
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft
File: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft (raw, json)
Hash identifier: ojH0+3ROjizHtusZ9dr/76tSQNVMDIcBNXNek6aoWUk=
Subject key identifier: 78:D9:0C:49:DA:9F:0F:6A:75:D6:20:8C:11:73:50:0F:DF:86:31:37
Authority key identifier: 4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5
Certificate issuer: /CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5
Certificate serial: 75844303B7506D204FEE6B0B22913C374C44F4C2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 01:27:38 +0000
Manifest this update: Tue 21 Jul 2026 01:22:38 +0000
Manifest next update: Wed 22 Jul 2026 04:39:38 +0000
Files and hashes: 1: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: eAc+mnltXFWM2Zo7C5pCUJCKXwlG3JzkV70vxAzWX04=)
2: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: wL6gjmzCFjkZlG1aqyBw0D/I6Abo7eZzV1pr7Z6kz7k=)
3: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl (hash: FoameLzGPyNcbku2JnhRTzuItQDRYJ1pbDktRR9A9iM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl
rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:84:43:03:b7:50:6d:20:4f:ee:6b:0b:22:91:3c:37:4c:44:f4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5
Validity
Not Before: Jul 21 01:22:38 2026 GMT
Not After : Jul 22 04:39:38 2026 GMT
Subject: CN=78D90C49DA9F0F6A75D6208C1173500FDF863137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:22:06:5c:80:4d:cb:51:c2:62:6a:8d:0d:
1a:01:e1:c3:07:ce:73:e0:e6:c8:d7:a6:ae:b1:b9:
43:26:3b:a9:95:00:3e:fc:a6:53:6d:73:72:dc:38:
d0:30:1a:aa:b1:e1:93:3d:4c:6d:a0:24:c9:7d:b5:
c8:c8:f9:82:df:f7:ed:42:a6:2a:19:a6:67:27:08:
01:e8:9f:54:bf:90:1c:2d:fb:27:1e:4a:42:91:2a:
7a:a3:72:98:3a:8f:50:42:94:d0:4e:be:96:f9:2c:
87:e3:98:55:6b:24:44:34:6e:ef:49:5c:b8:6a:70:
17:57:59:d3:fa:3d:97:9f:25:17:e8:1e:d2:1a:a6:
a5:54:fc:ff:0a:63:68:43:ec:35:9b:89:5a:a9:b0:
af:d6:8d:f4:95:11:75:1c:60:b6:ad:99:8e:fe:f4:
ee:37:63:61:b1:fb:3b:cc:5e:fa:1f:3c:a5:d3:e9:
a7:43:80:96:4e:e8:8e:0a:51:7c:a2:ec:39:aa:d1:
43:d7:d4:18:bc:74:0f:bd:4a:74:10:0e:6f:4b:75:
86:80:47:f8:a1:5e:4f:c1:a3:ed:15:fa:11:ae:75:
20:bc:70:7e:16:26:af:63:28:c8:be:d5:8c:1b:1f:
07:5e:90:d3:ce:91:99:11:b3:88:a0:ab:f5:d1:e4:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D9:0C:49:DA:9F:0F:6A:75:D6:20:8C:11:73:50:0F:DF:86:31:37
X509v3 Authority Key Identifier:
keyid:4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b1:9a:d3:6a:28:48:2c:59:3a:b9:54:dd:72:c0:9e:ff:52:
