
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft
File: 4AD757CB155CFF255FDEC1E6D09300FD55954787.mft (raw, json)
Hash identifier: //4Gl9Jv4SMtYDmTapKgwmtJE1AYI+nxlnFSc6IAJDQ=
Subject key identifier: 64:9C:67:2B:BB:75:C7:59:4A:47:03:3B:79:25:5A:3C:DA:20:8A:B4
Authority key identifier: 4A:D7:57:CB:15:5C:FF:25:5F:DE:C1:E6:D0:93:00:FD:55:95:47:87
Certificate issuer: /CN=4AD757CB155CFF255FDEC1E6D09300FD55954787
Certificate serial: 66CF09B896AB81EF50DBBB58260270C23F98BFC4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AD757CB155CFF255FDEC1E6D09300FD55954787.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft
Manifest number: F9
Signing time: Wed 04 Nov 2026 02:41:27 +0000
Manifest this update: Wed 04 Nov 2026 02:36:27 +0000
Manifest next update: Thu 05 Nov 2026 03:24:27 +0000
Files and hashes: 1: 4AD757CB155CFF255FDEC1E6D09300FD55954787.crl (hash: PWEdPYOKvBmdBR+eqZ7b4OYV/AUDm/RVf0coaqyWlmU=)
2: 3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa (hash: YQmR5xszR6XJTWjFcmbhXoD76oy0pbbqOdOUyAmXzbo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.crl
rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AD757CB155CFF255FDEC1E6D09300FD55954787.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 03:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:cf:09:b8:96:ab:81:ef:50:db:bb:58:26:02:70:c2:3f:98:bf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AD757CB155CFF255FDEC1E6D09300FD55954787
Validity
Not Before: Nov 4 02:36:27 2026 GMT
Not After : Nov 5 03:24:27 2026 GMT
Subject: CN=649C672BBB75C7594A47033B79255A3CDA208AB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1e:d8:b6:f3:29:61:39:d2:ef:8e:9c:e4:d8:
14:17:41:48:14:78:c3:39:fa:49:c2:49:72:d5:bb:
bb:41:9f:04:a3:c0:1a:aa:68:62:41:c4:a4:42:0d:
78:fb:56:48:6e:86:39:be:05:67:fb:0c:ca:ad:8d:
98:3b:ba:2e:fd:c7:42:fe:a7:19:be:43:3d:87:cf:
5e:e6:4b:7b:4b:d4:97:05:8d:21:b7:59:cc:74:cb:
e4:0a:22:74:ef:b9:17:f1:a3:0f:4b:38:5d:4d:d1:
ac:7c:ee:53:4f:79:92:74:4e:e8:0d:70:ff:62:d8:
cd:61:64:ae:ca:ba:a4:3f:7d:f4:f8:67:2e:3f:33:
83:a8:ce:db:9a:79:3a:68:49:1d:74:e9:43:4e:36:
76:10:27:f7:48:91:18:f9:16:a5:4a:04:19:ef:09:
08:8b:4f:2d:aa:46:34:31:28:01:b6:2b:61:cb:9b:
3d:d4:97:8a:91:32:91:66:9a:cc:be:0d:0f:f8:b9:
88:25:ce:32:94:55:a7:e4:e5:ac:7f:d5:84:58:cf:
88:a7:41:8e:db:af:e2:4f:20:ed:cc:07:04:3a:8f:
74:b1:6f:da:24:d3:06:77:bb:4c:1e:5b:51:9f:c3:
ae:11:70:7c:52:54:25:52:d6:eb:0d:c8:d8:82:2b:
53:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:67:2B:BB:75:C7:59:4A:47:03:3B:79:25:5A:3C:DA:20:8A:B4
X509v3 Authority Key Identifier:
