
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
File: 4493CC2E574126EF2608CAE173DD92103E76A98C.mft (raw, json)
Hash identifier: 8zxjiP/1SYWQxBUimbURidR4e8+eUZtXQ69rTGE6uRQ=
Subject key identifier: F5:0E:43:13:8B:55:36:C0:6C:DD:FD:D6:60:23:FD:F4:BA:C3:DD:FF
Authority key identifier: 44:93:CC:2E:57:41:26:EF:26:08:CA:E1:73:DD:92:10:3E:76:A9:8C
Certificate issuer: /CN=4493CC2E574126EF2608CAE173DD92103E76A98C
Certificate serial: 53094955C0970B52C0397F9AC046998403337C80
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
Manifest number: F7
Signing time: Tue 03 Nov 2026 15:52:33 +0000
Manifest this update: Tue 03 Nov 2026 15:47:33 +0000
Manifest next update: Wed 04 Nov 2026 18:03:33 +0000
Files and hashes: 1: 4493CC2E574126EF2608CAE173DD92103E76A98C.crl (hash: z86kdt3HA4AWjdjCSRT36LsIBDeqdbthNa7ffk7uRyw=)
2: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: M2aI0TJnAz0O76NPtC1fdB1sxAIiTB3vENA8aunOOWY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.crl
rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 12:58:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:09:49:55:c0:97:0b:52:c0:39:7f:9a:c0:46:99:84:03:33:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4493CC2E574126EF2608CAE173DD92103E76A98C
Validity
Not Before: Nov 3 15:47:33 2026 GMT
Not After : Nov 4 18:03:33 2026 GMT
Subject: CN=F50E43138B5536C06CDDFDD66023FDF4BAC3DDFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:3a:d4:2d:49:98:05:a3:77:f3:2f:ea:44:
6c:ee:e4:1e:f4:c7:aa:92:4d:25:20:53:9b:a3:86:
56:b6:5c:54:af:b3:80:be:12:a7:66:20:02:62:0e:
7c:61:d3:db:84:d5:11:c6:cd:e1:0e:0e:06:05:4e:
30:cf:fb:4e:27:5a:1a:c3:dd:23:00:6d:75:d0:bf:
9b:4f:20:bb:b1:28:a0:13:62:94:1a:73:19:71:30:
46:1f:7f:8c:00:4e:3d:eb:4b:72:21:f1:32:ab:5a:
1a:82:67:23:5e:14:5b:c7:4a:49:a2:2f:3a:49:51:
5f:9a:7e:b2:1c:f6:a4:82:e4:ae:ab:66:90:b2:7e:
1d:05:b7:01:55:6a:76:2d:95:bd:ba:42:d2:23:fc:
3b:07:1e:17:bf:bc:9f:2e:dc:5a:7b:37:fc:a1:1c:
b7:19:00:31:99:07:9f:4e:cf:81:48:d7:2b:1b:b6:
81:56:a2:2c:98:2d:81:80:a7:3c:8d:38:28:54:85:
5e:39:d6:d7:00:2f:bc:85:81:18:83:cd:bb:8b:93:
f1:8a:69:c4:53:95:a9:84:ff:5c:f7:7f:ce:2c:a6:
76:4d:6e:9d:df:48:9d:9b:88:b2:c9:f4:b3:11:92:
bb:8f:a5:4f:d5:87:fa:21:40:55:a9:e2:78:ff:99:
dd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0E:43:13:8B:55:36:C0:6C:DD:FD:D6:60:23:FD:F4:BA:C3:DD:FF
X509v3 Authority Key Identifier:
keyid:44:93:CC:2E:57:41:26:EF:26:08:CA:E1:73:DD:92:10:3E:76:A9:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b7:5c:1b:99:b8:e4:28:ae:48:41:51:fe:46:cf:fa:8f:5a:
6e:da:9a:86:83:2e:fa:d0:c9:e8:43:53:18:70:ed:25:19:e3:
73:a9:70:78:e1:92:2a:26:2f:d2:30:00:93:35:8d:a0:c7:75:
cc:5c:b7:37:70:8b:f1:83:df:5e:b5:ab:58:b2:c5:5c:28:62:
1c:91:ba:79:3b:63:ee:6f:24:fb:25:0c:a5:d4:a9:ad:6d:58:
d6:ad:b4:c8:88:38:c5:62:c7:8d:75:19:0f:12:01:1d:66:6b:
f9:5a:03:d3:0b:49:7a:c0:12:e1:37:23:23:12:0d:2d:39:20:
72:39:61:03:40:45:b6:bf:8c:63:06:19:5a:e4:e3:7e:e5:a2:
04:55:c5:b1:e8:87:07:75:fc:46:81:24:b3:58:c5:1c:5e:54:
eb:65:a5:2c:20:f7:10:0e:12:c5:1b:73:ba:33:bd:95:6e:db:
6b:78:a8:a6:d4:7d:15:1f:56:68:58:86:a1:54:93:20:28:01:
dc:ba:af:c4:1c:55:29:7a:c3:3b:0e:bf:19:0b:d8:1d:a2:40:
1b:f6:ee:c1:d3:b0:dc:fa:b4:76:d7:33:7d:cc:e5:1e:ac:0a:
88:3e:26:7a:81:5d:2e:d5:7b:6b:63:29:aa:77:ce:3c:d8:57:
b1:e7:70:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:43:15 2026 by rpki-client