
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
File: 46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft (raw, json)
Hash identifier: OUZnavcnJEErwyTqTARpPJDXMSK3P81fzYA/iok+u/k=
Subject key identifier: 16:BF:18:33:38:5B:94:59:34:74:B3:24:68:A2:CD:2D:FB:8E:85:B3
Authority key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
Certificate issuer: /CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Certificate serial: 0DA1F3E678C4D4DBF3D6E7B9EF260848D90D7B76
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
Manifest number: A5
Signing time: Wed 02 Sep 2026 15:57:31 +0000
Manifest this update: Wed 02 Sep 2026 15:52:31 +0000
Manifest next update: Thu 03 Sep 2026 16:13:31 +0000
Files and hashes: 1: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: uXr8DnKi8QtOAVEEstmImQaN4M7bPiEAwEuGTottsCo=)
2: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: NpxuTMED+KkFsvGBsqYNwDD7Wr7ndBd2FBb62eDZGAI=)
3: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: P3rNCMyzAiokg7rVA737lP8Lovb0gWKaIdt9sIaalEY=)
4: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: 1okkgqoiBVDWBMw8B8fUz+WUWSrHUDprl2WG1iMqp8w=)
5: 46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl (hash: Res4hBP5MOyNkniE8kgRA2zmth7kMZQPmrIbXe/6p7c=)
6: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: jcwrytSrVr9iAZjPRv58Wx2zSE/xYS0utsjnTbXZlh8=)
7: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: WTtSNSnNo9oz9/i7rHt1jxuFUkS6d/teW8M9wk46Nik=)
8: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: oJrAXv58oZDMk40W9JRPwNDx1VF9IQdEUdgQPzLFkmg=)
9: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: 8IXeZT2nMIplDuKAy9sTdwidwLtl6QHRFLk7GQI0XlE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 16:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a1:f3:e6:78:c4:d4:db:f3:d6:e7:b9:ef:26:08:48:d9:0d:7b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Validity
Not Before: Sep 2 15:52:31 2026 GMT
Not After : Sep 3 16:13:31 2026 GMT
Subject: CN=16BF1833385B94593474B32468A2CD2DFB8E85B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a9:75:16:5e:72:78:ec:71:1f:b5:2f:bc:ef:
9a:7b:f8:4f:11:25:ae:07:63:10:d1:c5:30:a9:7c:
5f:68:74:3e:f4:2f:78:ed:a1:8a:7f:2c:d5:36:b6:
4b:f3:34:5d:99:0b:f9:5e:1b:bb:f6:ce:d0:88:69:
45:de:67:93:bc:39:bb:11:88:73:ac:c5:64:ad:b0:
a8:cb:a3:3a:02:4b:fb:41:d5:19:dc:ef:6a:79:6c:
4b:4a:a2:bc:ad:d1:5c:12:32:98:f0:7e:ae:9a:fb:
00:f1:90:ec:d0:27:20:33:6a:3b:af:cf:b3:d7:bd:
f7:3d:48:7f:f5:92:09:8c:26:d8:18:0b:eb:94:8e:
c4:88:b8:b8:05:9e:09:61:1b:3b:73:a9:bc:49:45:
56:75:8b:91:37:20:3f:9e:f7:6d:47:58:e2:5a:f7:
e2:29:b8:b6:af:2f:2b:24:e6:a7:6a:41:99:9c:2e:
13:50:32:e0:d3:1b:bc:d3:87:a8:f6:54:0a:f3:f5:
96:c9:ef:0b:96:86:92:84:fb:84:93:98:a7:c6:76:
13:88:e8:f0:5f:cd:ea:3b:cc:d4:48:5d:b8:71:64:
24:2e:7f:cc:8f:25:12:51:72:88:26:c7:1d:7d:45:
33:6a:2d:6d:a5:c9:85:6c:81:7d:5e:83:4b:ee:05:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BF:18:33:38:5B:94:59:34:74:B3:24:68:A2:CD:2D:FB:8E:85:B3
X509v3 Authority Key Identifier:
keyid:46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:00:70:cd:c5:d4:cb:19:d4:7e:91:46:aa:76:69:3b:59:8d:
53:3d:65:46:67:58:50:8c:da:92:f0:31:7e:36:0a:fd:0e:90:
c1:c7:8e:6a:81:f2:28:d4:e9:5b:9f:53:5c:f9:cd:90:1d:ef:
1c:f2:5b:6d:62:bc:bb:20:aa:7b:db:5b:96:94:cb:83:b2:af:
f8:32:63:6d:f0:d1:44:60:26:5c:25:97:b8:29:34:8b:fc:83:
c5:f7:82:de:15:0a:51:63:b1:65:db:b4:4f:68:04:44:9f:b9:
87:c0:c8:13:45:87:2d:df:b7:c5:21:76:ec:3d:90:db:a6:5b:
8b:45:df:50:4c:d1:ea:f1:b5:2e:ba:b8:aa:10:a0:31:ec:77:
fc:af:e6:58:c3:0d:bd:81:1f:e8:2d:c7:cb:34:1e:2a:80:44:
fe:4e:88:18:0d:15:9d:ae:76:09:0d:1a:a5:de:ff:da:e3:aa:
56:37:13:01:51:a0:56:d8:b8:94:0e:6c:35:74:f8:3f:ee:5d:
59:2f:d4:17:0c:d1:4e:77:db:f2:6d:d4:31:7d:56:2c:20:45:
a2:e5:db:2f:dd:e3:b6:fa:b3:a6:45:37:b5:ff:13:36:bd:03:
d7:3a:96:14:42:d7:42:ab:4e:ff:bf:92:5b:1e:ea:76:56:5c:
e5:b0:33:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 03:13:19 2026 by rpki-client