keyid:4A:D7:57:CB:15:5C:FF:25:5F:DE:C1:E6:D0:93:00:FD:55:95:47:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AD757CB155CFF255FDEC1E6D09300FD55954787.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e4:e8:b7:ba:25:c6:91:d2:df:82:66:c7:50:24:67:b6:01:
18:cd:d0:9d:fe:ed:b4:bf:89:3e:16:a0:2c:df:cf:77:84:3d:
8d:85:b1:67:ac:e4:e8:61:2e:51:e0:fe:fd:5c:0a:e0:70:6a:
99:26:7a:5f:cb:ba:92:70:bd:1e:b9:43:9c:5d:c3:cc:16:5e:
4b:b6:2d:84:6f:c9:92:6b:7d:88:d9:68:21:b6:c5:14:65:06:
9b:e4:b9:04:84:27:37:c2:bc:82:97:55:dd:83:ab:88:af:7a:
3a:44:f8:87:ba:01:f9:67:f5:94:f1:5d:b6:9f:06:9b:11:63:
e0:87:5b:54:f5:96:75:b7:7f:87:bc:b6:55:c2:4d:d9:6c:0a:
fc:c5:c2:f7:9c:84:65:36:b7:8e:40:93:68:9a:a3:75:b6:a2:
04:bd:9a:ac:e5:2b:c7:27:cf:a3:3a:fd:aa:eb:d2:bf:f6:0d:
30:a9:5c:1f:d0:56:45:ef:b3:2d:8c:2c:ea:98:06:d0:48:db:
ab:28:00:cf:f1:82:33:24:eb:e7:a8:41:5a:43:5f:2a:48:c8:
f0:64:91:5a:4c:e3:29:55:f2:3b:73:ad:06:f0:ab:f1:8b:8f:
21:b1:23:57:6c:c7:68:b8:dc:96:d1:a0:5d:d3:80:07:ed:5f:
59:00:48:dc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZs8JuJarge9Q27tYJgJwwj+Yv8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFENzU3Q0IxNTVDRkYyNTVGREVDMUU2RDA5MzAwRkQ1
NTk1NDc4NzAeFw0yNjExMDQwMjM2MjdaFw0yNjExMDUwMzI0MjdaMDMxMTAvBgNV
BAMTKDY0OUM2NzJCQkI3NUM3NTk0QTQ3MDMzQjc5MjU1QTNDREEyMDhBQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZHti28ylhOdLvjpzk2BQXQUgU
eMM5+knCSXLVu7tBnwSjwBqqaGJBxKRCDXj7Vkhuhjm+BWf7DMqtjZg7ui79x0L+
pxm+Qz2Hz17mS3tL1JcFjSG3Wcx0y+QKInTvuRfxow9LOF1N0ax87lNPeZJ0TugN
cP9i2M1hZK7KuqQ/ffT4Zy4/M4OoztuaeTpoSR106UNONnYQJ/dIkRj5FqVKBBnv
CQiLTy2qRjQxKAG2K2HLmz3Ul4qRMpFmmsy+DQ/4uYglzjKUVafk5ax/1YRYz4in
QY7br+JPIO3MBwQ6j3Sxb9ok0wZ3u0weW1Gfw64RcHxSVCVS1usNyNiCK1MBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZJxnK7t1x1lKRwM7eSVaPNogirQwHwYDVR0j
BBgwFoAUStdXyxVc/yVf3sHm0JMA/VWVR4cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2RiNTlhMTAtNThkMC00NjJlLWIwOWItMTkxOWIxYzM1ZDcyLzAvNEFENzU3Q0Ix
NTVDRkYyNTVGREVDMUU2RDA5MzAwRkQ1NTk1NDc4Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QUQ3NTdDQjE1NUNGRjI1NUZERUMxRTZEMDkzMDBGRDU1OTU0
Nzg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2RiNTlhMTAtNThkMC00NjJlLWIw
OWItMTkxOWIxYzM1ZDcyLzAvNEFENzU3Q0IxNTVDRkYyNTVGREVDMUU2RDA5MzAw
RkQ1NTk1NDc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA7k6Le6JcaR0t+CZsdQJGe2ARjN0J3+7bS/
iT4WoCzfz3eEPY2FsWes5OhhLlHg/v1cCuBwapkmel/LupJwvR65Q5xdw8wWXku2
LYRvyZJrfYjZaCG2xRRlBpvkuQSEJzfCvIKXVd2Dq4ivejpE+Ie6Afln9ZTxXbaf
BpsRY+CHW1T1lnW3f4e8tlXCTdlsCvzFwvechGU2t45Ak2iao3W2ogS9mqzlK8cn
z6M6/arr0r/2DTCpXB/QVkXvsy2MLOqYBtBI26soAM/xgjMk6+eoQVpDXypIyPBk
kVpM4ylV8jtzrQbwq/GLjyGxI1dsx2i43JbRoF3TgAftX1kASNw=
-----END CERTIFICATE-----
Generated at Wed Nov 4 12:12:37 2026 by rpki-client