef:b8:3e:ca:ea:fe:d0:ed:35:df:be:19:04:40:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0F:F5:6B:19:CB:36:F2:79:CE:7D:5B:04:6D:C0:79:23:56:68:7F
X509v3 Authority Key Identifier:
keyid:B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:cc:ca:5b:19:ee:0b:c8:5d:a2:cd:2b:e4:5f:ff:f2:b5:ae:
fb:3b:dd:af:fc:c9:30:20:de:b2:bc:e3:fd:09:59:45:f7:bd:
5e:48:af:71:52:63:35:7b:88:04:d4:16:8a:fb:8c:ae:a1:43:
ae:95:45:17:f3:96:93:31:64:e0:0c:2a:3f:1a:44:81:a6:1d:
50:7b:a7:3f:8d:fb:3b:66:55:b8:ad:a7:b6:de:f1:c1:70:6e:
ef:6b:84:18:42:e2:5a:e7:46:44:9e:47:95:e7:59:97:4a:d3:
cd:ec:3e:4e:dd:29:cc:9e:79:37:df:09:e1:19:85:1c:fc:c3:
3d:01:81:10:9c:59:d4:36:60:00:a3:92:4d:51:6e:61:a1:11:
46:15:d2:1f:dc:76:3c:fb:ed:8b:cd:91:bb:6e:88:75:3b:4b:
dc:53:ba:e6:22:62:22:09:48:cb:e4:e8:9b:5e:50:2c:2e:f9:
ae:24:77:e0:37:50:a7:26:06:ce:f8:fc:ac:d8:13:4b:4e:cd:
de:9a:9b:fe:44:af:69:b7:e8:ad:08:af:d0:cf:f7:4d:06:fe:
3e:14:44:c4:f6:34:83:68:2d:a6:07:5d:89:ea:4b:e2:0c:47:
c0:5d:37:4d:78:ed:5a:16:52:35:7a:95:98:db:e1:ec:98:db:
84:09:88:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:40:51 2026 by rpki-client