
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft
File: 71468BECC53B96325385ED8BB32F3639F1F5E487.mft (raw, json)
Hash identifier: gCXALdVhKBJumJCd+VeB5NlNLjYERY/BRuM3qYxlQ0w=
Subject key identifier: 84:91:B8:EA:F5:C0:C2:D9:93:BF:6A:1E:81:C8:2A:29:25:B0:A4:BD
Authority key identifier: 71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87
Certificate issuer: /CN=71468BECC53B96325385ED8BB32F3639F1F5E487
Certificate serial: 236CA3C797C6E077862556DB894996112D9908
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft
Manifest number: F5
Signing time: Mon 02 Nov 2026 02:51:06 +0000
Manifest this update: Mon 02 Nov 2026 02:46:06 +0000
Manifest next update: Tue 03 Nov 2026 02:55:06 +0000
Files and hashes: 1: 3130332e36362e33362e302f32342d3234203d3e20313530323233.roa (hash: cbw+qMwfHCXDiTnr7sY/MlfwfCUda213WDrCyTfAh4Y=)
2: 71468BECC53B96325385ED8BB32F3639F1F5E487.crl (hash: P6Z3VggRc2Ytf3NQ6jmUkiLjSIXnWeppxcSIKLq43Dg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.crl
rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 02:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:6c:a3:c7:97:c6:e0:77:86:25:56:db:89:49:96:11:2d:99:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71468BECC53B96325385ED8BB32F3639F1F5E487
Validity
Not Before: Nov 2 02:46:06 2026 GMT
Not After : Nov 3 02:55:06 2026 GMT
Subject: CN=8491B8EAF5C0C2D993BF6A1E81C82A2925B0A4BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:a6:93:49:76:71:0d:83:87:fe:8d:81:3b:
28:10:92:ee:aa:72:cb:0f:c3:61:5a:db:97:94:ba:
ec:a6:a9:98:46:16:9c:81:77:fd:f1:44:19:3f:cf:
a5:4e:23:cd:f3:0b:02:24:63:f4:e2:27:ae:d3:76:
08:6e:17:c4:05:da:6e:d7:5c:bf:73:c7:ea:02:5c:
52:b4:56:58:19:da:d2:d6:3c:97:11:93:ee:4c:6d:
85:c7:5a:0f:b0:98:51:02:47:3b:aa:23:cc:43:f4:
7e:2f:7a:78:68:5c:16:2c:d3:6d:14:85:0a:35:c4:
52:1f:65:e5:18:b5:4c:bc:6f:01:b4:49:68:a7:2b:
0b:47:2c:d8:1a:8a:38:3f:7f:d9:a0:f6:e2:f7:30:
35:12:47:82:63:2f:42:36:61:7f:58:9e:2e:51:a2:
3f:ac:32:68:b4:03:08:99:e3:f5:fd:ad:b2:99:0d:
87:8b:88:f2:c8:2d:d6:c3:86:76:a7:90:bd:d8:cd:
04:7a:91:59:64:4b:57:43:a6:9b:3e:a4:45:01:4f:
1f:97:26:43:0e:00:3d:68:63:65:39:23:bb:6d:d6:
65:9a:0c:39:e4:1e:bf:d3:13:48:d0:df:2b:12:47:
7a:cc:fe:1b:22:67:32:d4:70:20:cd:08:5e:7f:cf:
8c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:91:B8:EA:F5:C0:C2:D9:93:BF:6A:1E:81:C8:2A:29:25:B0:A4:BD
X509v3 Authority Key Identifier:
keyid:71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5c:f8:e8:59:e1:c0:df:1d:4c:1d:b2:46:97:84:2b:06:ad:
ea:5d:09:08:d8:6d:9d:9c:57:27:24:3b:30:f5:5d:6b:7e:b8:
