
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft
File: 411E8C45894267DCEFA20514C89165EE7C17C4C4.mft (raw, json)
Hash identifier: MPVr/1P7PQfyvB5xKN49x5Xh8dqr0LF6znT8HfUn35o=
Subject key identifier: 29:2B:3D:DB:AE:0D:84:40:52:55:89:BD:10:23:65:B8:0D:08:07:6A
Authority key identifier: 41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4
Certificate issuer: /CN=411E8C45894267DCEFA20514C89165EE7C17C4C4
Certificate serial: 0F9268B494E71F1402174C676AD0F62FA6B86066
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft
Manifest number: 6A
Signing time: Mon 20 Jul 2026 12:26:42 +0000
Manifest this update: Mon 20 Jul 2026 12:21:42 +0000
Manifest next update: Tue 21 Jul 2026 16:14:42 +0000
Files and hashes: 1: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: Gd2IM01O7z8fqk7GpG61d/HhlCVHlpL3rkOIOFXsAII=)
2: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: RWaRXWbQIpLKoTQziPLdF6KyPF26oe/DwncsbN1gjuY=)
3: 411E8C45894267DCEFA20514C89165EE7C17C4C4.crl (hash: GAP2Ly1vgytMnrt3wmD+BYKGScxY1LgPgaVp6U9E8Hg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl
rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 16:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:92:68:b4:94:e7:1f:14:02:17:4c:67:6a:d0:f6:2f:a6:b8:60:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411E8C45894267DCEFA20514C89165EE7C17C4C4
Validity
Not Before: Jul 20 12:21:42 2026 GMT
Not After : Jul 21 16:14:42 2026 GMT
Subject: CN=292B3DDBAE0D8440525589BD102365B80D08076A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4f:32:a0:20:c1:8f:dd:38:d9:dc:74:ba:c4:
58:b3:8b:be:fa:2b:11:13:02:fc:e2:ef:66:70:50:
37:c5:4b:34:82:c0:25:87:50:6b:0b:08:d5:8f:ee:
75:f2:fe:be:72:6e:fa:13:10:24:cf:4c:e7:41:f7:
8a:75:b1:9a:21:00:5e:e5:23:61:e1:03:89:69:a8:
9c:3b:fd:78:d5:20:7e:1b:8d:63:32:8c:ae:9e:a0:
80:cf:ba:ed:fe:15:79:7c:01:39:fd:b8:63:b0:74:
3a:b8:b8:11:4b:d1:e6:28:1f:15:54:d9:7f:14:96:
87:d8:61:b9:2a:cc:d9:d7:d7:fc:ba:5e:ed:7a:e3:
57:35:a7:72:d5:1a:2d:6d:44:83:4b:c8:c9:ac:72:
72:f3:69:98:08:d6:ac:60:f9:e6:5d:b5:51:72:6a:
ba:82:4e:16:4f:94:37:7d:3e:10:68:40:b2:47:7d:
75:55:89:63:fa:43:e8:7a:68:17:46:3b:8b:6e:63:
8d:0c:0b:96:8e:b5:e7:8c:4c:7d:82:fd:c1:b1:94:
fb:88:b8:b8:e9:be:9d:71:71:a9:9c:78:96:46:57:
c1:54:cf:c3:39:2c:86:4d:e7:05:da:d1:26:6f:4a:
23:0b:b9:57:7d:15:e5:ec:b1:60:d6:c6:98:16:66:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2B:3D:DB:AE:0D:84:40:52:55:89:BD:10:23:65:B8:0D:08:07:6A
X509v3 Authority Key Identifier:
keyid:41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:26:20:65:f6:78:59:b0:06:0f:f0:70:77:f2:84:23:aa:9b:
1b:99:6f:9c:a7:49:63:a3:fb:af:4c:8f:b4:b6:ac:77:d2:9e:
8e:aa:5a:80:bb:23:da:d9:79:26:f4:fd:e8:72:c2:94:22:a4:
7b:ec:bb:c9:5e:d5:b2:48:c8:6c:36:54:e3:24:b3:43:5a:89:
0e:b3:3c:b1:d2:cd:71:31:1f:81:aa:a3:cc:d3:43:cc:20:ba:
17:ac:80:54:8a:01:b0:77:ba:0d:13:3f:7b:ab:9e:60:21:39:
da:0c:8c:d4:35:99:8a:92:77:97:6f:86:c8:5a:89:00:7e:d0:
a1:1c:0f:d9:66:f8:b8:36:25:0e:46:75:75:6b:75:3e:b8:87:
fb:4e:cd:51:1b:1d:74:ce:25:bc:2f:f6:b0:0f:2d:d4:76:24:
0c:5e:5b:11:0e:0a:8e:b0:0a:0f:20:e6:10:cd:2e:41:23:6b:
1f:2c:99:c5:ac:90:81:58:c2:69:75:64:9c:83:99:84:88:c1:
70:60:4b:1b:3f:49:bb:be:7c:a3:1a:03:52:45:fb:23:55:3e:
eb:b1:5a:30:c0:0d:8d:f6:fb:0f:4b:2b:5f:c5:82:a0:bc:13:
24:7c:dd:d3:08:a8:78:7b:25:76:60:3c:2a:76:15:54:b8:5c:
76:f2:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:59:55 2026 by rpki-client