
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft
File: 04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft (raw, json)
Hash identifier: CMsNfqk93+Z7/pVsowM1OQMnOfoQfqTqJfC6GtN3D/Q=
Subject key identifier: CF:4F:B9:24:9A:F8:98:1C:C5:7E:65:F4:00:6A:53:6E:ED:FD:C9:2E
Authority key identifier: 04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4
Certificate issuer: /CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4
Certificate serial: 18C9D3E96C2667AB4E0BEFF2ED82BC62EDF2FDD0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft
Manifest number: A5
Signing time: Thu 03 Sep 2026 00:23:31 +0000
Manifest this update: Thu 03 Sep 2026 00:18:31 +0000
Manifest next update: Fri 04 Sep 2026 01:05:31 +0000
Files and hashes: 1: 323430363a343563303a3a2f33322d3332203d3e203634333030.roa (hash: 1M4q1NFllsSsvSfNvwTitiKk8jnGm1cKfR4Eial5H4E=)
2: 3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa (hash: BrjeraCPyUffk29JD70GjyNah0k3nj4heiQybdMxnEQ=)
3: 3130332e3135332e3134382e302f32342d3234203d3e203634333030.roa (hash: dl9xVM2rxfLjhJqwGW0G8h/VTUN1oUgBuq0Qw5n8Lwg=)
4: 323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa (hash: 6uG8JEAg5YXu68O6z0VK1/htvcExMqCS4aozBNgJO50=)
5: 04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl (hash: pRacc4du24AcL/w+wT+fSLB8yx0URhC/t4rq8OqSUi4=)
6: 323430363a343563303a3a2f33332d3438203d3e203634333030.roa (hash: 0XuhY+T94wXhxTCvmTzUJVF+dBVIx5FGQo4RfqmReyU=)
7: 3130332e3135332e3134392e302f32342d3234203d3e203634333030.roa (hash: 5vV5ZfJoSxF8YdCtjpH1p1DLAYvEvLGC91Wktf8Mw9c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl
rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 21:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c9:d3:e9:6c:26:67:ab:4e:0b:ef:f2:ed:82:bc:62:ed:f2:fd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4
Validity
Not Before: Sep 3 00:18:31 2026 GMT
Not After : Sep 4 01:05:31 2026 GMT
Subject: CN=CF4FB9249AF8981CC57E65F4006A536EEDFDC92E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b4:c1:b7:80:68:c7:87:b1:76:95:95:30:83:
82:40:3c:2a:40:e7:51:a5:97:28:68:c4:e5:d4:89:
54:0e:f5:61:5a:91:bb:b8:52:45:e5:f2:fd:e7:5d:
5a:42:6b:93:77:93:f4:17:75:dc:cf:eb:9a:12:83:
eb:6b:fc:6d:9f:32:ed:66:6b:fd:94:1c:ff:a1:75:
aa:d5:a4:01:9a:7f:a5:49:1d:79:6d:23:cc:db:05:
ef:58:a6:9e:4e:35:8c:c9:02:a3:6c:a0:18:0a:bb:
93:7b:da:13:f7:48:76:5c:0c:ee:de:63:ed:95:b3:
7e:fa:b0:44:11:60:30:8f:77:3f:a6:f0:c5:39:16:
29:c6:1d:fa:1b:7c:25:7c:a6:e9:64:df:35:2f:a0:
02:02:ff:1a:6b:1a:a9:cd:93:26:87:93:bd:d7:0d:
68:dd:e6:e6:17:1f:95:3c:6a:4a:04:eb:ba:28:7c:
de:0e:c6:93:cd:bb:2a:aa:00:5b:39:74:89:b1:b1:
3f:2e:31:d4:65:38:46:29:3c:8e:be:83:6b:19:16:
48:3b:1e:ad:cd:75:50:d8:fe:9a:99:bb:ba:bf:ed:
e5:1f:80:4b:8b:dc:ca:2a:c3:45:08:07:91:19:fb:
23:65:2b:9c:8d:fa:ce:52:c5:b5:e8:6b:29:19:81:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4F:B9:24:9A:F8:98:1C:C5:7E:65:F4:00:6A:53:6E:ED:FD:C9:2E
X509v3 Authority Key Identifier:
keyid:04:DB:47:55:C7:5A:83:1C:D9:18:17:E6:A9:B7:E4:E1:ED:2D:F2:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/04DB4755C75A831CD91817E6A9B7E4E1ED2DF2D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ad:1b:fb:19:09:50:01:76:7a:bb:2c:2a:a4:29:32:b6:fc:
f8:9d:11:8d:37:ea:f1:28:ad:8b:f0:3a:bc:ab:1c:ae:79:40:
a6:d6:40:1e:21:71:c1:01:15:e0:ea:1b:aa:d6:a6:4a:07:14:
31:b5:25:eb:86:61:77:80:f3:5a:b5:dd:2f:1d:d2:80:7e:6f:
46:60:29:31:36:e3:76:d8:e6:60:12:37:fe:8d:f2:60:e3:ac:
18:73:f0:b8:d7:f3:e9:af:58:91:e4:15:d5:74:5f:c0:db:df:
a1:1c:73:a9:db:b9:a6:c8:12:aa:af:19:d9:3d:96:72:01:72:
33:02:cd:a2:5c:de:09:1b:b3:5c:d5:9c:83:b6:ab:cd:90:3a:
46:9e:ce:df:57:db:2b:2a:c9:4c:64:35:03:c7:42:b6:d3:9d:
17:e3:3f:e1:fe:c7:c3:cb:7a:ff:69:c5:86:f7:15:c6:f7:31:
a8:6b:c9:ae:4a:e8:43:82:1b:81:93:69:f2:f4:4d:48:b5:d5:
4a:39:f2:25:d1:2d:32:5d:c2:04:b6:49:0d:28:61:fa:ff:dc:
82:15:fa:5a:e6:c3:e0:cd:7a:5f:5e:d9:bf:57:15:51:de:25:
e2:41:6c:ae:89:e5:37:4c:07:2f:a7:e9:8c:38:60:80:b5:1d:
d6:48:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 06:24:15 2026 by rpki-client