69:90:48:85:65:d4:32:2c:f4:ab:8c:16:48:ec:67:f8:a6:8a:
a2:f0:5e:96:e6:7b:2b:29:10:5f:52:10:ae:84:98:b1:73:9a:
11:a3:c5:96:ee:79:25:63:48:f3:7d:ac:5d:08:25:14:3f:3b:
ee:8b:4d:58:9f:ea:bd:dd:26:fc:b2:e5:e4:95:d1:c3:95:4e:
c2:12:1c:7b:30:5e:72:bf:bc:f2:7e:a7:3f:87:f0:73:df:15:
0b:5b:90:2f:4f:16:84:53:23:b3:7b:c8:85:57:f5:15:05:11:
b2:5e:b3:e5:d3:80:92:ff:09:43:8b:06:48:3e:7f:c0:46:92:
d6:3a:3e:5e:a4:d4:ff:c6:5a:2c:14:0c:d2:62:cb:1b:e0:ee:
ac:6e:2b:28:58:6d:95:ae:89:8c:fb:02:d3:3e:9c:d0:07:3b:
d4:77:b1:d5:09:fd:b0:ab:02:44:46:6a:ab:b8:51:0f:63:2d:
a5:a0:67:47:77:35:63:6d:05:6d:ed:ad:30:7c:35:08:bc:40:
87:11:dd:48:c4:42:4f:f3:cf:6d:85:2b:9e:77:64:e7:38:f2:
d4:14:76:2a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgITI2yjx5fG4HeGJVbbiUmWES2ZCDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg3MTQ2OEJFQ0M1M0I5NjMyNTM4NUVEOEJCMzJGMzYzOUYx
RjVFNDg3MB4XDTI2MTEwMjAyNDYwNloXDTI2MTEwMzAyNTUwNlowMzExMC8GA1UE
AxMoODQ5MUI4RUFGNUMwQzJEOTkzQkY2QTFFODFDODJBMjkyNUIwQTRCRDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMLyppNJdnENg4f+jYE7KBCS7qpy
yw/DYVrbl5S67KapmEYWnIF3/fFEGT/PpU4jzfMLAiRj9OInrtN2CG4XxAXabtdc
v3PH6gJcUrRWWBna0tY8lxGT7kxthcdaD7CYUQJHO6ojzEP0fi96eGhcFizTbRSF
CjXEUh9l5Ri1TLxvAbRJaKcrC0cs2BqKOD9/2aD24vcwNRJHgmMvQjZhf1ieLlGi
P6wyaLQDCJnj9f2tspkNh4uI8sgt1sOGdqeQvdjNBHqRWWRLV0Ommz6kRQFPH5cm
Qw4APWhjZTkju23WZZoMOeQev9MTSNDfKxJHesz+GyJnMtRwIM0IXn/PjHcCAwEA
AaOCAjwwggI4MB0GA1UdDgQWBBSEkbjq9cDC2ZO/ah6ByCopJbCkvTAfBgNVHSME
GDAWgBRxRovsxTuWMlOF7YuzLzY58fXkhzAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud
HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81
MmRiZDc4NS02YmNhLTQ5M2ItOGE2NS0zYjUyNzcwMDdmZWQvMC83MTQ2OEJFQ0M1
M0I5NjMyNTM4NUVEOEJCMzJGMzYzOUYxRjVFNDg3LmNybDByBggrBgEFBQcBAQRm
MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw
by9JRE5JQy8xLzcxNDY4QkVDQzUzQjk2MzI1Mzg1RUQ4QkIzMkYzNjM5RjFGNUU0
ODcuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81MmRiZDc4NS02YmNhLTQ5M2ItOGE2
NS0zYjUyNzcwMDdmZWQvMC83MTQ2OEJFQ0M1M0I5NjMyNTM4NUVEOEJCMzJGMzYz
OUYxRjVFNDg3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAPlz46FnhwN8dTB2yRpeEKwat6l0JCNhtnZxX
JyQ7MPVda364aZBIhWXUMiz0q4wWSOxn+KaKovBeluZ7KykQX1IQroSYsXOaEaPF
lu55JWNI832sXQglFD877otNWJ/qvd0m/LLl5JXRw5VOwhIcezBecr+88n6nP4fw
c98VC1uQL08WhFMjs3vIhVf1FQURsl6z5dOAkv8JQ4sGSD5/wEaS1jo+XqTU/8Za
LBQM0mLLG+DurG4rKFhtla6JjPsC0z6c0Ac71Hex1Qn9sKsCREZqq7hRD2MtpaBn
R3c1Y20Fbe2tMHw1CLxAhxHdSMRCT/PPbYUrnndk5zjy1BR2Kg==
-----END CERTIFICATE-----
Generated at Mon Nov 2 07:29:48 2026 by rpki-client