
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft
File: 4BEF373BC53710D136B40D9F928C485C94C670AC.mft (raw, json)
Hash identifier: yG6Fa19dzw6xwuzztH/blH/uiI7f/EqTXYLIPflAv6Y=
Subject key identifier: 55:45:D2:1A:88:C2:E9:82:EA:78:B6:17:E7:BB:75:FB:5A:BD:96:63
Authority key identifier: 4B:EF:37:3B:C5:37:10:D1:36:B4:0D:9F:92:8C:48:5C:94:C6:70:AC
Certificate issuer: /CN=4BEF373BC53710D136B40D9F928C485C94C670AC
Certificate serial: 180E601E0F6DDACC8AB78E806D3EB2A8007E3BA8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft
Manifest number: B0
Signing time: Thu 10 Sep 2026 17:54:02 +0000
Manifest this update: Thu 10 Sep 2026 17:49:02 +0000
Manifest next update: Fri 11 Sep 2026 19:05:02 +0000
Files and hashes: 1: 4BEF373BC53710D136B40D9F928C485C94C670AC.crl (hash: 8VUphFSawiJZF7QRBy+Ixsuka7CxWxKDAlMgoEYEuCQ=)
2: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: BeyFn4HdqSwVXnWm2K4O6j5GAQt7VRMXeOWfjpsb09s=)
3: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: u0AoFky6YChlG8p9ccsv4zHYDeuKyJl51gZR3MByaxM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.crl
rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 11:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:0e:60:1e:0f:6d:da:cc:8a:b7:8e:80:6d:3e:b2:a8:00:7e:3b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BEF373BC53710D136B40D9F928C485C94C670AC
Validity
Not Before: Sep 10 17:49:02 2026 GMT
Not After : Sep 11 19:05:02 2026 GMT
Subject: CN=5545D21A88C2E982EA78B617E7BB75FB5ABD9663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:5c:00:7d:ef:82:61:80:38:62:22:f8:da:
2c:bc:9e:5d:0a:a3:a4:2c:1d:65:9f:03:05:26:0c:
84:79:b3:e8:79:4a:ce:b1:3f:dd:43:a4:44:ed:a6:
14:16:1b:fd:4f:bb:fd:61:15:78:df:af:af:5b:ee:
a9:26:25:80:95:4c:b2:16:d9:40:91:ad:f5:de:cb:
4d:6f:fc:be:09:8d:0e:84:3a:ba:b6:e8:b7:42:f8:
06:ab:01:d5:5d:bd:12:19:b2:82:f2:5a:23:cc:59:
76:6c:1f:f2:46:6c:1b:a8:8e:47:0f:a5:67:80:ce:
dc:a2:00:25:7d:7a:8a:7a:0c:eb:5b:4f:91:99:07:
74:66:15:51:f4:27:d9:b0:0d:f8:76:25:24:12:51:
d3:e5:a5:07:cf:94:2f:e7:1f:16:5c:55:b5:81:44:
e1:9c:6e:9b:92:36:41:16:fa:0b:8e:81:d1:76:59:
51:de:ba:ac:c7:64:36:0a:82:06:dd:ab:d2:6c:61:
2c:15:02:4d:ae:7b:78:2c:56:04:cd:f4:c9:18:05:
b4:be:c9:34:65:74:08:35:95:c1:19:a7:2b:2d:42:
6b:eb:07:24:ba:13:92:c6:be:24:c9:95:ea:31:a4:
94:e3:ec:50:d4:69:a8:c9:ca:e9:70:04:2b:3f:d9:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:45:D2:1A:88:C2:E9:82:EA:78:B6:17:E7:BB:75:FB:5A:BD:96:63
X509v3 Authority Key Identifier:
keyid:4B:EF:37:3B:C5:37:10:D1:36:B4:0D:9F:92:8C:48:5C:94:C6:70:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:41:3c:a6:d4:01:3c:57:e7:85:37:f7:f0:0b:97:a8:65:4f:
e8:e0:6a:2d:20:f6:c5:3e:a9:6f:c4:da:57:23:bc:1e:a7:79:
d9:2d:cf:b8:c4:41:0d:3d:8a:9b:7b:b9:7a:32:9a:4d:0e:1c:
63:8d:d3:87:77:dd:d6:9c:8b:19:21:be:c5:3f:2c:27:a5:ba:
4c:b3:20:69:8a:99:c0:94:87:c7:8c:59:6b:fe:c0:02:07:73:
eb:92:c5:7b:18:77:36:18:4a:e3:d0:a8:1a:cd:b3:c6:48:80:
0d:ad:bd:e5:ca:de:6d:3f:55:48:15:23:0f:f9:16:da:71:0a:
3c:9a:81:23:b4:87:b4:cc:2a:c8:88:26:5d:b4:75:41:11:0d:
df:a3:31:1e:99:66:b7:c6:48:e2:f1:d8:9c:63:c1:48:94:a1:
e3:31:e1:3c:d1:ee:8b:0e:b8:84:4e:83:8e:12:08:ac:3b:2a:
86:a7:00:d7:0c:4a:1d:db:6f:1a:29:26:cc:6c:0f:ec:cc:27:
47:c2:82:a6:e2:74:e8:31:db:20:f0:b8:99:f5:20:ba:bf:be:
24:66:df:f0:cd:98:92:3b:07:0f:a4:a8:61:08:f7:0c:51:1b:
7b:57:8c:58:73:1e:a0:0a:8a:db:e3:3a:be:26:8f:08:9a:69:
15:a1:56:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:36:44 2026 by rpki-client