
$ rpki-client -vvf rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
File: 4A690EC844644FC7C72921E7FA9D8B8827A68133.mft (raw, json)
Hash identifier: IMIuZSpPNB2FsXSyv7zEWbyIxsMntoQHBoAdTSJuCms=
Subject key identifier: 73:37:A0:D1:33:AE:D4:CC:38:73:2B:59:20:A7:4B:FA:16:DE:71:F7
Authority key identifier: 4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33
Certificate issuer: /CN=4A690EC844644FC7C72921E7FA9D8B8827A68133
Certificate serial: 7D5753AC5FBB7D868B5E1A6A583564ECC440A1B3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
Manifest number: 68
Signing time: Sat 18 Jul 2026 01:24:08 +0000
Manifest this update: Sat 18 Jul 2026 01:19:08 +0000
Manifest next update: Sun 19 Jul 2026 02:59:08 +0000
Files and hashes: 1: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: UugzJo0XG4CnPFobTcgFSX6/vfuVvh/vQ7HS0KjLKPQ=)
2: 4A690EC844644FC7C72921E7FA9D8B8827A68133.crl (hash: +Qn9oeDfULKkv5gEcWomne2vYu2xyBRpB/YjddN6kAM=)
3: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: pESLqdHWwG9pCnMMcNgeB95CfcGiK8SY4ni1NsaDZJU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl
rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 20:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:57:53:ac:5f:bb:7d:86:8b:5e:1a:6a:58:35:64:ec:c4:40:a1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A690EC844644FC7C72921E7FA9D8B8827A68133
Validity
Not Before: Jul 18 01:19:08 2026 GMT
Not After : Jul 19 02:59:08 2026 GMT
Subject: CN=7337A0D133AED4CC38732B5920A74BFA16DE71F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8d:bb:cb:c1:43:69:ce:4a:71:e6:db:6b:b8:
e6:20:05:73:0f:8c:46:ae:8b:29:af:0d:22:a3:c1:
2a:4f:f4:1e:27:7c:52:db:2d:0b:5d:0d:1d:57:87:
c1:9e:0f:c8:a5:af:b5:62:d2:7f:72:21:85:8c:35:
14:b0:ed:67:1d:b4:c9:86:eb:e5:4c:55:51:c5:cf:
c5:45:54:0e:0a:cd:68:a1:83:c9:fa:5b:f5:47:35:
be:3e:ba:13:d6:67:16:aa:27:ab:d5:2b:6b:23:99:
0a:02:88:d4:ea:0d:95:70:2f:11:87:c9:70:1c:13:
5d:a8:6b:3b:0e:1c:4c:30:89:75:a2:d5:be:c3:04:
2a:c6:99:fe:cd:cd:fa:62:60:b3:10:f9:6e:66:36:
e7:4c:8b:5b:72:cd:30:c3:6e:c7:22:a4:5a:2d:72:
0e:32:20:c1:69:c6:3a:7d:9e:0c:88:85:c9:f2:9c:
e9:89:91:d1:c7:19:a6:45:3d:3b:15:20:7f:99:4c:
7e:64:6f:f8:e5:f1:a3:01:eb:98:fa:a7:ef:90:e0:
11:b0:10:40:78:fb:c8:ca:c2:1d:ea:dc:f1:e4:72:
f5:94:6f:6a:c3:6a:b1:5b:91:2e:af:8d:41:77:64:
b0:70:25:09:45:44:b5:e3:e7:70:0a:cc:c4:7d:1f:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:37:A0:D1:33:AE:D4:CC:38:73:2B:59:20:A7:4B:FA:16:DE:71:F7
X509v3 Authority Key Identifier:
keyid:4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6e:29:0b:c8:9b:8f:2d:80:c5:4f:1b:70:5b:d6:e8:43:3c:
b1:f6:f9:60:a7:f5:6c:c2:23:cb:23:8f:61:c5:ec:c3:e4:28:
cf:8e:f9:4c:c2:c4:23:73:36:2f:db:80:71:53:91:70:b6:28:
31:a1:df:8e:2b:c0:e5:c2:90:42:75:65:52:16:7e:d5:2d:02:
44:94:0a:37:b5:18:07:81:53:f9:bf:41:d1:77:97:00:d0:f9:
fc:9e:3d:ee:28:50:80:d2:8b:89:86:6a:6a:74:c0:98:0c:7d:
45:f5:df:24:91:05:19:47:05:62:f3:24:5c:a6:dd:d1:75:3f:
a8:8c:4b:43:ff:7b:c7:f1:2b:8b:91:c1:de:94:33:7a:e6:75:
4b:ef:ff:de:b4:c4:c6:68:40:db:b9:f2:c1:4f:af:28:e5:5e:
45:89:66:f9:2c:ca:08:d4:b9:91:0b:73:42:8c:93:0c:1b:1d:
c9:01:f5:c7:20:db:a3:79:36:04:c3:98:11:7b:0e:d0:cf:4c:
19:01:66:d7:98:2d:a5:11:b8:54:80:6a:49:3f:6f:e0:43:d9:
f4:cc:28:a8:fe:15:73:01:98:05:1a:8d:40:a3:59:2c:f1:8b:
11:a9:6a:6d:e6:ab:3e:7c:63:b7:30:8c:ab:29:75:fd:ed:19:
b4:a9:62:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:58:09 2026 by rpki-client