
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft
File: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft (raw, json)
Hash identifier: wu51BioIr9m9vfrzib5UfyJ1dfbIuegA/X0C+XG5Buk=
Subject key identifier: 7E:3F:95:5C:0C:E1:DC:68:BD:44:00:1B:02:E4:B6:44:25:3A:CC:1C
Authority key identifier: B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06
Certificate issuer: /CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406
Certificate serial: 6D045373CAC255EB58662EF796CABD06C6C49EB5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 05:56:14 +0000
Manifest this update: Sat 13 Jun 2026 05:51:14 +0000
Manifest next update: Sun 14 Jun 2026 06:29:14 +0000
Files and hashes: 1: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: 9VWfd5KMgyw5xyqB55UR/HJrZNws4qzcvTj6ecqQ/Qk=)
2: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl (hash: 3V8K5n6iPwBdUe1kemlvOH/u/zz2tmGE12OEDnVdIsg=)
3: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: g5c7Nq+6t4kiF6CKiothKoqaQ8v25zT/n7Wj9Q/sxEQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl
rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 06:29:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:04:53:73:ca:c2:55:eb:58:66:2e:f7:96:ca:bd:06:c6:c4:9e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406
Validity
Not Before: Jun 13 05:51:14 2026 GMT
Not After : Jun 14 06:29:14 2026 GMT
Subject: CN=7E3F955C0CE1DC68BD44001B02E4B644253ACC1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:4f:ea:94:4a:2d:f0:3b:a8:b1:fe:d2:db:
9d:e3:d2:53:fe:9d:31:ff:05:a7:eb:f4:56:7b:3c:
84:ad:19:50:2a:d2:b9:47:a9:48:67:9b:5c:a7:e3:
9b:68:52:a1:a7:d9:0a:8d:2c:33:8e:1e:7c:27:8f:
28:05:b9:cc:30:ff:85:47:b4:d6:1b:6e:c4:5b:94:
0d:18:76:a8:cc:32:86:39:2c:fd:ca:61:00:3e:b8:
a8:2d:59:d0:6a:b6:0a:f3:7e:d0:4f:27:5c:ae:aa:
f7:6a:f7:65:85:ed:02:38:51:10:4f:20:0e:0f:1f:
41:aa:d3:51:f7:b9:86:28:70:bc:29:1e:43:41:d6:
11:24:99:11:05:bb:a4:7f:98:bd:3b:f2:9b:83:0e:
1d:d4:f9:33:ec:5e:2e:7e:cc:7d:d4:e9:28:e1:10:
25:9a:ae:b3:6e:64:db:ea:38:b7:63:05:1e:15:c0:
3a:ff:01:55:70:01:44:6a:99:1a:5e:a9:55:4e:49:
12:3e:ca:f4:c8:7b:eb:e9:8d:04:4c:1c:78:f0:29:
53:e7:d3:0a:c5:40:0e:ad:47:7d:9d:2e:58:6a:09:
41:18:34:da:66:11:27:b0:48:f4:73:d8:f3:1c:5d:
c0:7d:c3:8a:63:2c:25:e9:44:7e:7f:4b:d1:00:02:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3F:95:5C:0C:E1:DC:68:BD:44:00:1B:02:E4:B6:44:25:3A:CC:1C
X509v3 Authority Key Identifier:
keyid:B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:07:ea:b8:dc:e1:33:29:20:ce:10:cb:a8:97:47:5a:8f:d4:
88:6d:c8:33:94:b5:3b:6d:d5:eb:82:2b:b5:5b:da:ac:14:b3:
46:a6:36:03:97:b2:d7:d8:27:d9:99:2b:67:f6:5e:cd:20:11:
f1:b8:6a:dd:c6:83:b6:94:c3:36:97:d2:d0:7f:38:c2:2c:e9:
4f:fa:dd:23:7b:16:3b:c4:2e:f6:58:45:13:26:c7:f7:25:ee:
68:c7:7b:51:28:19:88:17:34:66:c4:fa:79:ca:9b:a8:5c:db:
aa:4e:ba:5b:9c:d8:95:ee:fe:fc:de:c3:e2:6b:98:c2:74:57:
32:b2:7f:b5:4e:3a:b7:c2:58:d1:12:26:84:9e:c2:0c:94:93:
06:ea:13:02:2f:6a:78:5f:3d:12:58:0a:61:a2:fe:cb:19:9d:
d2:2b:8e:d9:c6:ce:e7:69:23:e2:da:dd:4c:6b:6e:ba:4b:6f:
48:91:4c:6b:a1:95:9c:77:62:90:13:24:b9:f5:c1:ca:b9:1b:
27:3b:ee:c1:52:17:c3:7e:5d:ca:30:76:5a:25:fb:35:4f:65:
c7:8d:38:14:61:42:ce:8e:5a:f3:f3:c4:1b:34:a0:dc:36:1a:
ce:7b:a1:10:4c:f0:b5:62:ac:a2:7e:2e:2c:4d:5f:f2:df:db:
84:27:6c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:05:55 2026 by rpki-client