
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
File: A479BE8A2AB736997799C5EDD19DCC1E14080951.mft (raw, json)
Hash identifier: HWEpPCnGoPN2cwqtR1oNfxRF/lHx5yF/ehlgO5Gufyw=
Subject key identifier: 5A:5A:38:CF:D2:48:BA:25:F7:9F:7A:7C:DF:2E:F3:6B:FE:61:AE:E3
Authority key identifier: A4:79:BE:8A:2A:B7:36:99:77:99:C5:ED:D1:9D:CC:1E:14:08:09:51
Certificate issuer: /CN=A479BE8A2AB736997799C5EDD19DCC1E14080951
Certificate serial: 124F21AFFC01265140355A6A2B86D69D46189E77
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
Manifest number: F4
Signing time: Mon 02 Nov 2026 02:51:10 +0000
Manifest this update: Mon 02 Nov 2026 02:46:10 +0000
Manifest next update: Tue 03 Nov 2026 04:33:10 +0000
Files and hashes: 1: 3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa (hash: JhxXluduCB+TXKw1xbSPk6SI13kYg9YOWrV+vNWa+co=)
2: A479BE8A2AB736997799C5EDD19DCC1E14080951.crl (hash: IOq22LT1V74MRde4qwh/xRpjP7fNQAh70ch+iGHoCZM=)
3: 3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa (hash: OwuNAyMCdQqzVBOVJzr7kPThUt6VdOd9CvAXA9Sod0M=)
4: 3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa (hash: x5ipZlEC8pQiu8/sOKh5VKkOUz8rWzbz+F73T1RcjPM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.crl
rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 04:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4f:21:af:fc:01:26:51:40:35:5a:6a:2b:86:d6:9d:46:18:9e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A479BE8A2AB736997799C5EDD19DCC1E14080951
Validity
Not Before: Nov 2 02:46:10 2026 GMT
Not After : Nov 3 04:33:10 2026 GMT
Subject: CN=5A5A38CFD248BA25F79F7A7CDF2EF36BFE61AEE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:99:8f:33:c3:ee:36:6e:90:82:a6:ea:eb:
48:63:04:13:56:ee:a7:8d:5e:0b:17:b7:c0:dd:0a:
34:52:89:29:bb:a4:5c:af:d1:ea:96:d9:1d:a2:11:
a7:ee:75:7c:8e:16:85:cb:2d:d4:ba:6e:63:b2:59:
0e:73:4e:ac:23:03:91:3a:e3:18:6a:fd:00:f8:2a:
27:0f:70:8c:6b:06:d9:af:75:ac:82:38:6f:eb:3e:
57:ac:cf:08:f3:55:a0:2b:09:fb:7d:ce:95:52:fd:
96:78:79:c6:0a:00:f4:d8:8a:5e:25:59:ac:db:75:
98:b3:48:9e:b2:3b:31:85:9b:63:7e:15:bd:2c:c1:
bb:9d:7d:73:cb:48:0b:dd:cd:de:23:b8:62:ce:ce:
d1:a6:ee:bf:65:1b:6e:2e:e7:24:29:63:99:e3:76:
ce:c6:02:11:f2:b6:a9:1e:6d:57:29:96:95:fd:71:
82:10:b3:4d:cd:f4:bd:ac:7a:d3:bb:7f:a8:43:62:
e9:bf:6b:e1:8a:27:cc:e7:be:88:9e:98:25:91:7c:
ab:53:5e:81:96:69:a5:df:3c:b3:74:dd:50:2b:d1:
7f:f5:a0:a8:37:a9:c9:6e:cd:a5:1c:2b:5c:0c:e5:
1a:ad:51:54:6c:0f:35:e5:47:9c:0b:69:1f:73:b6:
c7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5A:38:CF:D2:48:BA:25:F7:9F:7A:7C:DF:2E:F3:6B:FE:61:AE:E3
X509v3 Authority Key Identifier:
