
$ rpki-client -vvf rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft
File: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft (raw, json)
Hash identifier: M+otaX7I7dRuEXbBlIMmL6NoB5ajsnszpgpEZkqlg9A=
Subject key identifier: 77:C8:6D:B2:76:A1:7D:FF:A6:B4:1C:DB:B6:53:2E:E0:3B:20:D7:C5
Authority key identifier: 45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02
Certificate issuer: /CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02
Certificate serial: 65D9C565C9A20C494F0EFE19BBE521FC21D6DCF5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft
Manifest number: 66
Signing time: Sat 18 Jul 2026 01:34:19 +0000
Manifest this update: Sat 18 Jul 2026 01:29:19 +0000
Manifest next update: Sun 19 Jul 2026 04:45:19 +0000
Files and hashes: 1: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: hNE8AnSN+vRbiP5vQpWagsBp5MnBUN8YVklxG43kEGI=)
2: 45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl (hash: A55//sXlyeZ9j1TjW4UsTFXbpgOITf+vMFHsZPkIOCE=)
3: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: hmULjlvlGETEEONRtMrj0kFaR1mcxnKV/sZv1gIWDTE=)
4: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: vTXEw2nFS8mBOVTo8lu49rzJxOq1c9YHy/bnjV3FQcc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl
rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 20:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:d9:c5:65:c9:a2:0c:49:4f:0e:fe:19:bb:e5:21:fc:21:d6:dc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02
Validity
Not Before: Jul 18 01:29:19 2026 GMT
Not After : Jul 19 04:45:19 2026 GMT
Subject: CN=77C86DB276A17DFFA6B41CDBB6532EE03B20D7C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:ac:05:39:c0:93:15:27:4b:2b:47:fd:3e:
84:22:c7:be:3b:e0:58:0e:5e:27:a2:4e:56:57:4c:
6b:89:ef:8c:f6:fa:11:e0:26:a9:15:4b:f6:ab:05:
36:4c:70:74:f8:0b:fa:60:05:13:eb:82:9c:b1:d3:
a9:88:da:84:7a:bd:65:af:7f:43:2c:e1:65:d0:1e:
f9:9a:11:f3:12:6a:eb:59:1e:80:4b:cb:8c:97:0f:
2d:01:31:58:72:92:42:77:09:bf:f8:9b:00:45:44:
e8:2f:83:cd:1a:dd:29:f5:f2:e4:30:8c:49:ab:b1:
ff:e6:d7:f1:2a:e8:92:b9:87:74:4e:df:0b:23:d4:
e6:2e:eb:b2:d6:b5:2c:5e:77:f3:73:5b:c8:d0:f4:
07:19:6c:ae:70:9b:82:12:c9:3d:bb:b3:e0:5e:88:
04:89:ec:8d:cd:87:9f:46:4a:c7:e9:53:47:ed:e0:
e4:c3:68:26:c1:0c:bf:9b:e0:08:85:3e:ef:22:71:
1e:99:ab:7f:59:67:0f:01:72:59:23:fb:d1:ea:dd:
83:59:42:54:77:98:9c:a3:06:7c:bb:79:9d:16:94:
a3:30:92:b5:95:a8:9e:0f:9d:9a:61:b1:61:28:c8:
c6:1f:4c:42:71:f9:4d:96:28:02:63:70:62:ac:66:
76:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C8:6D:B2:76:A1:7D:FF:A6:B4:1C:DB:B6:53:2E:E0:3B:20:D7:C5
X509v3 Authority Key Identifier:
keyid:45:A1:C3:F1:DC:A7:B7:CC:A8:DB:A0:23:EE:C2:D5:9E:36:10:8D:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/45A1C3F1DCA7B7CCA8DBA023EEC2D59E36108D02.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f9:0b:21:93:f9:f0:dc:4b:f9:01:1f:23:e2:ff:8b:6b:21:
80:4b:dc:fc:20:5d:f0:ce:c5:e8:56:48:bf:4d:9e:06:c4:6c:
12:46:27:27:57:36:33:d0:6d:a1:80:ac:83:11:5c:bc:68:82:
37:a0:68:6c:58:86:e6:22:ab:ec:46:c6:e0:bd:c4:75:70:b4:
54:cc:e4:6e:74:1c:0b:16:8e:c8:88:02:de:0d:31:6b:a9:9e:
4a:ac:04:de:da:17:9d:b0:ee:2d:35:c9:2c:1b:a2:0b:81:8a:
a2:7f:65:02:63:ca:c7:0d:3d:8f:16:5b:d4:cd:68:a0:90:41:
b2:64:21:27:1e:5c:cb:88:49:eb:42:b6:4a:ff:6a:6e:4a:00:
11:81:de:7d:83:e2:d5:44:87:89:14:05:cd:7c:0e:05:7e:27:
10:9b:a2:c9:e3:a0:50:ae:44:94:ad:c3:a2:c3:45:fa:c2:09:
f8:b8:9e:d8:d3:f3:97:24:aa:68:ee:66:41:0b:11:72:7c:64:
72:66:35:9b:dd:fe:8d:4b:03:19:ae:82:92:a6:df:53:36:f7:
71:1b:0d:88:c7:3a:36:83:3c:d7:36:d4:b6:14:75:5e:46:2e:
2b:db:18:15:d4:a8:a0:b6:63:46:60:e7:a3:92:90:11:7d:85:
e6:17:b2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:56:47 2026 by rpki-client