
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft
File: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft (raw, json)
Hash identifier: uQulbdZoMpIAtr3TPfySIzTz7RFss7w61Zo2DMLFWYI=
Subject key identifier: 3C:72:8C:7B:AA:05:89:C1:60:B3:91:36:D5:FA:B8:1D:8E:BB:E6:D5
Authority key identifier: 4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84
Certificate issuer: /CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584
Certificate serial: 3BDED0E68427513402955238482492014E50ABB6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft
Manifest number: 54
Signing time: Fri 03 Jul 2026 21:39:37 +0000
Manifest this update: Fri 03 Jul 2026 21:34:37 +0000
Manifest next update: Sat 04 Jul 2026 22:22:37 +0000
Files and hashes: 1: 4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl (hash: YHVDoAyo/E72ZDYpY38u5TcX9zair9URRVPp2nb3o9s=)
2: 3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (hash: 3V56nSlss2prGjnCh8yc0uAcD+eYYddXTnS1OxpPoV0=)
3: 3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (hash: 3oF8VGb692CsHNpL5bkpsSKeUmhwgndjMYRrWhUNaPo=)
4: 3130332e39372e3134302e302f32342d3234203d3e20313431303731.roa (hash: 2oQBF0OAu+x3jbAGDBl7jZuo1w7C20ONHzk/GqcpbO8=)
5: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (hash: Nzw87BQmmq5JXKfqP++4H/0NcBCIzysxSEpNOfcwqIA=)
6: 3130332e39372e3134302e302f32332d3233203d3e203538383230.roa (hash: ZDLtfAp4S3OvopOek/8l4bhhMLZjILy0rUvNj5yf6Os=)
7: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (hash: xFJ6YkI92aDNdIdb2cb47Lr1FqvCvQqQCoyTJtEq2Co=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl
rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Jul 2026 22:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:de:d0:e6:84:27:51:34:02:95:52:38:48:24:92:01:4e:50:ab:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AC5DC4172AAF4319622F4E1C03FFE431F27E584
Validity
Not Before: Jul 3 21:34:37 2026 GMT
Not After : Jul 4 22:22:37 2026 GMT
Subject: CN=3C728C7BAA0589C160B39136D5FAB81D8EBBE6D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:2e:fb:64:1a:83:dd:31:dc:a0:04:5d:74:
54:5b:de:2c:6a:cb:6b:bb:34:f6:f1:39:dd:d0:95:
57:e8:f5:b3:2a:73:20:9b:46:a2:2c:b6:2d:ad:c3:
46:63:80:72:1a:56:24:de:e1:ce:5d:85:3f:78:ab:
a6:c9:0f:a6:c4:e1:97:ac:9b:25:9b:89:73:1a:a2:
e9:cc:12:95:76:13:2c:04:1c:fd:0b:6a:5f:12:5c:
9d:94:5b:dd:f0:3d:b7:b5:e1:5c:35:ba:73:ae:1b:
f0:69:3a:f7:95:c8:b4:c9:10:51:99:af:04:48:e6:
78:02:e1:16:f5:b8:71:3a:fc:3b:7e:77:71:d4:60:
96:10:18:65:07:65:a5:43:a3:58:55:14:68:28:0e:
ab:e5:4e:c7:0e:25:7d:a6:90:d3:41:48:3f:ad:45:
c7:28:c0:76:86:a6:db:2c:fc:c3:3b:43:63:d0:86:
11:a6:14:29:e9:db:b1:84:49:4c:43:aa:c2:80:8f:
75:3f:52:b4:1e:88:ce:85:34:54:db:99:7a:7b:1c:
1f:62:8f:f9:b8:fd:e7:18:d8:6c:5a:ef:22:5e:dc:
b0:df:30:3f:61:54:1b:72:7b:4c:1f:2a:18:7f:68:
