
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
File: 484F335D7E0307C0F7FF120F455566A5DD73933A.mft (raw, json)
Hash identifier: H+UMs4UpwzRfS4+W1BAhpvLqQVJQro+5b1KzTz4FXnk=
Subject key identifier: 16:D5:41:6F:F2:C7:83:07:55:7F:6F:95:C5:62:52:58:D9:E0:64:7E
Authority key identifier: 48:4F:33:5D:7E:03:07:C0:F7:FF:12:0F:45:55:66:A5:DD:73:93:3A
Certificate issuer: /CN=484F335D7E0307C0F7FF120F455566A5DD73933A
Certificate serial: 7844F93BA4D8CDF0FFB4C1C6A41510743F039C30
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
Manifest number: A6
Signing time: Wed 02 Sep 2026 10:31:32 +0000
Manifest this update: Wed 02 Sep 2026 10:26:32 +0000
Manifest next update: Thu 03 Sep 2026 13:34:32 +0000
Files and hashes: 1: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: ESQviQfyCrkTtBnJrmVbWeQokiDKSwPNHmI0uyVl6TM=)
2: 484F335D7E0307C0F7FF120F455566A5DD73933A.crl (hash: V1g1LFXmLE4d8fxry4hcglCR5Q4I0SQ9ULHja3GXUUA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.crl
rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 13:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:44:f9:3b:a4:d8:cd:f0:ff:b4:c1:c6:a4:15:10:74:3f:03:9c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484F335D7E0307C0F7FF120F455566A5DD73933A
Validity
Not Before: Sep 2 10:26:32 2026 GMT
Not After : Sep 3 13:34:32 2026 GMT
Subject: CN=16D5416FF2C78307557F6F95C5625258D9E0647E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:6b:0a:a9:b2:2f:83:07:27:a0:59:58:bf:
84:63:bc:c1:59:14:49:60:0b:b4:60:4d:77:73:80:
72:74:5f:0c:6e:6b:57:73:33:14:71:83:cb:43:89:
24:23:4f:49:23:17:2a:f8:13:2b:b3:a0:1c:65:90:
28:13:8f:6b:f7:6f:5e:ae:5b:d8:2a:22:38:49:28:
9a:63:06:b9:59:57:60:4b:5a:83:84:66:fe:6c:94:
63:17:83:d7:7f:2d:4c:e0:48:f6:99:9f:70:9a:4b:
4a:48:88:63:4e:f5:72:0f:2d:10:55:88:ca:2e:bf:
5e:18:55:61:63:ab:24:57:b2:08:04:28:9b:8c:97:
3a:96:62:b1:33:40:98:95:27:28:5d:3b:06:21:3f:
64:81:91:46:5b:9b:05:2d:56:9c:08:e6:0e:79:f9:
ce:93:e6:f5:89:31:bd:de:c1:7d:7a:fe:cd:ba:9c:
90:aa:97:be:a9:85:88:72:fb:0f:50:4a:a3:83:56:
9d:08:b6:96:91:f3:c4:9e:88:41:90:10:a8:d3:dc:
1e:d7:4a:8a:70:12:47:26:85:25:10:06:8a:58:8b:
1f:63:cd:80:55:b8:08:f9:25:77:d0:b0:e6:66:94:
a9:4b:7d:af:51:58:9c:bf:77:aa:a8:ff:21:00:dc:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D5:41:6F:F2:C7:83:07:55:7F:6F:95:C5:62:52:58:D9:E0:64:7E
X509v3 Authority Key Identifier:
keyid:48:4F:33:5D:7E:03:07:C0:F7:FF:12:0F:45:55:66:A5:DD:73:93:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c4:ef:14:94:86:5a:f0:4d:b3:7b:62:04:7c:85:09:55:b1:
fe:ab:83:ae:87:0f:18:74:50:2c:21:37:3b:b8:c7:95:66:96:
f5:e4:e5:b1:f0:f1:57:ec:fa:5f:d3:ce:c8:e7:e4:12:9c:67:
ac:3e:e5:0a:27:43:e7:39:b8:af:fd:bc:a9:45:b5:8e:3b:64:
56:07:41:56:23:7a:05:00:18:73:24:69:fa:70:86:2c:94:5b:
d6:bd:81:b0:d9:34:66:bd:d5:9d:25:63:e4:a8:b8:99:8a:5c:
90:46:79:de:a2:3d:96:d6:1e:e1:b1:10:f7:c7:b3:28:30:a7:
2f:39:af:16:62:01:f9:20:d4:fc:dd:6b:7c:bc:4d:83:00:64:
74:57:b9:b5:9e:8b:1d:42:c4:a1:36:1d:5c:00:c3:80:ce:40:
8e:9d:b6:7c:ed:b6:af:e4:d5:36:3f:8f:1d:b7:d4:15:f0:ae:
2a:bd:be:c5:e8:03:c9:87:97:a4:ef:d8:9f:05:d8:6c:3e:65:
80:72:ba:1c:97:01:d1:b2:2b:4a:da:c4:cd:9c:31:23:e2:e3:
4c:f9:a7:21:e8:6c:22:c3:19:ac:f1:e4:01:be:65:95:5f:56:
79:0f:b2:6f:ad:ad:a3:4a:d6:a6:bd:96:65:5c:1d:bb:80:a3:
d0:fd:88:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:56:54 2026 by rpki-client