
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft
File: D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft (raw, json)
Hash identifier: HAbW2TNDC/6cwdzDVyaOl6mP6rbOuQeTmTHflh2a+ag=
Subject key identifier: 0B:27:3F:9F:DD:FE:7B:E0:BC:50:A1:19:9D:82:6F:1B:E1:BC:95:61
Authority key identifier: D4:FA:ED:0A:B5:E9:0A:36:B5:DB:DC:BC:E8:6B:88:EA:D2:66:A9:15
Certificate issuer: /CN=D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915
Certificate serial: 52E403D1F01963C3A9AE8952FA856ACEDB14ED25
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft
Manifest number: A5
Signing time: Thu 03 Sep 2026 10:04:33 +0000
Manifest this update: Thu 03 Sep 2026 09:59:33 +0000
Manifest next update: Fri 04 Sep 2026 10:57:33 +0000
Files and hashes: 1: D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl (hash: V4/JVaMekPu/8kea7qZb/PLBf1UR3qApvJvf1KxKtAI=)
2: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: 9hurPke9TvFgQ13BY5gZD2uH3uoeH6rZWMcJHoLiSRc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl
rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 10:57:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e4:03:d1:f0:19:63:c3:a9:ae:89:52:fa:85:6a:ce:db:14:ed:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915
Validity
Not Before: Sep 3 09:59:33 2026 GMT
Not After : Sep 4 10:57:33 2026 GMT
Subject: CN=0B273F9FDDFE7BE0BC50A1199D826F1BE1BC9561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:01:4e:9a:e3:f1:91:73:e8:ad:71:4c:e6:
3b:5e:90:0e:a1:83:1d:94:9a:f5:95:8c:30:f5:ef:
da:d0:53:48:f5:12:5b:be:93:7a:90:65:ad:9b:47:
b5:30:1e:78:aa:05:74:7b:1b:b7:dd:a0:5f:59:91:
56:9a:29:56:22:54:1f:73:ce:45:16:a9:e4:1f:37:
cf:13:35:ad:e9:54:99:66:93:75:e6:e8:4f:98:38:
d1:b8:f3:26:c6:4c:0d:38:00:c0:2f:c6:36:b0:52:
67:35:49:f5:77:ea:e8:39:85:8c:ac:da:11:28:f2:
b9:dc:3d:4d:a5:73:46:4e:67:78:ae:2d:80:81:d2:
e8:c8:4e:8e:f9:d5:f5:ad:da:b0:84:46:a6:67:14:
35:8d:f7:be:73:60:e4:50:db:a4:ca:35:f5:9b:2a:
39:3b:e9:73:e7:a7:ac:9d:8d:5e:70:b3:96:8f:58:
fb:51:c5:b0:38:36:f7:d1:47:38:8f:ea:33:1b:fb:
3a:53:eb:05:20:88:8c:cf:62:4b:fc:75:2e:81:1c:
8e:57:b6:1f:63:99:25:3c:b7:23:71:0b:47:67:3b:
dd:35:29:ee:2f:47:d3:9d:7f:42:c7:1a:ed:2c:b8:
c7:29:f6:37:36:4a:0e:c2:91:57:1b:35:2b:32:75:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:27:3F:9F:DD:FE:7B:E0:BC:50:A1:19:9D:82:6F:1B:E1:BC:95:61
X509v3 Authority Key Identifier:
keyid:D4:FA:ED:0A:B5:E9:0A:36:B5:DB:DC:BC:E8:6B:88:EA:D2:66:A9:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/D4FAED0AB5E90A36B5DBDCBCE86B88EAD266A915.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:af:6e:a5:18:fc:30:21:4f:95:31:dd:f6:e5:55:a0:6f:ec:
57:cd:3e:25:7b:3a:96:73:2b:b6:98:04:4e:c2:b2:65:ed:4f:
62:41:14:5d:16:cc:fb:8c:93:fa:00:77:d5:83:17:f6:2a:f5:
0b:94:1a:33:be:0c:00:68:07:6b:62:3b:33:b2:a5:1c:95:2b:
05:3c:53:81:a5:34:76:fb:a9:9b:02:e7:06:39:63:a2:ef:2a:
4c:43:01:17:8a:33:2d:d6:dc:02:bc:81:d4:bc:2c:4a:6a:4b:
89:39:c2:83:f0:6e:16:82:dd:da:6c:1b:16:39:5b:25:a1:e0:
10:da:27:b7:bf:c8:0f:3a:e8:66:c8:d9:c2:1c:78:bd:35:22:
2c:73:d5:6d:5f:d5:15:14:d9:f5:f8:59:26:20:97:3c:95:0f:
18:7c:80:9b:6f:47:3b:ca:06:de:84:88:bf:57:52:94:cb:b8:
a7:33:15:f9:ff:a9:b5:5f:94:82:78:21:9e:ac:36:50:70:ae:
f0:4c:45:e9:39:2d:a6:ad:3c:d2:8a:28:13:63:51:4a:69:98:
0d:fe:b3:9d:f2:94:81:0d:cb:09:0c:b9:a8:5c:6c:fe:b7:59:
e2:87:90:a8:d9:bb:bd:f1:6a:34:bf:00:6c:4a:f5:fd:ba:e6:
04:3c:e6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:47:39 2026 by rpki-client