
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
File: 0446D571B5FD57D22786B0872C74829904EAAB9F.mft (raw, json)
Hash identifier: L7kFvZiRIjl8aLngkpOv0RwGviBOUHi7B+HT/v+uiBU=
Subject key identifier: 3A:CC:8C:B5:25:DF:60:22:89:8F:24:DC:F3:14:42:E9:4F:59:DE:AF
Authority key identifier: 04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F
Certificate issuer: /CN=0446D571B5FD57D22786B0872C74829904EAAB9F
Certificate serial: 0BA26218CF0251A840CA21A35E6B0BFE1CBC096E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
Manifest number: 56
Signing time: Sat 04 Jul 2026 12:02:10 +0000
Manifest this update: Sat 04 Jul 2026 11:57:10 +0000
Manifest next update: Sun 05 Jul 2026 15:45:10 +0000
Files and hashes: 1: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: K+7+KqgCp4d18TVZTPxmAsUlKSyTdPx9xS3oBJGcNok=)
2: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: RykC0CgepUzoO/XGaABN4CTb5JdoVGJrzeKzsVUCn3M=)
3: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: ecVKsNk2S0Aj+ACqfjrNpX8pv8RXijVnKVy2HYKiIA0=)
4: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: thRIrZ3+blRuGrSxkOAlYh2ltCPP95UB2kgDE2dzqA4=)
5: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: aC4RLZpJ1CIL1Btz47Fr7aIh879KOm3isCxWG9+kLpI=)
6: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: +WRWxjAdOAaW9ozUiBysIyJuRRO3IGup2Zv05rrzhoE=)
7: 0446D571B5FD57D22786B0872C74829904EAAB9F.crl (hash: /ka26hF+PaBkbk36to19dK8mkJ6NAPimDjAUWFE51ik=)
8: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: HRGJ5g7ob2C6LusF30ZyigavwWaGRf5eI1zjWJC6sRM=)
9: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: kaGHUTZEr4BI633+KX6qHXh8OmneAQRf7YHLIlmtSgU=)
10: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: JHRytoLKe3DoWLn6hLaaCfBPYIXsYxniAiTb3PYHUfQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl
rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Jul 2026 15:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a2:62:18:cf:02:51:a8:40:ca:21:a3:5e:6b:0b:fe:1c:bc:09:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0446D571B5FD57D22786B0872C74829904EAAB9F
Validity
Not Before: Jul 4 11:57:10 2026 GMT
Not After : Jul 5 15:45:10 2026 GMT
Subject: CN=3ACC8CB525DF6022898F24DCF31442E94F59DEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:b4:d2:ae:29:2b:f2:03:0d:47:d1:c0:ad:
84:4f:bf:6a:c5:3d:bf:c5:cd:72:ef:30:cb:32:95:
60:36:62:2c:2c:2b:c9:2b:c1:67:d4:d2:cc:de:7b:
12:2a:67:0c:fe:35:cd:4f:0f:9a:dd:72:63:1f:25:
e8:56:3f:88:4b:f2:2f:ea:ce:9f:df:d4:34:89:67:
71:e7:27:39:b2:9e:ce:ce:07:0d:37:6e:19:01:64:
ea:93:e6:90:98:d6:8f:cf:be:3f:f1:7a:95:e3:4c:
e5:7f:6b:0b:b1:75:57:e4:95:84:5a:f8:c2:f4:6f:
29:79:ae:f5:4f:5a:20:ec:56:23:19:4f:b2:01:fe:
a9:45:a8:cf:8a:cd:c4:d0:02:70:a5:22:ef:5c:1d:
26:5a:68:5b:b4:4b:c0:57:01:9c:4a:ee:5d:2c:3b:
c2:56:27:e0:f1:59:e3:2e:65:48:52:ae:5c:14:ca:
58:f3:2a:4c:34:2c:fa:f1:60:e6:9b:20:2b:e8:91:
ca:d5:64:54:d0:7e:c9:4d:26:04:b5:f1:f5:39:8a:
25:b6:95:c0:d8:4f:20:74:bb:aa:fd:cd:f8:a1:4e:
e7:51:16:4f:97:be:ce:06:f8:0f:8f:84:5b:2a:f6:
16:be:cc:9e:29:4c:39:d0:20:67:da:d6:2b:8f:be:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CC:8C:B5:25:DF:60:22:89:8F:24:DC:F3:14:42:E9:4F:59:DE:AF
X509v3 Authority Key Identifier:
keyid:04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3a:90:7e:f6:09:fd:43:73:dc:20:5a:ce:73:54:82:32:92:
7a:aa:8c:54:01:c9:e7:65:6b:8d:e2:0d:cd:2e:df:97:75:96:
9d:4f:c0:77:91:c5:3e:1d:ea:51:1f:95:00:38:52:a2:97:24:
b9:79:ce:d8:c1:cc:39:75:56:fa:a9:50:1e:6b:7b:d2:db:a8:
f9:90:91:9b:cc:d2:64:db:f9:c8:8f:65:f2:57:0c:42:0b:7c:
d8:b3:37:cc:74:78:87:12:b4:de:89:e0:44:02:65:87:c6:f2:
99:f9:8d:7a:04:29:43:c5:7d:bb:6d:0e:c2:57:78:8c:31:7f:
9c:8e:0c:32:3c:47:6f:04:e8:bc:1a:06:dd:a2:e7:57:c5:1e:
a7:03:e2:64:40:32:ee:74:2f:fd:4f:3b:67:8f:1e:93:9d:3f:
61:82:1c:70:20:2a:0b:ec:f4:ad:85:4f:07:1f:a4:08:e6:82:
95:f5:a8:4f:7a:1c:f7:cf:ce:08:58:da:39:cd:43:ad:3d:36:
f6:81:ca:30:57:60:8c:9f:8f:5b:54:be:61:8a:80:ab:45:34:
06:06:6b:6e:66:89:c9:84:a3:9c:06:be:6a:18:e6:64:36:56:
a8:ac:51:05:5e:8d:ce:03:6f:6a:56:63:2a:11:55:41:c4:54:
4c:17:65:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 03:54:21 2026 by rpki-client