
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
File: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft (raw, json)
Hash identifier: U0AzAF9jv3jgfSY9ziHa4/Ed1LnTiQhEyWWJ/Ax1O0g=
Subject key identifier: 1E:20:66:28:3C:EF:DB:AD:F4:54:FB:EA:7C:8C:EE:31:95:07:CC:E5
Authority key identifier: 4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58
Certificate issuer: /CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58
Certificate serial: 5C88F7C2037CF5309C0FAC37166BA1E79BA4568E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
Manifest number: F9
Signing time: Wed 04 Nov 2026 00:59:13 +0000
Manifest this update: Wed 04 Nov 2026 00:54:13 +0000
Manifest next update: Thu 05 Nov 2026 02:37:13 +0000
Files and hashes: 1: 3130332e3136392e3133302e302f32332d3234203d3e20313432333430.roa (hash: 6Vy3iy991tbMeWN8XgwIw7kSD92akdQ0AseMbxbKJxY=)
2: 4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl (hash: KF3HJ/JNRwtLigSqj+z+Hx3hbnkHZahqGebJVExSc3w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl
rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 02:37:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:88:f7:c2:03:7c:f5:30:9c:0f:ac:37:16:6b:a1:e7:9b:a4:56:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C0B647C1DF7DCE220106BDA11C1D7D163D10F58
Validity
Not Before: Nov 4 00:54:13 2026 GMT
Not After : Nov 5 02:37:13 2026 GMT
Subject: CN=1E2066283CEFDBADF454FBEA7C8CEE319507CCE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:2c:a6:34:88:a0:a8:21:84:29:10:24:5c:
de:ab:c2:65:24:1d:a3:6d:5a:97:88:27:fc:9e:99:
4b:b7:d3:5f:a4:d4:d7:90:18:59:3d:56:5a:af:24:
1d:ce:3f:94:e4:05:22:6b:0d:43:67:83:16:d8:78:
41:4f:3b:de:0f:48:4c:ea:9b:f7:ba:7f:07:00:b4:
99:5a:fb:94:2e:0b:e0:b3:08:e0:ca:87:c6:44:12:
6b:97:53:91:ab:23:e9:1e:bb:54:2f:29:7c:be:6a:
82:a2:05:f7:b7:22:f3:86:e7:51:78:d4:07:99:b3:
c0:fb:91:db:d6:1d:12:13:9f:02:37:27:b4:72:31:
19:a4:cd:ed:63:fb:d1:c8:58:7f:5e:67:48:2a:5c:
b2:7d:48:29:47:72:2c:85:37:c1:14:26:68:6e:0d:
e4:13:a1:b9:ee:a3:b4:d4:82:ae:43:8b:56:30:74:
56:f1:11:ad:fb:bc:14:20:b1:ab:d4:18:f5:ee:ba:
64:e5:8b:8b:32:cd:90:08:fb:86:a8:d5:6d:c6:2e:
9f:48:61:9f:e0:18:66:07:52:82:2e:9f:af:89:8e:
fd:6a:00:a0:42:9f:67:88:fc:4d:f7:14:0c:e0:d5:
09:8c:ff:05:87:3f:51:13:96:a8:c2:7d:ed:e6:40:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:20:66:28:3C:EF:DB:AD:F4:54:FB:EA:7C:8C:EE:31:95:07:CC:E5
X509v3 Authority Key Identifier:
keyid:4C:0B:64:7C:1D:F7:DC:E2:20:10:6B:DA:11:C1:D7:D1:63:D1:0F:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9e3f66a8-a0ff-44fa-bda6-8e5f27d61b3f/0/4C0B647C1DF7DCE220106BDA11C1D7D163D10F58.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:32:97:9e:b7:db:81:02:48:ef:b6:b5:58:53:0f:2f:62:09:
69:9b:ba:68:8d:4b:75:5b:3e:bd:70:67:81:60:0a:2e:e8:65:
6a:48:ff:90:57:88:24:10:d6:26:8a:88:96:c4:4a:cb:76:55:
cc:25:51:01:45:21:49:da:4b:cb:00:58:78:70:fb:12:72:79:
9f:f6:a9:cd:d9:46:41:dd:66:bb:4e:a7:ef:f9:11:da:11:21:
40:4f:7e:d9:49:d6:c0:84:19:b4:4c:fb:14:1e:d6:ba:cc:9c:
90:69:e5:bb:45:6f:0c:ff:73:cc:ad:ed:7c:3d:66:2f:d5:67:
28:03:64:7a:3b:30:c8:38:27:1d:03:2d:07:ba:bd:6b:27:2d:
df:dc:7e:be:7d:b4:97:ed:11:5b:a0:7e:10:8b:c8:af:e1:12:
a8:f3:71:41:35:ea:c2:3e:fa:5c:bb:db:2a:bb:45:4b:4f:e0:
f8:29:9a:df:97:cd:d4:2a:70:8e:6e:0d:b2:db:c5:0b:04:eb:
d7:d9:e3:09:5f:f5:e3:e2:5d:f4:6e:f6:02:4e:7e:be:8c:0a:
ef:91:ae:8d:8e:87:d6:8e:f9:71:44:92:a9:5b:33:a6:a6:5e:
32:be:01:1f:85:8b:e9:d6:19:0c:bb:45:e5:56:9e:94:c9:47:
8a:87:58:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 06:09:15 2026 by rpki-client