
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.mft
File: 45AB46F2FD631F732ABD2CA6402F2CD6704A930A.mft (raw, json)
Hash identifier: qmP5vuoo6+B5lBBaTOGLD5aK9gI5YnO7enqjHAxI2MU=
Subject key identifier: C4:B4:C8:4B:F7:C9:21:4E:44:0F:EF:56:24:70:FA:D7:AC:A0:B9:0C
Authority key identifier: 45:AB:46:F2:FD:63:1F:73:2A:BD:2C:A6:40:2F:2C:D6:70:4A:93:0A
Certificate issuer: /CN=45AB46F2FD631F732ABD2CA6402F2CD6704A930A
Certificate serial: 388D5BD17DC36A0FACB53D9ACBB82D631568C52B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.mft
Manifest number: F5
Signing time: Tue 03 Nov 2026 11:27:24 +0000
Manifest this update: Tue 03 Nov 2026 11:22:24 +0000
Manifest next update: Wed 04 Nov 2026 15:05:24 +0000
Files and hashes: 1: 45AB46F2FD631F732ABD2CA6402F2CD6704A930A.crl (hash: J3bSfN5cFSsUOTarCWnwfvzIFhCgxjFHV50O9yW4Z+M=)
2: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: FvZ7WZxzfXpsSvXJhkiOD/3SywK9juuYWNoUcsri8H4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.crl
rsync://rpki-rsync.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 10:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:8d:5b:d1:7d:c3:6a:0f:ac:b5:3d:9a:cb:b8:2d:63:15:68:c5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45AB46F2FD631F732ABD2CA6402F2CD6704A930A
Validity
Not Before: Nov 3 11:22:24 2026 GMT
Not After : Nov 4 15:05:24 2026 GMT
Subject: CN=C4B4C84BF7C9214E440FEF562470FAD7ACA0B90C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:ea:f6:5f:d9:66:95:4a:50:50:cd:d1:82:
0d:36:d0:db:49:ef:6d:01:b0:6c:4b:53:2a:79:00:
f5:c6:4b:a0:75:93:9e:cd:b1:cf:e6:f8:11:e0:a8:
c5:40:20:a9:40:ea:06:ab:79:01:fe:71:60:98:09:
c0:7b:16:7c:af:9c:de:10:61:50:8c:22:78:49:ed:
a7:3e:c3:f6:b3:63:af:4c:f3:b3:49:07:93:ad:58:
44:55:9b:d6:02:c0:fd:ca:cd:96:89:a5:8a:c3:ec:
4f:a6:c4:7b:e7:5c:67:76:de:1f:45:58:c9:e7:e3:
5b:07:3d:7d:a4:b4:73:68:6c:28:0f:07:6d:8c:ac:
8b:d9:38:d6:aa:79:2a:1a:22:6d:07:7e:b3:fa:46:
65:71:48:79:24:0d:e1:69:a3:12:a9:75:83:3e:a3:
32:56:74:c3:0c:df:6b:e1:91:da:eb:a9:4b:64:c6:
c3:dc:05:fc:6b:79:81:08:f2:e2:af:30:32:50:a9:
1e:8b:63:23:9b:75:cb:ae:e5:b8:3d:b5:a2:af:59:
28:7f:ae:57:c5:2f:8f:32:ec:e9:ab:d9:77:87:f0:
58:e2:d2:c9:df:74:52:ed:73:59:0a:4e:e9:d9:6e:
fc:1a:08:27:23:64:93:05:02:cc:51:20:cb:91:92:
06:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B4:C8:4B:F7:C9:21:4E:44:0F:EF:56:24:70:FA:D7:AC:A0:B9:0C
X509v3 Authority Key Identifier:
keyid:45:AB:46:F2:FD:63:1F:73:2A:BD:2C:A6:40:2F:2C:D6:70:4A:93:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/45AB46F2FD631F732ABD2CA6402F2CD6704A930A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4c:77:6b:6d:dd:e7:9d:60:83:1c:fd:40:86:9e:b0:2e:98:
c4:3e:bc:29:2f:81:15:07:f0:48:bc:2f:1f:e7:15:bc:7a:a0:
9f:13:dd:56:7c:df:8e:76:44:60:a5:a8:22:db:b3:81:14:0c:
8e:60:77:9e:03:90:17:ac:96:d6:c9:38:ff:a9:1e:e1:50:30:
36:9a:d1:2c:6a:11:d8:75:42:a1:a2:40:c6:ed:ee:98:02:b2:
69:a6:cb:ab:ae:4b:cd:14:7b:2e:73:4a:24:a9:1c:79:22:01:
10:dc:f5:8b:dd:61:ea:3f:e4:26:0c:20:65:a4:d6:8e:c5:6b:
e2:95:87:e9:1d:3c:a1:17:2c:b0:da:e9:cd:e6:c0:82:2d:1e:
11:d3:7f:4d:67:23:ca:98:1a:2b:ba:24:a5:94:c7:30:5a:c1:
d9:ca:a5:15:d7:77:04:74:03:91:71:27:c8:e4:80:c3:70:a4:
cd:df:28:84:d8:88:c3:e7:8e:06:1f:eb:db:fb:fb:18:14:47:
5e:f1:40:e4:63:e6:8d:49:84:e7:86:c2:72:81:8c:44:01:c4:
d3:78:7b:0a:66:7b:dc:d9:5a:b2:20:4c:a4:58:4f:4a:fb:4e:
9e:49:2a:9a:f0:45:29:25:20:b7:7c:79:38:9b:a7:d5:f8:8f:
7f:e7:71:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:38:09 2026 by rpki-client