
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
File: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft (raw, json)
Hash identifier: dTHUmNZAHLo+4sqOfYBewskbJ0CpOJX6S2NrDw/MRAk=
Subject key identifier: B2:66:AB:00:CA:AA:99:58:34:81:42:22:24:25:58:66:87:77:4A:03
Authority key identifier: 4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2
Certificate issuer: /CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2
Certificate serial: 7D4E79C7CBAA5CCF5840DB464A0E65530283F380
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
Manifest number: 14
Signing time: Sat 16 May 2026 08:39:36 +0000
Manifest this update: Sat 16 May 2026 08:34:36 +0000
Manifest next update: Sun 17 May 2026 09:52:36 +0000
Files and hashes: 1: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: ry2+KDu888rhvRXyvEVBH/F8IFRWnEG2799s3X5mVKA=)
2: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl (hash: FlnNBuAKbJG8EvWshRwCY+yUurYPRG/1iP4f5LSzHos=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl
rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 09:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4e:79:c7:cb:aa:5c:cf:58:40:db:46:4a:0e:65:53:02:83:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2
Validity
Not Before: May 16 08:34:36 2026 GMT
Not After : May 17 09:52:36 2026 GMT
Subject: CN=B266AB00CAAA9958348142222425586687774A03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:70:53:e8:c1:87:13:42:f9:ca:a4:cd:ee:79:
0e:4a:90:7e:82:28:03:f1:68:47:c6:50:40:af:ef:
fd:5c:e1:d5:d0:27:20:c8:57:71:3f:4a:49:28:af:
f0:08:51:6b:af:89:b4:b6:65:51:2c:b8:d8:19:f1:
b9:08:b6:73:f6:39:94:4f:b5:a2:94:6d:aa:26:d9:
b5:a3:1d:fd:ec:81:8e:d0:fd:c8:d8:4b:ea:6b:61:
72:a9:e8:98:9f:3a:d4:9a:da:df:c1:54:e1:67:5c:
b0:ce:2b:a7:90:0d:8b:b0:a9:89:97:5d:1a:f4:a7:
bc:c5:6c:ed:41:ec:f3:7b:3f:f8:ce:b7:0f:ef:06:
84:f4:32:a8:49:e7:8f:55:9d:73:59:28:1f:dd:04:
b2:95:a1:53:96:95:0b:5f:1c:f0:67:24:b0:20:f4:
77:f9:87:23:97:a1:41:d3:d7:06:4f:25:53:be:70:
a9:c6:20:a8:7d:70:dd:18:53:04:4a:ba:fd:06:ee:
d9:57:fd:0a:0b:2e:54:f2:81:7d:7d:d9:59:f6:1a:
21:a1:2b:4b:54:f8:61:56:cc:95:fa:ef:50:5d:10:
e7:8f:15:06:c8:9c:13:18:27:ce:c6:ea:0c:a6:70:
a1:1f:51:20:00:00:d1:e8:34:f3:4e:44:01:e0:17:
65:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:66:AB:00:CA:AA:99:58:34:81:42:22:24:25:58:66:87:77:4A:03
X509v3 Authority Key Identifier:
keyid:4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:50:c7:e0:90:67:50:26:43:93:b5:21:22:64:0a:ef:11:cd:
3d:3a:28:44:ae:13:ad:ba:25:60:a0:39:79:90:22:a8:7d:3c:
e4:fc:68:c0:8b:ea:2e:54:6f:63:56:de:98:1f:b0:4f:4d:67:
dc:5b:aa:58:34:25:fb:32:09:ae:29:6a:04:0c:fa:f2:1c:96:
12:59:50:bf:ba:09:8f:6e:0c:1c:62:af:93:bb:2e:ff:e4:9a:
3e:d6:5f:60:15:72:72:d4:6e:b8:35:08:d9:42:b5:b0:1f:74:
7a:dc:30:6f:b9:31:03:4d:98:8c:36:48:7f:a7:0a:fa:a6:56:
a9:da:61:bf:64:87:14:3c:bf:dd:fb:cd:1a:8e:a2:db:f0:a1:
27:bf:77:90:82:80:ed:2d:36:c5:5d:96:8e:91:ca:cf:fa:76:
20:ea:7f:62:a5:91:d9:5f:27:6c:75:b8:c9:78:98:40:37:47:
fa:da:05:6e:ba:48:21:60:f2:0d:ad:3e:1a:3c:93:d9:33:ff:
a5:c2:7d:a1:10:dc:15:98:c9:5e:3e:75:f2:36:a4:66:66:ca:
56:e4:74:ce:0e:b1:66:e0:1a:f9:66:dc:d3:a9:e0:a1:f8:c6:
dd:ef:36:c1:7c:e1:a3:ce:e3:19:5e:e8:9f:0a:1f:4b:f9:d8:
17:cf:6a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:35:08 2026 by rpki-client