
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft
File: 4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft (raw, json)
Hash identifier: CVVmBNDQYFHPmLjgAsl326p0qiVcwnqRWYSJQfj3kIQ=
Subject key identifier: 5C:D8:3B:BF:15:52:A9:3E:B5:4F:40:33:A4:F7:6A:C5:AB:5D:B2:41
Authority key identifier: 4B:3B:54:F4:A1:20:3D:9D:F5:E8:09:42:28:C9:1F:C2:1F:F2:C5:C4
Certificate issuer: /CN=4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4
Certificate serial: 5EF010A0FBAFE92BF63A7070CDA2FDBE18FF03AC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft
Manifest number: A6
Signing time: Fri 04 Sep 2026 02:09:13 +0000
Manifest this update: Fri 04 Sep 2026 02:04:13 +0000
Manifest next update: Sat 05 Sep 2026 02:37:13 +0000
Files and hashes: 1: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: esc3McyAl6hUlG4d1U+cxH9phLSFNKnapu2B7Ix2aTI=)
2: 4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl (hash: imfArHuVDCq8Uht2EKVVmlPZVnysouQmfe1WymOPOtE=)
3: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: rk63OWefzg4vng4Tc3mM68t8dHw3/EWO+Sh3DRDdtqA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl
rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 02:37:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f0:10:a0:fb:af:e9:2b:f6:3a:70:70:cd:a2:fd:be:18:ff:03:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4
Validity
Not Before: Sep 4 02:04:13 2026 GMT
Not After : Sep 5 02:37:13 2026 GMT
Subject: CN=5CD83BBF1552A93EB54F4033A4F76AC5AB5DB241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:2b:cb:b6:6a:7c:59:9b:58:22:24:b0:46:c9:
d4:ee:6f:f8:3d:da:4d:cb:c4:b3:a2:f4:c1:ba:52:
ed:4c:88:f4:40:85:65:71:ca:2a:79:c0:aa:da:82:
c1:f5:c6:7c:89:94:8a:f8:b8:05:11:19:73:1b:25:
44:a5:b4:9e:11:78:51:68:f8:fc:08:90:78:00:53:
18:7e:04:97:85:b5:dd:2e:b4:18:17:04:87:26:8e:
35:bb:ea:26:8e:23:6c:78:fc:93:c3:c9:da:e2:47:
12:64:7d:aa:5f:c8:98:12:93:cb:90:52:c0:11:d5:
b1:a7:0c:01:59:c3:25:1e:da:ce:e9:df:17:06:af:
8d:69:1b:e1:7b:74:55:41:68:47:04:2b:be:44:e7:
c7:44:80:cf:8a:ea:14:36:ef:e9:63:da:38:ad:2c:
04:82:fe:2f:47:35:23:63:d1:ff:01:ab:63:c7:2b:
65:bb:90:73:de:fd:2f:22:06:dd:7c:3e:7e:d9:83:
29:d7:4d:99:0e:60:29:17:8c:5e:b3:60:39:dc:e3:
b3:ea:15:82:b7:66:fa:57:b4:76:3e:00:11:e7:16:
b6:7f:d3:8d:ff:8d:5f:6a:3e:73:48:82:47:99:47:
46:cc:34:53:7b:f4:ad:de:c9:90:95:8f:fe:0d:39:
50:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D8:3B:BF:15:52:A9:3E:B5:4F:40:33:A4:F7:6A:C5:AB:5D:B2:41
X509v3 Authority Key Identifier:
