
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
File: 0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft (raw, json)
Hash identifier: VC+IMRUyAxFfkziAaJwEZ+dSgdAe8bAS2w/+4U/yVZ4=
Subject key identifier: B1:CE:CF:75:92:A1:92:26:12:EE:08:83:3C:31:75:24:AC:3B:28:74
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Certificate issuer: /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial: 6E2B3866C5BDD0D688E6FD35245E4470E1EDF861
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
Manifest number: BE
Signing time: Tue 22 Sep 2026 15:35:44 +0000
Manifest this update: Tue 22 Sep 2026 15:30:44 +0000
Manifest next update: Wed 23 Sep 2026 16:45:44 +0000
Files and hashes: 1: 34332e3234392e3134302e302f32342d3234203d3e203535363533.roa (hash: 2k2h/lLJh4y28GreNoFDXEw9j2lKUZ4eXzUUiII60sQ=)
2: 31342e3130322e3135352e302f32342d3234203d3e203535363533.roa (hash: t0eDmBySGGi3M6vpcaHWuK77uuciFXZsi3Bv2CvN2vw=)
3: 3230322e35322e31352e302f32342d3234203d3e203535363533.roa (hash: VHZA3TuBf4nLKV2pTnmQZgiFCXveS7LsJ0nVeKIEvQQ=)
4: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: HPeBWQRE7Nzk6K93OWZYdv8ZiGkz5Xm/tDmbLAYTX/8=)
5: 3130332e31312e39372e302f32342d3234203d3e203535363533.roa (hash: QXGWZFsc9f71b86soW4vxADReeKw3WdzjpJwgfFCmCI=)
6: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: wL/pHkWZYlSpOpNVjgz7YgIvq4xTapnBHJvFGC824+g=)
7: 3130332e31312e39362e302f32342d3234203d3e203535363533.roa (hash: Ou8COM1+4QBZTfW7oPb8lvGJwrPW2b9YrMH3Sw2uBUo=)
8: 34332e3234392e3134312e302f32342d3234203d3e203535363533.roa (hash: Bc5YFcqICb+bh4tRwH4x3D73YQXCDozUg5+ESseoBXI=)
9: 34332e3234392e3134332e302f32342d3234203d3e203535363533.roa (hash: qdZ5s/RPKJd1zWpn0OA8oOkj/7C1tf+45M/HrbWmTwI=)
10: 3230322e35322e31332e302f32342d3234203d3e203535363533.roa (hash: RTunN5WvZPwzhuRDaOCGYBctUeKdomE1xa5xw2crzZk=)
11: 3130332e31312e39392e302f32342d3234203d3e203535363533.roa (hash: tgMOLRKHLk6AeegSxwagm//NkkSHrRBSK1EEwqWmlG0=)
12: 31342e3130322e3135342e302f32342d3234203d3e203535363533.roa (hash: 2xEncKZB7XKpCLMYg2xigci5uudnJs/KRQjGyEQoyfA=)
13: 31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (hash: 4TVT+M+1OynDiPmgdYeocC5p7/VKvqBlsqaUMV+uRAs=)
14: 3130332e31312e39382e302f32342d3234203d3e203535363533.roa (hash: 1Ar9cC6jZkLzAdlFLEVr635I57ciOymkfzzDC1PNwsE=)
15: 0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl (hash: mC8cZ1MnS9D/8OVxcOBqVJVtANDCnUvxlVHZiCT1+LQ=)
