
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
File: B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft (raw, json)
Hash identifier: VormjsL2QwiKia++YLemneqw5UbXSoOLG9erU9mwFS8=
Subject key identifier: E2:51:E1:22:CF:90:B0:D0:CD:07:DA:F8:9E:7B:4A:CA:49:98:D3:03
Authority key identifier: B1:5D:91:00:DC:8B:30:29:A0:16:F5:09:C7:D3:DB:B1:84:80:5A:A1
Certificate issuer: /CN=B15D9100DC8B3029A016F509C7D3DBB184805AA1
Certificate serial: 781C4FDE75F6597C56BAA9C46185F3E63503DE5B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 04:06:37 +0000
Manifest this update: Mon 21 Sep 2026 04:01:37 +0000
Manifest next update: Tue 22 Sep 2026 06:06:37 +0000
Files and hashes: 1: B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl (hash: muMKP37Yj2V0cOoUi9W8WWbwsr02j8tozlnZk2LBiNs=)
2: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: hdJk3P7tUKxgaAbM7WQzserDmvKDtOC0Ipsv3OLAf5g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl
rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:1c:4f:de:75:f6:59:7c:56:ba:a9:c4:61:85:f3:e6:35:03:de:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B15D9100DC8B3029A016F509C7D3DBB184805AA1
Validity
Not Before: Sep 21 04:01:37 2026 GMT
Not After : Sep 22 06:06:37 2026 GMT
Subject: CN=E251E122CF90B0D0CD07DAF89E7B4ACA4998D303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:77:74:b5:7c:38:98:e3:d6:a1:3e:e8:52:fa:
2a:70:c9:cf:da:61:3b:c6:31:1f:6b:70:b2:59:f7:
10:da:0a:87:43:6a:0e:ed:f9:da:1e:e0:a2:a2:2d:
19:cd:fb:26:08:b9:5b:0f:5f:18:c0:67:f3:1c:a6:
e4:85:4f:fe:2e:d8:69:f2:c8:de:43:35:88:6d:a0:
eb:c5:08:8b:ad:42:17:18:f0:59:3c:83:db:c0:ef:
5f:ee:31:a0:51:b4:77:1a:28:68:be:a3:81:25:51:
01:31:b7:e1:dc:1f:ec:4f:de:6f:3b:e1:a0:46:0e:
0d:cc:56:37:1c:56:43:84:f2:6a:bf:f4:e4:87:b1:
61:ff:d2:bf:8c:04:b8:59:98:68:3f:b2:29:45:51:
84:62:25:5e:b1:cc:da:00:bc:59:86:20:b4:6e:14:
8e:ea:a7:68:1f:d4:0c:52:48:3e:e4:43:b7:cf:8c:
3a:b8:97:33:d5:c7:79:b7:b8:36:c0:be:c1:3a:20:
f3:7a:2b:77:57:f4:d7:9c:8e:cb:78:5d:66:cd:b2:
6e:e0:af:cc:df:6d:fb:bc:7b:93:8e:af:b0:30:30:
1f:d4:83:0e:32:e5:ba:dc:20:e7:cc:be:c7:38:b5:
e7:bb:74:f3:8a:34:40:e9:b7:59:6b:66:4f:e5:5c:
f2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:51:E1:22:CF:90:B0:D0:CD:07:DA:F8:9E:7B:4A:CA:49:98:D3:03
X509v3 Authority Key Identifier:
keyid:B1:5D:91:00:DC:8B:30:29:A0:16:F5:09:C7:D3:DB:B1:84:80:5A:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9d:7f:0e:ef:fd:01:67:fb:55:ed:69:b8:28:9c:d9:31:9f:
0c:db:b4:8a:22:6c:a5:62:e0:3a:37:d8:0d:1c:0c:d4:6f:9c:
32:96:9d:68:a5:ae:c4:4f:e5:5f:2b:f5:a0:48:4b:97:e7:43:
43:f8:78:ab:5c:77:9f:77:f3:87:df:c7:e9:3b:24:91:08:04:
f3:7e:ba:a4:f2:81:62:9a:41:a5:cd:bc:31:26:cd:de:8b:7d:
5e:27:43:72:4e:de:eb:9b:7c:66:d4:5a:93:35:66:7c:35:c9:
13:0e:5f:43:73:7b:35:37:5a:8d:b8:47:9b:72:f3:3d:95:8b:
01:f0:54:fb:2e:81:36:64:f9:c8:00:e0:5e:35:0f:cf:bf:18:
0c:60:a8:39:50:84:22:e0:84:a3:4f:b7:0a:a8:a8:d0:03:52:
1c:a3:10:7b:11:7e:60:5b:1e:74:c7:82:56:65:0b:56:5c:dd:
75:e6:31:23:2b:04:4d:f5:4b:37:ad:37:68:cc:db:96:d7:6b:
74:13:67:66:35:fc:4f:82:a9:96:0e:61:a4:8f:20:97:c6:c6:
0b:51:d2:bc:31:6a:76:fa:65:a6:85:c3:d1:28:00:00:6d:d7:
da:70:64:6f:df:aa:4f:f6:d0:82:1a:c4:62:b0:6e:ce:2d:57:
f2:3e:ee:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:47:50 2026 by rpki-client