keyid:4B:3B:54:F4:A1:20:3D:9D:F5:E8:09:42:28:C9:1F:C2:1F:F2:C5:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/4B3B54F4A1203D9DF5E8094228C91FC21FF2C5C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f5:b0:00:2d:86:4f:46:2a:03:88:bc:61:22:30:17:89:00:
44:48:71:64:a5:7d:a2:19:8b:c1:22:79:18:ce:5b:67:e8:e9:
87:7d:cf:05:9b:b4:5a:b7:28:6e:c7:e8:f0:a3:c6:6a:17:3b:
2a:a4:87:3e:29:d3:5c:92:94:2d:59:65:fd:ed:04:93:a0:85:
cf:6e:da:19:c9:85:3d:60:41:8c:3d:37:56:58:a5:e4:f5:87:
2c:1b:38:44:ed:c1:56:d0:84:17:12:09:54:02:9b:a6:43:86:
5b:f7:b2:64:30:45:a3:17:90:a8:22:d1:ac:15:dd:e3:05:94:
46:c1:e0:b7:54:e0:71:d0:e3:f0:10:d7:3d:ca:fe:ca:57:e8:
2f:72:43:d1:b3:aa:a9:9d:b4:1f:7f:7b:b6:f2:1d:e5:f3:1d:
10:dc:05:21:7f:db:45:8f:b0:e4:01:ab:b8:de:b2:2d:65:c7:
69:3c:cd:64:49:5f:2e:e0:2c:d6:17:87:9c:6d:39:3c:1c:3a:
9e:b0:6d:d0:bb:4d:b7:da:79:29:49:d3:6b:fe:74:3b:c3:5e:
1a:14:a0:43:27:a2:c0:77:c8:12:10:24:7b:a5:b6:3c:c8:56:
af:75:71:c3:e7:10:d2:dc:37:64:93:16:b8:96:79:fc:7b:21:
35:eb:f7:5f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXvAQoPuv6Sv2OnBwzaL9vhj/A6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIzQjU0RjRBMTIwM0Q5REY1RTgwOTQyMjhDOTFGQzIx
RkYyQzVDNDAeFw0yNjA5MDQwMjA0MTNaFw0yNjA5MDUwMjM3MTNaMDMxMTAvBgNV
BAMTKDVDRDgzQkJGMTU1MkE5M0VCNTRGNDAzM0E0Rjc2QUM1QUI1REIyNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6K8u2anxZm1giJLBGydTub/g9
2k3LxLOi9MG6Uu1MiPRAhWVxyip5wKragsH1xnyJlIr4uAURGXMbJUSltJ4ReFFo
+PwIkHgAUxh+BJeFtd0utBgXBIcmjjW76iaOI2x4/JPDydriRxJkfapfyJgSk8uQ
UsAR1bGnDAFZwyUe2s7p3xcGr41pG+F7dFVBaEcEK75E58dEgM+K6hQ27+lj2jit
LASC/i9HNSNj0f8Bq2PHK2W7kHPe/S8iBt18Pn7ZgynXTZkOYCkXjF6zYDnc47Pq
FYK3ZvpXtHY+ABHnFrZ/043/jV9qPnNIgkeZR0bMNFN79K3eyZCVj/4NOVBHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUXNg7vxVSqT61T0AzpPdqxatdskEwHwYDVR0j
BBgwFoAUSztU9KEgPZ316AlCKMkfwh/yxcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWExZTBiZDctMjgxYS00ZWJhLWI5OGMtODI5MzkzMjdkZGQ3LzAvNEIzQjU0RjRB
MTIwM0Q5REY1RTgwOTQyMjhDOTFGQzIxRkYyQzVDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QjNCNTRGNEExMjAzRDlERjVFODA5NDIyOEM5MUZDMjFGRjJD
NUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5
OGMtODI5MzkzMjdkZGQ3LzAvNEIzQjU0RjRBMTIwM0Q5REY1RTgwOTQyMjhDOTFG
QzIxRkYyQzVDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGz1sAAthk9GKgOIvGEiMBeJAERIcWSlfaIZ
i8EieRjOW2fo6Yd9zwWbtFq3KG7H6PCjxmoXOyqkhz4p01ySlC1ZZf3tBJOghc9u
2hnJhT1gQYw9N1ZYpeT1hywbOETtwVbQhBcSCVQCm6ZDhlv3smQwRaMXkKgi0awV
3eMFlEbB4LdU4HHQ4/AQ1z3K/spX6C9yQ9GzqqmdtB9/e7byHeXzHRDcBSF/20WP
sOQBq7jesi1lx2k8zWRJXy7gLNYXh5xtOTwcOp6wbdC7TbfaeSlJ02v+dDvDXhoU
oEMnosB3yBIQJHultjzIVq91ccPnENLcN2STFriWefx7ITXr918=
-----END CERTIFICATE-----
Generated at Fri Sep 4 12:18:48 2026 by rpki-client