
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft
File: 914D306354D2880E2D8000A84096A7D0FD93DB6F.mft (raw, json)
Hash identifier: tHvxMk9V5bs+DZIpYIMShH93j3r2Y5hCFmD0crXZqHI=
Subject key identifier: A7:45:A8:C9:D1:0B:D2:DD:62:E8:0B:D6:AE:62:79:BA:C0:6D:0A:CA
Authority key identifier: 91:4D:30:63:54:D2:88:0E:2D:80:00:A8:40:96:A7:D0:FD:93:DB:6F
Certificate issuer: /CN=914D306354D2880E2D8000A84096A7D0FD93DB6F
Certificate serial: 69DC073BE3042DB93EDF1A785264AB299AAD4E6B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft
Manifest number: A4
Signing time: Thu 03 Sep 2026 03:47:28 +0000
Manifest this update: Thu 03 Sep 2026 03:42:28 +0000
Manifest next update: Fri 04 Sep 2026 05:03:28 +0000
Files and hashes: 1: 3130332e37362e3130372e302f32342d3234203d3e20313531353737.roa (hash: kuGnEQzcoDJhm5rFlzTvBCAiLMXXIFxC7mIG7REa29w=)
2: 3130332e37362e3130362e302f32332d3234203d3e20313531353737.roa (hash: uK0BRaW/xJFX4xoOs5c+Wr7pOkzcDPXliVBiSDQWuQY=)
3: 914D306354D2880E2D8000A84096A7D0FD93DB6F.crl (hash: 7L9RPBkJcmVZ9U0EHTMHP+w26ybA1mfUbct27I2I8H0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.crl
rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 05:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:dc:07:3b:e3:04:2d:b9:3e:df:1a:78:52:64:ab:29:9a:ad:4e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914D306354D2880E2D8000A84096A7D0FD93DB6F
Validity
Not Before: Sep 3 03:42:28 2026 GMT
Not After : Sep 4 05:03:28 2026 GMT
Subject: CN=A745A8C9D10BD2DD62E80BD6AE6279BAC06D0ACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:6e:50:3a:e2:80:6b:13:af:fd:90:f0:fd:
1e:ca:f2:ce:e5:94:53:98:ad:5b:9f:51:a1:10:54:
d1:ad:b3:e2:21:5a:9a:c5:ab:6f:47:7a:60:8b:f8:
06:b8:8a:5b:87:72:2b:e0:d0:eb:bd:27:39:fe:89:
bf:61:d6:32:8e:bf:67:fb:44:8d:3a:f6:bf:7e:58:
e0:a7:13:57:a1:24:51:af:66:c3:cc:62:91:0f:b3:
ae:f3:ac:49:c3:3f:94:1f:7e:88:33:04:50:cf:13:
0e:54:02:32:a9:3e:36:8e:09:92:54:0a:b3:1f:3a:
dc:e4:11:6d:20:90:94:e1:9c:b9:a6:ac:91:0d:15:
cc:1d:4f:48:70:cf:09:aa:4c:f9:40:4c:20:43:21:
40:5f:5e:b9:0e:ca:d1:71:df:56:f5:4b:49:0c:3e:
cb:b5:e0:53:f8:13:02:2d:ca:e4:1c:00:ab:64:70:
e1:f4:fe:6a:1e:89:ae:cf:24:67:11:90:2a:58:58:
3d:22:f7:0c:2a:19:dd:8e:89:32:43:52:7f:f7:b7:
49:4f:4d:10:86:34:4f:df:df:c3:2a:70:68:6a:3f:
e5:bf:b5:88:92:30:69:4e:ee:a7:45:a4:df:19:f6:
e3:d2:0c:7d:f5:aa:c0:fc:f1:ad:78:5e:9a:03:05:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:45:A8:C9:D1:0B:D2:DD:62:E8:0B:D6:AE:62:79:BA:C0:6D:0A:CA
X509v3 Authority Key Identifier:
keyid:91:4D:30:63:54:D2:88:0E:2D:80:00:A8:40:96:A7:D0:FD:93:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/914D306354D2880E2D8000A84096A7D0FD93DB6F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aee2088a-c9ff-4d84-be4e-141d5b80b543/0/914D306354D2880E2D8000A84096A7D0FD93DB6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7f:59:92:c4:8c:35:e7:a1:95:18:38:96:15:f5:79:51:9c:
9b:e8:05:e6:8d:87:13:55:bb:bd:a1:ce:85:90:a8:1d:8d:dc:
2a:2c:fe:e7:ab:3f:c1:6a:7c:24:31:57:e0:29:5d:46:fc:43:
2b:bb:3b:4b:62:f6:c2:ba:a5:4a:da:1f:7a:42:be:66:80:ae:
78:4d:25:f7:9d:5d:56:d8:26:37:32:59:03:99:80:3d:fc:09:
5c:f0:bf:4c:66:8a:2f:1a:31:1c:ab:9b:01:31:e8:b1:09:a4:
b5:73:78:84:68:f6:4e:a9:00:d2:0b:98:eb:48:51:c5:d8:54:
8c:e1:43:0d:e8:fe:37:ad:44:92:7e:f7:1f:67:74:c2:62:32:
d6:ec:89:92:00:d7:03:83:02:01:63:3e:12:4f:6e:b0:79:76:
21:56:9d:b5:c8:0e:21:07:3c:fe:75:e4:8e:36:cd:00:68:29:
36:30:e9:b9:fd:da:c2:a2:df:f9:8c:fb:e3:e0:4c:18:78:05:
84:15:51:70:7a:2f:8d:4e:19:30:d6:10:ae:8f:40:d1:22:d9:
68:c2:ee:d4:09:5f:c8:9b:3e:6b:21:e7:43:94:68:0d:df:e2:
5d:30:e5:d4:6d:56:f3:9b:14:fa:a9:e4:de:78:fa:48:93:7d:
47:42:dc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:47:04 2026 by rpki-client