
$ rpki-client -vvf rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft
File: 479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft (raw, json)
Hash identifier: nnMF4CgYhFsHZIs4Ah9WnU5NAnpX5v2OSZROeA9VKp4=
Subject key identifier: 42:D8:5C:97:45:5A:DA:E5:37:71:5D:00:71:2E:EF:00:1D:4C:3D:DE
Authority key identifier: 47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6
Certificate issuer: /CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6
Certificate serial: 0837A7B9EDCD37241F254FE7A702B96E633DA1E7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft
Manifest number: 69
Signing time: Sun 19 Jul 2026 07:41:34 +0000
Manifest this update: Sun 19 Jul 2026 07:36:34 +0000
Manifest next update: Mon 20 Jul 2026 08:13:34 +0000
Files and hashes: 1: 479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl (hash: BAcuj3i/1OFLlAplZEzPUx7MochcWgKjwmHflmDyHbo=)
2: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: Cw+u02HjQBz4UCjHcubQmRW6z/LpqGrri/10Si/nkow=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl
rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Jul 2026 08:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:37:a7:b9:ed:cd:37:24:1f:25:4f:e7:a7:02:b9:6e:63:3d:a1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6
Validity
Not Before: Jul 19 07:36:34 2026 GMT
Not After : Jul 20 08:13:34 2026 GMT
Subject: CN=42D85C97455ADAE537715D00712EEF001D4C3DDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:bb:ac:ae:fd:77:9c:66:68:73:f9:a9:88:
8c:ef:75:74:db:c4:08:5a:83:d1:45:f8:f5:65:01:
b3:1f:ec:74:5f:49:11:19:e0:d4:51:a7:80:40:82:
87:94:7f:72:ab:3d:29:ea:28:c9:e6:94:13:f2:b3:
79:5e:17:9f:28:8e:78:6a:f3:4c:72:c3:41:f6:5a:
9c:50:dd:32:6a:f4:51:b1:96:41:cc:47:44:79:e0:
a8:5d:5e:d5:4e:4e:ed:ef:24:46:c1:2d:51:b9:c0:
0c:a8:ca:4a:e7:8c:99:3b:a8:e0:86:b2:04:15:7d:
e7:be:52:1f:20:64:fb:7a:a4:8b:96:5c:7f:8b:77:
c6:a6:8c:7d:b3:42:2c:9a:1f:97:1a:61:b7:22:c2:
96:7a:c2:18:af:c0:43:c6:e8:c2:b2:84:d6:c2:60:
36:67:10:30:26:98:a2:54:ce:0e:73:32:88:6f:29:
bd:f7:18:9b:1d:6f:ad:49:22:fb:09:e8:7a:1f:75:
88:21:83:2b:71:8b:02:fd:d1:78:de:fb:ef:b1:79:
f6:36:ca:b8:c6:34:3f:90:b4:2e:6e:18:82:44:17:
1a:75:dd:cb:2a:3a:fb:f6:12:60:a5:0d:d4:95:2e:
1e:83:f7:eb:24:9d:f3:97:4c:31:89:5b:f6:b5:18:
09:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D8:5C:97:45:5A:DA:E5:37:71:5D:00:71:2E:EF:00:1D:4C:3D:DE
X509v3 Authority Key Identifier:
keyid:47:9B:92:8D:BE:E9:00:1B:99:B2:1F:C3:CA:0B:A5:F3:7D:10:CC:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/479B928DBEE9001B99B21FC3CA0BA5F37D10CCA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b1:c7:0c:45:15:84:b9:ca:53:73:ba:6a:b8:d1:e0:b7:6f:
31:ff:11:f5:57:5b:c9:f5:be:b8:ba:87:f6:81:db:8c:1a:18:
33:ce:68:03:fc:9a:8a:33:6d:90:dd:00:fd:f1:14:cf:ab:1f:
01:e5:85:9e:2e:71:c9:57:2a:d6:f3:57:2b:ee:9a:2d:c1:d0:
e2:64:fe:e5:bc:9a:8f:5a:0c:8c:10:93:c3:83:8c:01:4e:02:
ed:15:07:ed:58:fc:20:44:7c:10:c0:eb:c1:89:19:7f:ca:69:
96:74:6a:6b:49:17:08:6c:d1:7e:eb:66:07:d2:e7:92:73:03:
14:33:76:8b:75:26:2a:11:63:a9:ce:94:0c:e5:fc:e9:db:d3:
b6:d6:e2:a8:9a:bb:bb:82:e5:70:87:3b:08:64:73:b2:60:52:
50:72:50:33:01:44:63:29:50:97:c5:c6:9d:2a:da:f7:05:8c:
42:19:39:c1:af:b4:f6:b5:ab:02:41:49:11:61:85:3f:cb:47:
a7:5c:62:59:b8:79:f0:be:4c:69:3c:d2:bf:ec:a2:8e:45:fe:
0e:85:4a:0e:5b:b8:5e:48:73:ba:43:92:fe:ae:1a:26:c3:87:
47:5b:71:2d:57:32:d5:e0:77:21:47:28:63:33:8a:50:08:fc:
28:a1:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 23:58:08 2026 by rpki-client