
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft
File: B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft (raw, json)
Hash identifier: 19GX2tbAzPH3vPKugW7d1OR6ktsgYYrmyjj2hYvq3Ik=
Subject key identifier: B3:51:71:02:6E:50:2D:55:24:53:80:74:6C:8C:11:7D:79:E6:9D:FC
Authority key identifier: B0:B8:CD:CE:E7:42:6D:03:10:20:BE:C1:EA:D2:33:7C:B5:1D:A7:18
Certificate issuer: /CN=B0B8CDCEE7426D031020BEC1EAD2337CB51DA718
Certificate serial: 213B81CEEEB49119BA60BCF6810C5A4FC2B468CD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 05:24:27 +0000
Manifest this update: Wed 17 Jun 2026 05:19:27 +0000
Manifest next update: Thu 18 Jun 2026 07:53:27 +0000
Files and hashes: 1: B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl (hash: shVPRl8r7bYNuYKYi0PEK/s+WCA5BeEHffnMfQHk62o=)
2: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: AMAK0g33Kv2aI5QR9+0p9uxKjyyXdje3jg9ykQZ5pUA=)
3: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: 6QK6aAC3OH45PZDy0os84YcWYINTJWbPpMpi72u5POI=)
4: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: fQwW9jEUlabh0L2NvQSOViFURIlDH59x+g1CS1ccauI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl
rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:3b:81:ce:ee:b4:91:19:ba:60:bc:f6:81:0c:5a:4f:c2:b4:68:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0B8CDCEE7426D031020BEC1EAD2337CB51DA718
Validity
Not Before: Jun 17 05:19:27 2026 GMT
Not After : Jun 18 07:53:27 2026 GMT
Subject: CN=B35171026E502D55245380746C8C117D79E69DFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:7e:05:65:d0:16:df:76:72:b4:ef:60:6b:
bb:7e:03:61:f0:79:46:ef:b5:64:ad:61:d6:dd:12:
2b:63:d2:1a:05:36:39:bd:61:68:d9:83:b8:b8:5c:
e9:43:8d:4c:6e:dd:8c:90:f7:1d:68:2e:3c:f9:d7:
d1:97:f5:53:9e:23:3c:3b:c9:92:5f:bd:86:c7:29:
8a:56:f3:38:b2:d4:8f:3c:47:35:56:91:5e:92:4e:
ed:3f:1e:76:36:68:86:10:26:4a:e1:18:f0:c2:44:
ab:10:47:b6:7e:2e:bd:52:a0:d3:76:bb:ab:4f:d8:
d6:46:12:cb:23:0a:93:49:e9:d7:f9:d6:7a:ff:96:
d9:dd:9e:c9:98:78:14:87:04:59:c4:ed:bf:9a:c2:
9f:9b:f5:bf:ad:f7:f8:e8:64:e4:2f:ba:95:51:ad:
7e:a1:7a:32:10:b7:09:ba:f0:d1:dd:80:5b:2a:35:
c7:8e:ec:b1:8d:09:06:01:48:e0:56:bc:10:e5:91:
28:b7:d5:99:99:7a:c1:99:0a:56:bd:60:03:9a:02:
ad:a4:da:03:c7:48:a1:dd:c9:c8:b9:4f:ef:d6:34:
92:40:06:96:d2:d3:25:4c:17:6b:8c:85:60:4b:cd:
dd:1a:77:01:72:a9:78:e3:46:dc:bf:ac:82:b2:6a:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:51:71:02:6E:50:2D:55:24:53:80:74:6C:8C:11:7D:79:E6:9D:FC
X509v3 Authority Key Identifier:
keyid:B0:B8:CD:CE:E7:42:6D:03:10:20:BE:C1:EA:D2:33:7C:B5:1D:A7:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:38:eb:05:5b:d7:26:70:87:9e:3b:20:43:a7:b5:44:f5:5a:
3a:e1:45:59:dc:0c:70:3d:67:9e:11:1e:65:02:ec:5e:04:77:
b6:e4:0d:27:e0:1d:70:e7:bf:b1:a6:02:4c:2f:2b:e3:23:e3:
ca:8e:98:9b:eb:fc:06:04:26:07:76:b4:a7:4b:32:9c:46:1a:
01:e3:60:6e:4b:7e:6c:b6:45:de:d7:fa:dc:20:e9:7c:93:31:
c8:d7:6e:ad:c1:c5:93:c7:41:d8:e0:c9:a9:5c:6c:f7:fb:0d:
82:f5:21:c7:9b:34:99:0f:5b:c3:83:d2:1f:8c:6a:ed:f5:5c:
26:dd:49:ad:2b:e2:cf:05:82:fe:ee:d4:0f:13:9c:c2:8d:17:
55:15:67:f8:93:2e:60:14:44:62:d3:e9:31:1b:b0:45:8c:e9:
82:b2:f7:e1:6b:a8:99:4c:99:e9:01:ee:fb:21:c7:ec:c8:91:
72:0b:14:bd:06:82:72:c0:c7:0f:b8:da:ac:16:ae:75:3a:f5:
b8:33:f7:8c:a5:ef:4d:65:c1:db:34:09:17:08:0a:b5:6d:37:
ff:ae:95:1d:a2:ba:82:80:2d:19:7c:1e:bb:7b:f3:4d:19:8a:
58:58:17:b0:2d:76:e4:f8:31:e0:54:e5:da:18:f0:6b:90:e2:
c9:3a:2f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:43:56 2026 by rpki-client