71:21:de:6a:8a:32:aa:a8:84:31:ca:16:6c:03:71:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:72:8C:7B:AA:05:89:C1:60:B3:91:36:D5:FA:B8:1D:8E:BB:E6:D5
X509v3 Authority Key Identifier:
keyid:4A:C5:DC:41:72:AA:F4:31:96:22:F4:E1:C0:3F:FE:43:1F:27:E5:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/4AC5DC4172AAF4319622F4E1C03FFE431F27E584.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:eb:37:45:8d:83:da:26:37:d6:94:e3:61:89:fb:c1:46:0e:
78:02:0f:60:32:31:f4:ab:99:1d:eb:7f:a1:a1:8f:ca:14:15:
65:c9:c1:43:6d:76:e2:9f:6c:93:01:21:a2:6c:a6:bf:80:ea:
c5:a1:ae:bf:6b:82:c6:0d:f4:d7:21:5c:b5:62:a5:a4:48:74:
51:cd:a5:db:2f:e4:30:29:69:ca:f8:8b:af:05:6b:66:ca:63:
e1:ff:cd:c2:c3:a9:a3:95:43:dd:cc:ac:5c:ee:1c:37:da:d5:
ea:ff:e4:b4:d6:81:39:a1:be:43:a7:a8:7e:90:ad:64:36:3e:
57:0b:19:51:1a:ac:57:aa:86:e1:ba:b1:3b:91:49:b7:41:39:
25:ad:d3:93:d9:be:d8:b9:4f:cd:f4:37:16:4c:cd:9f:96:2e:
94:ba:70:f5:d5:84:9d:a8:4f:5b:aa:70:da:b1:dd:7c:e6:65:
90:51:c1:e5:d6:ff:2d:7b:06:8b:33:c5:df:70:67:32:bc:a7:
3e:34:ad:6b:ed:39:30:17:d0:55:6f:e6:eb:de:1d:87:b8:f7:
1f:be:45:c6:56:3f:bb:b0:93:33:cb:13:06:70:f4:74:dd:5c:
20:e4:ae:d2:04:33:46:de:c5:d6:98:6f:2c:1e:f0:ec:a6:6f:
7c:19:3e:d4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUO97Q5oQnUTQClVI4SCSSAU5Qq7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMx
RjI3RTU4NDAeFw0yNjA3MDMyMTM0MzdaFw0yNjA3MDQyMjIyMzdaMDMxMTAvBgNV
BAMTKDNDNzI4QzdCQUEwNTg5QzE2MEIzOTEzNkQ1RkFCODFEOEVCQkU2RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChCy77ZBqD3THcoARddFRb3ixq
y2u7NPbxOd3QlVfo9bMqcyCbRqIsti2tw0ZjgHIaViTe4c5dhT94q6bJD6bE4Zes
myWbiXMaounMEpV2EywEHP0Lal8SXJ2UW93wPbe14Vw1unOuG/BpOveVyLTJEFGZ
rwRI5ngC4Rb1uHE6/Dt+d3HUYJYQGGUHZaVDo1hVFGgoDqvlTscOJX2mkNNBSD+t
RccowHaGptss/MM7Q2PQhhGmFCnp27GESUxDqsKAj3U/UrQeiM6FNFTbmXp7HB9i
j/m4/ecY2Gxa7yJe3LDfMD9hVBtye0wfKhh/aHEh3mqKMqqohDHKFmwDcQeFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPHKMe6oFicFgs5E21fq4HY675tUwHwYDVR0j
BBgwFoAUSsXcQXKq9DGWIvThwD/+Qx8n5YQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTQwMTQzNmItMDI2Ny00NjZiLWEzNDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3
MkFBRjQzMTk2MjJGNEUxQzAzRkZFNDMxRjI3RTU4NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QUM1REM0MTcyQUFGNDMxOTYyMkY0RTFDMDNGRkU0MzFGMjdF
NTg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQwMTQzNmItMDI2Ny00NjZiLWEz
NDAtZTI4OGQyZTkzNGE4LzAvNEFDNURDNDE3MkFBRjQzMTk2MjJGNEUxQzAzRkZF
NDMxRjI3RTU4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA3rN0WNg9omN9aU42GJ+8FGDngCD2AyMfSr
mR3rf6Ghj8oUFWXJwUNtduKfbJMBIaJspr+A6sWhrr9rgsYN9NchXLVipaRIdFHN
pdsv5DApacr4i68Fa2bKY+H/zcLDqaOVQ93MrFzuHDfa1er/5LTWgTmhvkOnqH6Q
rWQ2PlcLGVEarFeqhuG6sTuRSbdBOSWt05PZvti5T830NxZMzZ+WLpS6cPXVhJ2o
T1uqcNqx3XzmZZBRweXW/y17Boszxd9wZzK8pz40rWvtOTAX0FVv5uveHYe49x++
RcZWP7uwkzPLEwZw9HTdXCDkrtIEM0bexdaYbywe8Oymb3wZPtQ=
-----END CERTIFICATE-----
Generated at Sat Jul 4 11:18:06 2026 by rpki-client