keyid:A4:79:BE:8A:2A:B7:36:99:77:99:C5:ED:D1:9D:CC:1E:14:08:09:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fb:6f:96:82:06:68:a8:61:fe:f1:4d:6b:82:e3:b2:01:8d:
b3:bc:7b:02:2c:67:3a:41:40:a6:f9:eb:7d:ad:6f:81:0b:68:
9a:7c:89:6f:e8:c6:76:de:62:a9:0e:ef:0c:17:bf:c2:d9:95:
0d:81:8b:54:c2:b4:3b:5e:50:54:fc:6f:0f:d8:a1:6e:ae:10:
be:5c:31:2e:10:ce:ab:31:96:2b:47:f0:87:d9:3e:3f:56:b8:
db:44:4c:8c:41:bb:3f:f6:25:79:2b:c1:54:f0:8d:ce:72:1a:
8c:e3:bd:b0:77:52:be:24:4a:54:b0:ce:36:51:98:31:84:e3:
23:7c:b9:ad:af:c8:1c:ab:7c:20:ed:f9:a0:c2:e4:45:8e:da:
aa:f1:83:44:f0:88:9c:35:06:16:22:d6:cd:9c:62:3b:e7:5e:
6a:84:5d:5a:0e:bb:ec:6a:6a:ba:9b:c4:b4:4e:a3:5f:20:ce:
33:f1:7c:f6:ee:6f:61:70:4b:d5:69:a0:65:ef:54:a0:c1:c7:
a3:ce:3e:06:56:b2:81:3d:cd:41:c5:ea:ac:d9:49:97:f6:51:
89:03:52:1b:64:d8:b3:cb:d1:31:a1:fe:cf:62:96:8f:01:d7:
1d:41:6a:6e:ae:39:5e:09:87:71:d2:8b:91:cf:a0:ab:a3:89:
5a:dc:e4:3c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEk8hr/wBJlFANVpqK4bWnUYYnncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ3OUJFOEEyQUI3MzY5OTc3OTlDNUVERDE5RENDMUUx
NDA4MDk1MTAeFw0yNjExMDIwMjQ2MTBaFw0yNjExMDMwNDMzMTBaMDMxMTAvBgNV
BAMTKDVBNUEzOENGRDI0OEJBMjVGNzlGN0E3Q0RGMkVGMzZCRkU2MUFFRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClXpmPM8PuNm6Qgqbq60hjBBNW
7qeNXgsXt8DdCjRSiSm7pFyv0eqW2R2iEafudXyOFoXLLdS6bmOyWQ5zTqwjA5E6
4xhq/QD4KicPcIxrBtmvdayCOG/rPleszwjzVaArCft9zpVS/ZZ4ecYKAPTYil4l
WazbdZizSJ6yOzGFm2N+Fb0swbudfXPLSAvdzd4juGLOztGm7r9lG24u5yQpY5nj
ds7GAhHytqkebVcplpX9cYIQs03N9L2setO7f6hDYum/a+GKJ8znvoiemCWRfKtT
XoGWaaXfPLN03VAr0X/1oKg3qcluzaUcK1wM5RqtUVRsDzXlR5wLaR9ztscRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUWlo4z9JIuiX3n3p83y7za/5hruMwHwYDVR0j
BBgwFoAUpHm+iiq3Npl3mcXt0Z3MHhQICVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjJkYWE5NWYtMmY1OS00MzlhLTgzNGYtYTcyMWMzNzJhNzRjLzAvQTQ3OUJFOEEy
QUI3MzY5OTc3OTlDNUVERDE5RENDMUUxNDA4MDk1MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNDc5QkU4QTJBQjczNjk5Nzc5OUM1RUREMTlEQ0MxRTE0MDgw
OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjJkYWE5NWYtMmY1OS00MzlhLTgz
NGYtYTcyMWMzNzJhNzRjLzAvQTQ3OUJFOEEyQUI3MzY5OTc3OTlDNUVERDE5REND
MUUxNDA4MDk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABP7b5aCBmioYf7xTWuC47IBjbO8ewIsZzpB
QKb5632tb4ELaJp8iW/oxnbeYqkO7wwXv8LZlQ2Bi1TCtDteUFT8bw/YoW6uEL5c
MS4QzqsxlitH8IfZPj9WuNtETIxBuz/2JXkrwVTwjc5yGozjvbB3Ur4kSlSwzjZR
mDGE4yN8ua2vyByrfCDt+aDC5EWO2qrxg0TwiJw1BhYi1s2cYjvnXmqEXVoOu+xq
arqbxLROo18gzjPxfPbub2FwS9VpoGXvVKDBx6POPgZWsoE9zUHF6qzZSZf2UYkD
Uhtk2LPL0TGh/s9ilo8B1x1Bam6uOV4Jh3HSi5HPoKujiVrc5Dw=
-----END CERTIFICATE-----
Generated at Mon Nov 2 14:16:47 2026 by rpki-client