
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.mft
File: 04802014594DAC827C3F8FBF392DF25D2C1943C5.mft (raw, json)
Hash identifier: Lx+sqZSRp7v4ifFFUrpoI8td1ZuBcboQIw36XMdsMtE=
Subject key identifier: 43:C4:75:07:CC:5B:3B:36:76:17:CE:9A:7A:57:BE:DA:8D:71:1A:67
Authority key identifier: 04:80:20:14:59:4D:AC:82:7C:3F:8F:BF:39:2D:F2:5D:2C:19:43:C5
Certificate issuer: /CN=04802014594DAC827C3F8FBF392DF25D2C1943C5
Certificate serial: 209D3A0DE9362496FEA2B254FDD1357AE01DCF5F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04802014594DAC827C3F8FBF392DF25D2C1943C5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 20:39:30 +0000
Manifest this update: Wed 16 Sep 2026 20:34:30 +0000
Manifest next update: Thu 17 Sep 2026 21:28:30 +0000
Files and hashes: 1: 04802014594DAC827C3F8FBF392DF25D2C1943C5.crl (hash: wZPc6I7/43NVTdNz/8g4toKQWbHiJNc3O3jG4xjg4ZY=)
2: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: DPbwWaqhZhIf++Ujgi9BYNcGolMoqcI02wvNDZg4xw8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.crl
rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04802014594DAC827C3F8FBF392DF25D2C1943C5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 21:28:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:9d:3a:0d:e9:36:24:96:fe:a2:b2:54:fd:d1:35:7a:e0:1d:cf:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04802014594DAC827C3F8FBF392DF25D2C1943C5
Validity
Not Before: Sep 16 20:34:30 2026 GMT
Not After : Sep 17 21:28:30 2026 GMT
Subject: CN=43C47507CC5B3B367617CE9A7A57BEDA8D711A67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:45:9b:e2:24:e4:6e:a0:b5:1b:3e:fe:89:
61:c0:ea:78:7a:32:9f:0f:19:30:18:69:a3:33:42:
e0:2c:2e:2e:ca:70:2d:43:e8:32:15:47:9a:7e:c9:
c6:b3:e8:4d:92:2d:c9:e8:b4:29:a9:7a:03:f6:45:
38:a0:3c:c0:99:91:98:18:cf:8c:99:99:55:e5:53:
df:48:e6:8b:33:9b:ba:a3:f1:7b:fa:a8:b7:ca:08:
21:ec:6f:e1:d9:7c:bd:bf:60:e9:b9:6e:dc:be:23:
a1:63:38:6c:7c:4d:0a:6c:ff:99:3b:2a:c1:ff:c8:
f5:8f:7d:f2:8a:31:06:31:e2:bd:44:e8:91:9f:14:
00:96:12:d6:2d:7e:e2:ab:ae:d8:88:c6:0d:40:53:
cf:76:d1:ed:84:33:f7:c0:5e:e0:36:c4:27:6e:c1:
20:7c:46:5b:36:2b:72:df:ff:9c:1b:aa:07:c6:8f:
34:25:4d:90:fb:d0:1a:b4:f8:32:f4:42:6d:ca:60:
f9:0c:8a:94:85:e7:24:d4:0e:3a:bd:49:a7:58:e0:
97:a8:b9:89:39:a8:75:88:24:87:b5:5a:4e:31:79:
56:c0:be:8f:01:3c:fa:cc:40:16:77:d7:4c:4a:d1:
c6:5b:c0:4d:72:d0:d0:b7:c0:fc:0b:eb:de:b4:a7:
d0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C4:75:07:CC:5B:3B:36:76:17:CE:9A:7A:57:BE:DA:8D:71:1A:67
X509v3 Authority Key Identifier:
keyid:04:80:20:14:59:4D:AC:82:7C:3F:8F:BF:39:2D:F2:5D:2C:19:43:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04802014594DAC827C3F8FBF392DF25D2C1943C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ee:e6:9b:1b:be:29:86:c3:bb:67:ac:8f:af:6a:eb:d4:a7:
f5:bc:4f:37:c1:3b:f4:c1:6a:64:67:d3:c3:25:33:01:f6:ba:
d5:7c:4e:ee:49:ab:de:57:40:50:1f:2c:64:8f:fe:f5:6d:87:
18:64:b5:90:28:f7:7b:a8:0a:0e:fd:5f:05:43:e6:65:33:92:
c0:48:b5:bc:0d:ec:b5:bd:e2:15:f3:17:2a:ba:ff:08:3d:8b:
d3:2e:e6:44:67:c9:62:44:5a:19:4d:22:e5:cd:2d:df:3e:87:
fc:d2:c3:b6:dd:cb:a6:e7:e6:cd:da:44:2e:bc:bd:13:de:de:
c8:a1:1e:e1:76:42:a7:df:34:4d:67:6f:d5:f8:5c:da:be:3b:
1b:86:d9:ee:25:cf:55:79:2d:ec:80:16:ac:2f:e0:f9:e0:83:
24:be:25:e5:2f:d6:67:4c:07:28:05:c7:cd:37:59:b8:8b:9c:
1c:36:2c:3a:1d:7c:84:63:b2:f6:41:28:67:0e:34:40:77:48:
af:f1:82:fd:be:e8:12:56:0f:39:01:77:74:a5:63:1f:49:0c:
d2:03:f7:d4:6f:0e:24:14:9b:e6:73:32:8f:e7:b4:17:43:7e:
0c:d6:81:26:fb:b4:f5:01:22:29:be:ad:38:c4:f9:29:80:8b:
79:37:e9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 08:24:33 2026 by rpki-client