16: 34332e3234392e3134322e302f32342d3234203d3e203535363533.roa (hash: nVmldivYscT9yIlUPfak+eYDC8xGQfjxxTwl5kvmf58=)
17: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: UIaj9X3lfb9VOoNSMQt3FPXNkkUvi5Cnj1c6MU0v1/8=)
18: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: 2FalOm0wymIUOR6b6eMABH/GePb1gQsHB2PkapVhslQ=)
19: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: aTFM/g9W9unRb/uZnofVUS9SPuRIxxAlxUviQTXpEaI=)
20: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: M9ZVVTNiZw+8g7eKubBdE5bO++zVmlUills7R3bh+8E=)
21: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 7kCoo2bMrWx+NgrVIZTs8BnZTFozYrI1Yx+Eu/FeGxM=)
22: 3230322e35322e31342e302f32342d3234203d3e203535363533.roa (hash: +X2AKDLUi7EEV0pZEa+LT88OPryzNndvmpim+oMxEjk=)
23: 3230322e35322e31322e302f32342d3234203d3e203535363533.roa (hash: gb1IwBwgBC3bVtPwvnx/RPu7Ia6Ag29mP7Tz4sfDgHE=)
24: 31342e3130322e3135322e302f32342d3234203d3e203535363533.roa (hash: 7m1lsj+R46fwy5EhA0AVTVR6lA5VWMrVBvJWrnKZtRo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 16:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:2b:38:66:c5:bd:d0:d6:88:e6:fd:35:24:5e:44:70:e1:ed:f8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Validity
Not Before: Sep 22 15:30:44 2026 GMT
Not After : Sep 23 16:45:44 2026 GMT
Subject: CN=B1CECF7592A1922612EE08833C317524AC3B2874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:60:cb:9f:dc:eb:af:32:b3:46:2b:6a:ed:
23:5a:d3:76:b9:b9:75:ef:28:8a:4a:a9:5f:fb:8a:
6a:1b:a3:f9:ec:b3:fd:d8:5f:76:8e:1e:ea:8b:87:
06:a9:fe:00:5d:c6:af:43:7b:9d:1d:06:68:6f:0e:
cc:75:f3:72:db:e4:d3:5d:12:5e:da:ab:4b:98:5a:
f8:0f:b2:ab:32:c9:3a:79:a8:ee:da:64:a6:c7:06:
a5:30:33:23:fc:85:b3:a7:78:ac:23:a3:96:1f:2e:
9d:22:78:ee:20:9c:1b:3e:aa:58:d6:f9:d6:52:27:
a3:63:f2:29:0f:d3:ff:8d:20:87:1d:af:0a:59:21:
4f:6c:4f:a4:17:83:24:f1:73:4a:06:e6:a9:45:dd:
13:59:9d:61:f0:c9:ca:96:5d:d1:f1:2d:c5:7a:b2:
7a:3f:9d:4e:0b:e0:3d:02:01:24:a7:01:cd:dd:8d:
35:13:d7:3d:7f:40:f4:6b:f0:b8:d9:d1:2b:41:d3:
1a:40:de:f0:6e:80:76:23:af:e5:43:d4:12:4d:77:
b5:79:bc:19:19:b4:2e:80:2c:51:28:45:48:85:93:
d3:ba:4c:ab:c6:2c:c3:51:e0:99:2e:ef:c8:7e:44:
bd:83:7c:be:00:b4:82:6a:54:ca:1c:15:cc:1e:d7:
d6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CE:CF:75:92:A1:92:26:12:EE:08:83:3C:31:75:24:AC:3B:28:74
X509v3 Authority Key Identifier:
keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7a:81:b6:e1:f3:a4:b9:a1:8c:1e:56:88:22:5e:80:c1:9d:
1d:a6:fc:c7:20:69:d6:74:10:26:6a:9b:9f:d8:ba:3f:b6:62:
