
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.mft
File: 4B772653CA93D4068F6DD1DA58CBDAA651598C94.mft (raw, json)
Hash identifier: tgjWTK6rLJhnZP3C84FADuZThzb1ScA+uW/WRxD1J60=
Subject key identifier: 38:97:A4:8C:A0:C0:2A:2C:5F:80:CA:66:AE:99:83:0E:48:FA:D6:FA
Authority key identifier: 4B:77:26:53:CA:93:D4:06:8F:6D:D1:DA:58:CB:DA:A6:51:59:8C:94
Certificate issuer: /CN=4B772653CA93D4068F6DD1DA58CBDAA651598C94
Certificate serial: 3493415E637C3BB04CD82D00C7973135225D635D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B772653CA93D4068F6DD1DA58CBDAA651598C94.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.mft
Manifest number: A7
Signing time: Wed 02 Sep 2026 20:07:32 +0000
Manifest this update: Wed 02 Sep 2026 20:02:32 +0000
Manifest next update: Thu 03 Sep 2026 22:37:32 +0000
Files and hashes: 1: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (hash: LP4i7KxphXT4TiytVVY6T0WCBkg+cxC7sq55Sfj8HZg=)
2: 4B772653CA93D4068F6DD1DA58CBDAA651598C94.crl (hash: MnBBCYLgkWJYPrMLMR6u9Q9e5qZ0HgVHpE8Rm0mB5wk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.crl
rsync://rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B772653CA93D4068F6DD1DA58CBDAA651598C94.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 21:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:93:41:5e:63:7c:3b:b0:4c:d8:2d:00:c7:97:31:35:22:5d:63:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B772653CA93D4068F6DD1DA58CBDAA651598C94
Validity
Not Before: Sep 2 20:02:32 2026 GMT
Not After : Sep 3 22:37:32 2026 GMT
Subject: CN=3897A48CA0C02A2C5F80CA66AE99830E48FAD6FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:88:4d:a6:09:91:b8:51:ba:71:27:e0:aa:
76:cf:4f:43:1f:c0:4e:3e:ec:ff:93:e7:f3:ff:8d:
d4:23:4a:f9:4e:d2:ae:5a:1b:bb:e3:13:98:b6:32:
0a:1e:43:10:ef:1f:b4:eb:15:c1:ff:90:85:6c:6b:
36:37:de:28:be:b3:11:d9:c5:55:f5:de:4e:7e:2f:
ed:7d:7e:58:bf:4c:33:2e:28:83:70:56:bc:9c:e0:
8f:42:50:86:e5:1b:75:ff:27:33:2f:25:df:7b:55:
b2:ff:3c:c8:d0:c1:8e:c1:0e:73:ab:93:14:e7:16:
aa:8c:ef:91:1b:e3:34:36:2c:1c:77:70:4e:8d:13:
27:e6:ea:f0:0c:22:8d:2d:3b:5b:49:29:b1:60:5d:
46:36:1f:23:9f:6e:2d:b0:0d:69:45:a6:d6:62:c8:
55:95:29:c6:3b:e6:64:86:f3:f0:2c:1c:3d:2d:d7:
ca:0f:7c:6b:db:73:4d:6b:93:5f:a2:10:12:7b:0a:
6b:9b:5a:5e:49:19:6c:07:34:07:fb:c9:09:b5:3a:
c5:00:0f:28:41:9b:11:f3:a3:10:38:bb:43:b3:d6:
6d:88:aa:8e:87:3c:ba:85:06:e9:5d:ed:0b:f2:d6:
c6:4a:f5:29:ba:e6:d3:38:2a:5d:da:48:bd:50:59:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:97:A4:8C:A0:C0:2A:2C:5F:80:CA:66:AE:99:83:0E:48:FA:D6:FA
X509v3 Authority Key Identifier:
keyid:4B:77:26:53:CA:93:D4:06:8F:6D:D1:DA:58:CB:DA:A6:51:59:8C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B772653CA93D4068F6DD1DA58CBDAA651598C94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:b8:2e:af:58:83:5a:3a:f8:45:9d:d4:0c:27:91:30:55:95:
2f:49:4c:c1:17:47:16:3a:3e:ca:7c:94:6a:0a:08:b3:82:08:
9a:e0:83:e4:3a:26:12:c1:1e:cc:09:ac:61:fa:87:ee:eb:91:
88:7a:ce:87:e8:57:eb:e9:b6:d5:4e:4e:a8:dc:f8:07:4c:6f:
4f:92:47:c9:6f:5e:d1:26:9c:a5:a4:eb:e2:84:e2:48:45:d7:
00:dc:ac:aa:12:6c:d7:ce:ef:69:5d:dc:26:75:c2:37:39:83:
27:72:ae:ae:21:98:20:f1:a1:9a:6a:1b:2d:73:ba:9f:14:37:
09:2f:fb:9b:c3:6a:38:eb:f3:dc:43:13:b3:05:7e:a1:a8:23:
48:ff:8a:e0:0b:33:fb:be:3f:91:c4:55:69:39:08:1b:85:6c:
1c:b7:89:a0:45:fe:04:c1:a1:14:7a:fb:f3:4d:aa:96:93:a3:
e7:e1:26:35:69:ea:a4:a7:a2:3d:78:3a:07:8e:2a:91:49:b6:
78:88:92:0c:22:80:e0:22:87:4a:33:c5:0a:a8:86:03:4a:09:
4b:50:8d:82:0d:d4:bf:af:21:ee:c4:aa:24:72:a9:0b:0d:9b:
85:d5:f0:73:30:9a:0f:80:5c:28:6f:b1:9e:84:12:62:9b:62:
e3:b0:9e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:38:29 2026 by rpki-client