
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
File: F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft (raw, json)
Hash identifier: S60vz8ehkt8q3ya3rfCMwSKSTTIiX6FkR889WlXrMJA=
Subject key identifier: 26:70:E2:8A:7A:4C:47:8D:2C:07:39:E3:5B:36:0B:44:60:E6:A5:76
Authority key identifier: F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
Certificate issuer: /CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Certificate serial: 4EDB994285D0788557480C61680D669D55D12C86
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
Manifest number: 9C
Signing time: Tue 25 Aug 2026 16:32:32 +0000
Manifest this update: Tue 25 Aug 2026 16:27:32 +0000
Manifest next update: Wed 26 Aug 2026 17:29:32 +0000
Files and hashes: 1: AS38482.roa (hash: KA9nG8aT17JSvx4ZMkbe/1LN/Gj81luh6YCCtc3PLq4=)
2: AS45493.roa (hash: JFF0dBU20PveLMjEby6Gyb1xZkghp5FhZDVpNjyb37Q=)
3: F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl (hash: IwPV17XusQQSUMAYZYU5lidQ+PDMaHMmaaQzPhq2eww=)
4: AS17451.roa (hash: EiZ09/1jLcuIvEyyERS4WZf8v5xRT80TZu4hVHuLOJc=)
5: AS38060.roa (hash: A0KYFK4TwsmDw8b6GKQn8OvUOFe7f3kGRjMilxy0IaA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 16:55:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:db:99:42:85:d0:78:85:57:48:0c:61:68:0d:66:9d:55:d1:2c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5448F6C1F44810CF394690F1B2831B9E6E4A92E
Validity
Not Before: Aug 25 16:27:32 2026 GMT
Not After : Aug 26 17:29:32 2026 GMT
Subject: CN=2670E28A7A4C478D2C0739E35B360B4460E6A576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:2a:f1:8b:ff:f6:52:88:55:94:76:4a:72:
9a:71:76:91:f9:17:4c:d8:87:26:5b:8e:68:86:2c:
a3:82:f5:27:fa:90:ec:04:4d:f1:5c:58:64:41:a0:
97:2e:6c:5d:03:05:ba:7b:07:1d:4f:b7:ba:21:e8:
e0:13:89:50:94:16:16:81:f2:fe:11:c1:c1:71:93:
03:37:cb:f3:16:14:81:0c:24:8e:ed:ca:29:d0:c1:
58:76:a4:a2:e7:f6:5d:63:e3:ea:9c:e9:03:fb:4a:
60:73:c7:1d:49:d7:5e:e5:58:1c:24:8e:8e:1c:c1:
f7:db:7a:3d:fa:b4:cc:6f:d7:65:18:a7:2e:ab:03:
a5:a0:ac:ee:d9:79:61:20:57:5a:30:cb:00:b8:c4:
ae:2e:4c:fe:c5:00:2f:de:a2:ae:37:fb:ea:53:83:
9f:cb:6b:dd:45:eb:48:db:41:87:ea:dd:30:d1:cb:
21:92:7e:1f:25:23:8d:de:f8:51:44:6d:81:7d:d2:
28:81:cc:80:83:a0:99:7d:9b:32:dd:08:87:24:1c:
1d:76:84:5f:3e:08:14:aa:68:12:b7:72:72:58:d2:
3a:c4:27:7a:93:7d:bd:62:be:30:96:3d:db:a5:d9:
19:63:d2:da:02:50:b8:97:b9:98:97:7f:7c:cc:6d:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:70:E2:8A:7A:4C:47:8D:2C:07:39:E3:5B:36:0B:44:60:E6:A5:76
X509v3 Authority Key Identifier:
keyid:F5:44:8F:6C:1F:44:81:0C:F3:94:69:0F:1B:28:31:B9:E6:E4:A9:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/F5448F6C1F44810CF394690F1B2831B9E6E4A92E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:40:b9:e7:47:5f:3a:8c:13:cd:ac:8f:47:6b:8b:e9:44:85:
40:ec:ba:83:a2:5d:c6:c6:40:7a:47:f6:a2:2a:86:06:2b:13:
3c:29:61:b4:3c:ae:38:1b:85:d6:f1:8c:03:eb:ab:aa:1c:fe:
d6:ff:d1:c2:6f:57:3f:f4:4e:9f:82:ae:e0:e6:1d:02:17:47:
f2:1c:cb:cd:a7:cb:e0:e0:46:96:c7:33:2c:99:01:c6:ec:5d:
6f:37:48:c5:31:c0:a0:1b:75:12:ec:3f:5f:14:90:d8:c3:5d:
7d:1e:c6:3e:80:0f:03:6f:1b:2c:d8:a6:50:07:6f:f3:bf:00:
56:c7:8e:84:cc:2d:7f:17:ec:9b:f7:08:0f:fe:4f:b1:bb:d6:
ad:ac:37:f0:8d:e7:47:ae:61:c2:62:d6:2f:01:ef:07:31:e7:
b1:e2:9f:ab:1c:c0:b6:1c:b9:54:c8:3c:fd:30:34:2d:48:92:
65:d0:f2:1b:46:7d:1f:bc:0a:bd:e6:cb:7a:3a:2a:fa:bc:9d:
9a:20:6e:aa:bc:b0:6f:a2:09:64:66:f9:dd:ec:44:2a:64:02:
a1:21:af:1e:b5:68:d6:09:2d:c4:be:5a:83:f6:c3:3b:2a:28:
82:0e:9c:b2:58:c0:f0:92:27:93:c8:87:00:5e:8a:53:09:f8:
ca:be:22:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:41:36 2026 by rpki-client