
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft
File: 4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft (raw, json)
Hash identifier: jaD/K6EskB28Fqzuplt9Iwe4Q1C9yKyB1X0l/ymjrEw=
Subject key identifier: B6:E2:95:3B:A1:E2:58:99:E3:E2:A2:A7:22:74:76:AF:F6:A5:EC:43
Authority key identifier: 4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F
Certificate issuer: /CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F
Certificate serial: 27A266C4FB4A03BE3DA583DA2582E85A008C4DC4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft
Manifest number: F5
Signing time: Mon 02 Nov 2026 08:22:53 +0000
Manifest this update: Mon 02 Nov 2026 08:17:53 +0000
Manifest next update: Tue 03 Nov 2026 11:45:53 +0000
Files and hashes: 1: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: ySMFpx3jAtHRk6Y0gp/23WMKdK2+n4m1Qj3cdUQcw48=)
2: 4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl (hash: /jfI5wqEszw3R9rBsFeLB2t+ZDTkEX/IIq9VTAJtkRs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl
rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 09:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a2:66:c4:fb:4a:03:be:3d:a5:83:da:25:82:e8:5a:00:8c:4d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F
Validity
Not Before: Nov 2 08:17:53 2026 GMT
Not After : Nov 3 11:45:53 2026 GMT
Subject: CN=B6E2953BA1E25899E3E2A2A7227476AFF6A5EC43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6b:66:be:3f:2a:17:3c:b1:eb:e9:29:e5:d6:
c3:99:9f:86:be:2b:22:bb:a2:b3:6c:f3:db:17:7a:
4a:05:fc:44:a0:2b:27:83:07:fe:01:44:ca:90:09:
7d:85:40:8e:6d:ca:be:24:5a:86:ed:e7:9f:a0:77:
ed:c9:11:b1:92:34:03:19:24:40:6c:c3:73:c7:08:
ea:b6:ff:5b:b2:2c:f3:9c:6c:c8:7c:dc:e6:76:20:
eb:98:04:26:35:12:0a:1f:12:de:2c:5d:82:c6:45:
4b:e6:67:15:21:f9:a1:d4:05:f5:6e:77:e1:5d:96:
0b:ce:59:24:eb:44:3e:8a:81:9c:50:e3:0f:0f:85:
63:80:1a:02:ca:39:29:f5:55:de:0d:a7:69:f5:fc:
36:2d:2b:2f:9f:9f:b2:7a:67:be:f9:ca:68:df:1c:
ea:7d:80:b6:33:31:04:f8:23:7a:e9:1d:d0:9c:57:
3a:49:59:e4:b3:22:ec:56:f8:71:3f:1d:8c:1c:91:
be:e4:59:a7:4a:56:e1:11:ef:66:05:6e:e9:bb:39:
1f:31:9c:e1:c8:42:e3:46:6b:69:69:e9:2e:e0:ce:
47:3c:77:2b:cf:af:a6:36:e7:91:e3:2d:56:64:7f:
bf:e9:02:9b:b7:0c:ef:2c:f6:c3:fa:1d:b5:77:67:
44:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E2:95:3B:A1:E2:58:99:E3:E2:A2:A7:22:74:76:AF:F6:A5:EC:43
X509v3 Authority Key Identifier:
keyid:4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:51:2b:bb:ab:8e:44:6d:d2:b4:84:cd:7b:91:e9:34:5d:4b:
06:b1:1e:db:7d:a9:30:9c:37:07:6a:aa:63:55:81:47:6b:34:
b6:81:89:3f:14:77:e5:82:bc:60:e9:52:ec:6f:73:39:b0:6e:
73:68:cd:cc:2c:04:85:bb:7f:ae:79:7c:9a:c7:63:05:02:bc:
09:57:90:dc:31:bb:94:59:c0:42:d3:6f:3f:a5:57:07:9e:5a:
fb:e3:15:e5:3d:60:fa:d2:6a:28:96:aa:42:9b:3f:58:19:52:
8f:8c:84:77:3d:4a:02:35:bc:63:2f:48:56:ed:02:a1:f9:fd:
54:45:e0:51:a5:b6:a0:00:7d:18:92:a9:50:ee:44:c0:9b:66:
6a:91:43:c5:28:2e:45:78:bc:9f:e8:c9:3c:e2:31:7f:2c:fe:
ed:2f:98:e1:a2:4e:81:01:79:47:d4:31:47:34:e9:63:81:2f:
97:e0:59:c8:e4:14:89:8e:06:81:42:39:f6:2a:aa:ea:ad:9b:
0c:7b:91:9e:5c:69:fc:6a:e2:f4:07:2b:fe:50:8e:84:96:a3:
e9:98:af:f2:f4:70:cc:3a:4a:47:dd:7f:39:a7:ed:6c:5f:c4:
49:7b:b7:f6:9c:f0:47:40:ca:f4:15:3a:cb:ba:57:4d:f3:f0:
2f:df:0f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 11:54:32 2026 by rpki-client