
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.mft
File: B4EA91A6AB8247898ABE5F6A973AC83C2D981279.mft (raw, json)
Hash identifier: ewbCU3tSFNWQy9FQ3ZvPmFSoEbRiJ8Bkw3rT/fsf0J0=
Subject key identifier: 01:FE:F7:67:D2:E9:62:5A:E5:E6:12:AF:C3:81:08:76:53:63:F9:7B
Authority key identifier: B4:EA:91:A6:AB:82:47:89:8A:BE:5F:6A:97:3A:C8:3C:2D:98:12:79
Certificate issuer: /CN=B4EA91A6AB8247898ABE5F6A973AC83C2D981279
Certificate serial: 0872A5FD258258CC01BE557D2956DA9A17631226
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.mft
Manifest number: BC
Signing time: Sun 20 Sep 2026 07:16:07 +0000
Manifest this update: Sun 20 Sep 2026 07:11:07 +0000
Manifest next update: Mon 21 Sep 2026 09:21:07 +0000
Files and hashes: 1: 3130332e3135392e39332e302f32342d3234203d3e20313431313339.roa (hash: W3BqOyBvgv9ZGlE75nq9UMAZmqS7PmSAhfmH8SJpDVI=)
2: B4EA91A6AB8247898ABE5F6A973AC83C2D981279.crl (hash: XQaguVjy09kV83VKXWxjU9XRKxAfyK0MTeYVevt3Lbw=)
3: 3130332e3135392e39322e302f32342d3234203d3e20313431313339.roa (hash: D5q5bTHq8BQ04TyBnr4PuuXdKyx0oQAzkOAr8cWDZtM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.crl
rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 09:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:72:a5:fd:25:82:58:cc:01:be:55:7d:29:56:da:9a:17:63:12:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4EA91A6AB8247898ABE5F6A973AC83C2D981279
Validity
Not Before: Sep 20 07:11:07 2026 GMT
Not After : Sep 21 09:21:07 2026 GMT
Subject: CN=01FEF767D2E9625AE5E612AFC38108765363F97B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:23:b8:6d:8d:26:c5:7f:40:2f:ad:c6:3d:
bd:1c:8a:40:43:eb:16:73:e0:ee:c3:e7:9d:80:aa:
b7:f5:8e:82:a9:a2:91:e2:54:86:8c:30:db:b6:a2:
a6:b7:2f:79:e2:79:2d:aa:ae:25:74:60:05:ed:be:
65:6e:ab:cf:00:9a:79:29:a8:c3:c6:2e:42:b9:94:
80:99:56:0b:91:79:61:0f:91:5e:b7:9d:db:33:df:
a8:d0:f9:9b:0b:3b:25:cd:04:cc:75:f1:d4:6c:c4:
61:39:54:3b:99:88:5b:28:42:cd:a3:cd:da:ec:59:
c6:00:61:4f:de:48:70:8b:1d:6e:6a:cc:fc:17:8f:
1b:a7:df:73:f3:5b:1e:5f:a9:62:bb:b8:92:c3:a0:
d8:92:25:f0:50:86:6a:8c:de:8c:5e:d1:7f:a0:b5:
7b:0e:4a:db:24:b0:48:0b:3a:f7:ab:bb:04:84:c8:
95:23:cb:7a:15:79:ed:1c:c5:62:24:e2:8f:7a:3f:
dc:15:7a:44:b9:68:d2:53:ae:c9:10:70:4f:00:14:
67:e3:94:0d:17:6e:1e:94:3f:54:50:c8:35:29:f8:
5e:5c:5e:e4:c3:9a:44:1b:2b:52:f6:cf:6d:ec:0c:
d6:47:ba:ae:a3:4d:28:0f:72:26:47:6f:91:9f:a6:
99:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FE:F7:67:D2:E9:62:5A:E5:E6:12:AF:C3:81:08:76:53:63:F9:7B
X509v3 Authority Key Identifier:
keyid:B4:EA:91:A6:AB:82:47:89:8A:BE:5F:6A:97:3A:C8:3C:2D:98:12:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/B4EA91A6AB8247898ABE5F6A973AC83C2D981279.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ac:67:5b:a5:96:50:f8:5e:6f:44:32:2e:a0:c5:d2:4b:81:
6e:ec:da:a8:ff:2d:c9:fd:2f:ba:66:2b:d4:ac:ad:7e:ae:c2:
d9:81:97:07:f7:17:bf:94:06:e8:70:e2:77:11:18:14:d6:0b:
e9:d3:e3:37:e8:59:0c:0e:24:ea:64:85:91:43:8e:f0:b7:0c:
69:6b:ef:28:4c:e6:0c:3b:19:31:d3:d3:28:3f:aa:3c:3f:91:
2b:e6:60:e1:e9:d5:25:ff:e3:d9:24:40:4e:9c:0b:41:7b:6e:
49:75:86:97:a9:97:f1:e7:0d:33:5d:c6:05:0d:3f:73:ca:bb:
7f:8d:01:53:6d:f8:ea:8f:5c:b4:8e:1e:00:c3:98:f5:ce:5e:
a5:d1:07:5a:75:24:44:d6:a8:42:4e:d1:47:5a:de:2e:23:70:
53:aa:a1:f7:ba:dd:53:e0:2a:6f:7c:ff:a7:b5:76:4d:7c:02:
fc:83:e3:be:8e:f6:ba:9a:97:f1:18:5a:e7:00:f4:ee:f1:54:
14:0f:ca:6f:d0:9e:d3:03:c9:6e:e8:fe:ca:14:52:ed:7f:91:
4c:42:86:27:cb:91:f9:61:b2:e0:9b:f8:4c:77:a7:70:ef:51:
7f:67:15:6f:d9:49:6f:43:b1:ca:18:c2:f9:94:6a:23:19:e8:
1c:0a:cc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:19:13 2026 by rpki-client