
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
File: 4A690EC844644FC7C72921E7FA9D8B8827A68133.mft (raw, json)
Hash identifier: hNHwaI5dnNudwoKAFfjlPZYaWE/39WCMeTKnEkKQ99I=
Subject key identifier: 5F:99:6F:03:CB:B1:73:DF:2A:E2:F4:19:C1:61:85:49:2F:B7:DC:8E
Authority key identifier: 4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33
Certificate issuer: /CN=4A690EC844644FC7C72921E7FA9D8B8827A68133
Certificate serial: 2018AE83AF7B219AF6EF6282655E21E7D7CEDCD9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
Manifest number: E6
Signing time: Wed 21 Oct 2026 11:33:23 +0000
Manifest this update: Wed 21 Oct 2026 11:28:23 +0000
Manifest next update: Thu 22 Oct 2026 12:12:23 +0000
Files and hashes: 1: 4A690EC844644FC7C72921E7FA9D8B8827A68133.crl (hash: 6sCE2WyhYCHxhASmtGmGm3tuTS0iF7aiE9xfRjJtKuQ=)
2: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: pESLqdHWwG9pCnMMcNgeB95CfcGiK8SY4ni1NsaDZJU=)
3: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: UugzJo0XG4CnPFobTcgFSX6/vfuVvh/vQ7HS0KjLKPQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl
rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 09:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:18:ae:83:af:7b:21:9a:f6:ef:62:82:65:5e:21:e7:d7:ce:dc:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A690EC844644FC7C72921E7FA9D8B8827A68133
Validity
Not Before: Oct 21 11:28:23 2026 GMT
Not After : Oct 22 12:12:23 2026 GMT
Subject: CN=5F996F03CBB173DF2AE2F419C16185492FB7DC8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:a6:cb:e3:e2:64:71:bc:bc:1e:4d:58:f3:
95:ec:bc:a1:92:fb:18:e3:63:37:c9:2b:58:27:48:
d3:53:31:ff:6e:50:a5:c1:84:12:62:ac:45:bf:ac:
df:dd:23:be:ba:b9:c6:0d:be:b9:f0:86:32:a8:4a:
5e:56:92:a2:da:fd:b1:a7:c1:d4:2d:89:6c:d0:0d:
95:0d:7d:ae:43:bf:88:99:12:ca:b8:52:64:5a:8c:
b7:98:4e:e7:b5:3a:8d:34:20:01:c8:3d:ca:ba:e9:
67:f0:f6:ac:47:11:0b:61:21:44:47:c7:97:9f:a7:
54:80:de:42:92:55:c5:1e:11:de:29:66:5b:8e:5a:
72:74:e7:55:fe:57:c2:19:07:ed:bc:75:ee:b5:06:
f8:d3:28:9e:2a:d5:6d:64:6f:52:cd:cf:ea:b4:2e:
eb:d8:d4:0e:40:43:87:3f:fc:6a:9f:68:0e:60:6c:
d7:14:e1:cc:bb:91:ec:5d:a7:32:ec:24:2d:0e:88:
01:58:da:47:48:19:8d:79:76:c7:40:88:19:aa:83:
a7:61:94:92:9f:a6:53:7c:41:61:c0:94:03:24:28:
11:5d:a2:b2:83:c6:d4:47:ac:50:84:bb:b5:d2:76:
98:6e:60:0e:ea:d5:6a:f0:4e:83:cc:bd:88:3a:9e:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:99:6F:03:CB:B1:73:DF:2A:E2:F4:19:C1:61:85:49:2F:B7:DC:8E
X509v3 Authority Key Identifier:
keyid:4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:92:3f:22:04:30:b6:e4:00:72:ff:db:3b:e7:a0:00:0c:b7:
f9:1e:7e:ba:bc:2b:de:7d:e9:fe:0b:a4:61:9e:65:1a:68:06:
e3:bf:d2:5c:e1:0b:96:ac:89:4d:e9:39:84:51:b4:4f:ac:a9:
e0:ca:a8:36:84:d4:97:70:ce:ae:60:25:d8:a5:1c:97:a0:e5:
3c:1d:70:8e:6f:d4:99:8a:7d:36:b6:b8:e9:e2:f5:88:7b:eb:
af:05:b5:1c:b8:99:e4:b9:74:70:53:6d:16:eb:bd:e0:03:9d:
04:22:0d:56:bf:56:25:19:bc:1d:27:5f:bb:e2:ba:04:c7:20:
7f:9a:b1:b6:f6:4e:af:5d:27:38:6c:28:64:96:ae:1a:32:d5:
76:53:d5:99:64:b3:42:cf:91:40:46:3c:a7:21:d0:87:77:50:
78:b8:c4:71:37:a3:75:48:8e:65:f5:8a:5a:0b:87:96:1c:ef:
af:31:aa:ee:8a:e9:cb:92:74:58:9b:8a:d7:fd:22:7c:01:f8:
7d:4a:d3:5f:fa:7b:22:35:4f:cb:60:23:e6:32:ed:a7:13:a6:
0b:c2:18:d0:ba:b3:fe:a5:4e:ab:4e:7a:fc:35:d3:66:64:74:
b1:98:d9:dc:43:4e:6f:0b:2c:7d:55:8f:ed:7d:4a:5a:22:9a:
80:b3:9c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:45:49 2026 by rpki-client