16:54:ba:da:b2:7c:f8:4f:48:69:b4:ee:81:85:0d:0c:35:33:
5e:e7:63:8b:51:62:19:9d:a0:5b:6d:b7:fb:c9:48:e3:31:26:
10:d9:d3:5b:b6:f1:93:42:2b:3c:28:8b:41:2e:b0:37:46:6a:
46:61:6b:d0:d5:d8:bf:14:a3:05:89:94:db:c5:e0:97:ba:ca:
21:b7:1b:c9:bf:dc:69:0e:ef:af:2c:1f:d0:de:79:5a:3d:37:
6e:17:11:e3:d5:48:2a:61:34:5a:84:a5:4c:99:b1:ea:dc:6f:
16:49:a5:27:cb:f6:41:ba:19:c8:22:3d:63:ea:1b:c9:89:77:
fa:f5:b6:f9:1f:7b:d1:e4:84:0d:34:54:cc:83:60:fe:df:b9:
46:91:c3:99:b7:ac:be:65:52:40:76:bf:69:dc:70:e2:29:b2:
c7:b2:0b:88:3c:49:5c:01:e0:b6:61:37:22:89:d4:da:fc:30:
ef:91:c2:be:95:11:ef:23:60:ac:b3:5e:17:08:45:8e:d1:e9:
ff:93:99:11:df:75:54:35:e1:67:ed:b6:ae:8c:6a:65:4c:c0:
1c:8c:e9:d5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbis4ZsW90NaI5v01JF5EcOHt+GEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJENzM4RDlDN0FCNzJDODEzRUI4OTNFMzk1NUE2OEIz
MTkwQ0ZEMjAeFw0yNjA5MjIxNTMwNDRaFw0yNjA5MjMxNjQ1NDRaMDMxMTAvBgNV
BAMTKEIxQ0VDRjc1OTJBMTkyMjYxMkVFMDg4MzNDMzE3NTI0QUMzQjI4NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRO2DLn9zrrzKzRitq7SNa03a5
uXXvKIpKqV/7imobo/nss/3YX3aOHuqLhwap/gBdxq9De50dBmhvDsx183Lb5NNd
El7aq0uYWvgPsqsyyTp5qO7aZKbHBqUwMyP8hbOneKwjo5YfLp0ieO4gnBs+qljW
+dZSJ6Nj8ikP0/+NIIcdrwpZIU9sT6QXgyTxc0oG5qlF3RNZnWHwycqWXdHxLcV6
sno/nU4L4D0CASSnAc3djTUT1z1/QPRr8LjZ0StB0xpA3vBugHYjr+VD1BJNd7V5
vBkZtC6ALFEoRUiFk9O6TKvGLMNR4Jku78h+RL2DfL4AtIJqVMocFcwe19azAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsc7PdZKhkiYS7giDPDF1JKw7KHQwHwYDVR0j
BBgwFoAUC9c42cercsgT64k+OVWmizGQz9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Yzk3NDY1ZTMtNzhhMC00OTY1LWFlMTQtZTRjYjRkMGZjMTg1LzAvMEJENzM4RDlD
N0FCNzJDODEzRUI4OTNFMzk1NUE2OEIzMTkwQ0ZEMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQkQ3MzhEOUM3QUI3MkM4MTNFQjg5M0UzOTU1QTY4QjMxOTBD
RkQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk3NDY1ZTMtNzhhMC00OTY1LWFl
MTQtZTRjYjRkMGZjMTg1LzAvMEJENzM4RDlDN0FCNzJDODEzRUI4OTNFMzk1NUE2
OEIzMTkwQ0ZEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFx6gbbh86S5oYweVogiXoDBnR2m/McgadZ0
ECZqm5/Yuj+2YhZUutqyfPhPSGm07oGFDQw1M17nY4tRYhmdoFttt/vJSOMxJhDZ
01u28ZNCKzwoi0EusDdGakZha9DV2L8UowWJlNvF4Je6yiG3G8m/3GkO768sH9De
eVo9N24XEePVSCphNFqEpUyZsercbxZJpSfL9kG6GcgiPWPqG8mJd/r1tvkfe9Hk
hA00VMyDYP7fuUaRw5m3rL5lUkB2v2nccOIpsseyC4g8SVwB4LZhNyKJ1Nr8MO+R
wr6VEe8jYKyzXhcIRY7R6f+TmRHfdVQ14Wfttq6MamVMwByM6dU=
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:32:23 2026 by rpki-client