82:6f:18:2f:4a:95:58:aa:3c:db:43:6c:5e:56:13:f1:ae:68:
a0:8f:24:ca:5d:d9:63:4d:53:2f:03:33:f0:cc:4d:bf:6b:8d:
5b:56:f0:73:e7:b8:ba:bd:6c:fe:77:65:f0:5f:bd:80:7b:74:
12:48:2f:24:66:db:73:42:af:92:d9:10:18:a5:e7:f6:09:69:
7b:3e:01:32:68:33:28:82:e9:7d:f9:74:a0:a6:3b:dc:70:ce:
b1:79:43:c1:72:2b:07:22:1c:a1:2b:03:95:79:bb:ea:10:31:
f6:46:ba:9c:b8:07:78:3c:b4:d9:80:b6:2c:9c:fb:44:78:2d:
4f:49:7c:3c:4d:a4:2d:59:3f:96:91:b7:31:e7:f0:bd:6f:8a:
0f:5f:ce:ab:2c:b7:6c:1f:de:d9:7b:a7:57:85:35:e7:cf:fb:
46:21:47:da:9c:25:92:c1:f7:b1:d2:35:8d:70:e2:c6:5c:0e:
a0:95:04:f9:cc:15:ed:3c:03:a7:5a:25:fe:8a:fe:c2:90:34:
4e:43:27:51:50:67:96:61:84:7e:12:7f:2f:8e:71:31:29:a6:
5d:25:d2:8f:10:b8:6f:7d:01:aa:df:ee:e6:f9:f1:47:14:ac:
e3:b4:61:0a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdYRDA7dQbSBP7msLIpE8N0xE9MIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEEzQTYwNjg4M0IxMjI3MTYxOUM3Q0I0OURGQ0QzNTlG
MEYzRTZGNTAeFw0yNjA3MjEwMTIyMzhaFw0yNjA3MjIwNDM5MzhaMDMxMTAvBgNV
BAMTKDc4RDkwQzQ5REE5RjBGNkE3NUQ2MjA4QzExNzM1MDBGREY4NjMxMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH7CIGXIBNy1HCYmqNDRoB4cMH
znPg5sjXpq6xuUMmO6mVAD78plNtc3LcONAwGqqx4ZM9TG2gJMl9tcjI+YLf9+1C
pioZpmcnCAHon1S/kBwt+yceSkKRKnqjcpg6j1BClNBOvpb5LIfjmFVrJEQ0bu9J
XLhqcBdXWdP6PZefJRfoHtIapqVU/P8KY2hD7DWbiVqpsK/WjfSVEXUcYLatmY7+
9O43Y2Gx+zvMXvofPKXT6adDgJZO6I4KUXyi7Dmq0UPX1Bi8dA+9SnQQDm9LdYaA
R/ihXk/Bo+0V+hGudSC8cH4WJq9jKMi+1YwbHwdekNPOkZkRs4igq/XR5K/7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUeNkMSdqfD2p11iCMEXNQD9+GMTcwHwYDVR0j
BBgwFoAUSjpgaIOxInFhnHy0nfzTWfDz5vUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTY5Mjk5MDEtYTEzNy00YTM1LTgxMzQtMTgwNGY5NDc5MmRmLzAvNEEzQTYwNjg4
M0IxMjI3MTYxOUM3Q0I0OURGQ0QzNTlGMEYzRTZGNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QTNBNjA2ODgzQjEyMjcxNjE5QzdDQjQ5REZDRDM1OUYwRjNF
NkY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTY5Mjk5MDEtYTEzNy00YTM1LTgx
MzQtMTgwNGY5NDc5MmRmLzAvNEEzQTYwNjg4M0IxMjI3MTYxOUM3Q0I0OURGQ0Qz
NTlGMEYzRTZGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJqxmtNqKEgsWTq5VN1ywJ7/UoJvGC9KlViq
PNtDbF5WE/GuaKCPJMpd2WNNUy8DM/DMTb9rjVtW8HPnuLq9bP53ZfBfvYB7dBJI
LyRm23NCr5LZEBil5/YJaXs+ATJoMyiC6X35dKCmO9xwzrF5Q8FyKwciHKErA5V5
u+oQMfZGupy4B3g8tNmAtiyc+0R4LU9JfDxNpC1ZP5aRtzHn8L1vig9fzqsst2wf
3tl7p1eFNefP+0YhR9qcJZLB97HSNY1w4sZcDqCVBPnMFe08A6daJf6K/sKQNE5D
J1FQZ5ZhhH4Sfy+OcTEppl0l0o8QuG99Aarf7ub58UcUrOO0YQo=
-----END CERTIFICATE-----
Generated at Tue Jul 21 08:28:51 2026 by rpki-client