
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft
File: 445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft (raw, json)
Hash identifier: kcJIj+AR+/HrMQjcS0kT8BymTScSZvps6Hpepn8fjHQ=
Subject key identifier: B7:E9:71:DC:A9:8E:BF:CC:45:97:C0:C9:E4:2F:45:6A:BC:84:85:1D
Authority key identifier: 44:5F:E0:F3:63:AB:30:6E:53:F1:E2:CD:93:9E:FD:8C:8A:10:23:38
Certificate issuer: /CN=445FE0F363AB306E53F1E2CD939EFD8C8A102338
Certificate serial: 0A66F6C443D17763DD6FE469D44876C9F5C167
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/445FE0F363AB306E53F1E2CD939EFD8C8A102338.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 20:57:50 +0000
Manifest this update: Sun 25 Oct 2026 20:52:50 +0000
Manifest next update: Mon 26 Oct 2026 23:11:50 +0000
Files and hashes: 1: 445FE0F363AB306E53F1E2CD939EFD8C8A102338.crl (hash: fYBESGMEuj6S3JTMHcsTUUGDfM1pffRY9PW0FxceeP8=)
2: 3130332e36382e3231342e302f32332d3234203d3e20313530353137.roa (hash: d1AieqPDTSFuqQUNZRSOLnDH+s/AlA829gDqC0nNU8o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.crl
rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/445FE0F363AB306E53F1E2CD939EFD8C8A102338.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:66:f6:c4:43:d1:77:63:dd:6f:e4:69:d4:48:76:c9:f5:c1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445FE0F363AB306E53F1E2CD939EFD8C8A102338
Validity
Not Before: Oct 25 20:52:50 2026 GMT
Not After : Oct 26 23:11:50 2026 GMT
Subject: CN=B7E971DCA98EBFCC4597C0C9E42F456ABC84851D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ce:bd:66:2b:a2:ad:23:ad:1d:fe:6d:0d:c5:
19:c4:c1:e1:70:57:79:7d:35:6e:ab:39:47:2d:fb:
cf:ef:bd:b7:6f:2a:a9:b8:7f:d3:3f:fd:df:13:8a:
2c:c9:56:b4:b6:15:6d:8f:a1:36:e2:11:38:1e:f3:
3f:68:41:90:e7:d0:9d:b7:e9:a7:f0:87:50:dc:ed:
a8:15:40:85:06:34:70:07:8d:74:01:f6:64:9b:f1:
d7:31:93:5a:83:54:6e:eb:12:56:3c:23:16:81:14:
e1:f6:c0:3d:17:d2:af:74:2f:6d:64:a5:7c:d2:86:
23:59:f6:0c:f5:e5:3c:2f:07:4f:2a:40:30:75:e0:
0f:af:8a:96:6f:77:f6:a7:4a:87:f0:79:56:79:04:
e2:b2:f7:7f:48:12:cc:c6:63:04:7a:23:67:cb:cd:
88:68:8e:cd:af:4c:f2:97:c8:28:b2:3a:07:2f:26:
20:22:a7:b5:0d:ab:8a:d2:2c:8e:f5:b3:79:09:cc:
5e:56:88:db:e6:89:e6:4d:3b:86:2f:cc:99:71:a8:
ae:d5:67:17:fb:11:ee:97:3e:5d:2f:15:ba:ae:42:
72:5f:2b:85:31:c2:20:09:e6:8a:e2:f3:3e:2b:b6:
60:78:b5:e7:1d:2e:85:33:1d:3d:b6:51:5e:f5:07:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E9:71:DC:A9:8E:BF:CC:45:97:C0:C9:E4:2F:45:6A:BC:84:85:1D
X509v3 Authority Key Identifier:
keyid:44:5F:E0:F3:63:AB:30:6E:53:F1:E2:CD:93:9E:FD:8C:8A:10:23:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/445FE0F363AB306E53F1E2CD939EFD8C8A102338.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:dd:43:81:49:1a:48:35:51:76:37:b4:5e:0c:05:08:b6:b0:
ac:52:5c:ad:91:e3:75:d5:80:fd:a7:97:a5:41:90:74:9e:6f:
1f:74:7a:c4:a4:29:44:42:73:dc:4b:03:0f:44:06:d1:3c:55:
59:3b:99:0f:e5:d6:82:c2:c5:8a:21:9e:a4:d8:55:79:b9:9b:
a7:12:ef:25:27:22:ba:1f:4f:83:b3:a8:77:33:79:4a:00:21:
3f:38:d6:9d:8c:0f:0b:29:15:ca:ad:ab:3a:e9:25:6c:22:18:
b4:14:8c:b6:9e:12:06:7b:c0:87:97:4e:72:c9:35:89:e8:c2:
43:a6:69:2d:22:3b:a5:64:85:12:6a:b3:33:e8:6c:0c:93:db:
8d:cf:a3:2b:46:5a:14:d0:54:1a:fe:f2:65:33:76:2d:68:26:
5b:68:96:f6:61:8c:c9:78:51:1f:f8:22:42:80:9e:f4:c7:db:
8a:f7:f0:9c:ea:f1:c8:e2:8f:db:77:9e:12:d4:06:09:7d:59:
04:97:1a:81:33:97:86:58:a1:67:fd:93:8e:e2:e7:61:c2:63:
ea:b3:72:1e:2f:d0:24:a6:1b:d0:17:b3:d0:5e:75:26:0f:54:
fa:97:99:bb:cf:7c:91:5e:84:5c:1c:fa:21:fb:ed:3a:d1:e6:
28:6c:2b:ed
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgITCmb2xEPRd2Pdb+Rp1Eh2yfXBZzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg0NDVGRTBGMzYzQUIzMDZFNTNGMUUyQ0Q5MzlFRkQ4QzhB
MTAyMzM4MB4XDTI2MTAyNTIwNTI1MFoXDTI2MTAyNjIzMTE1MFowMzExMC8GA1UE
AxMoQjdFOTcxRENBOThFQkZDQzQ1OTdDMEM5RTQyRjQ1NkFCQzg0ODUxRDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANvOvWYroq0jrR3+bQ3FGcTB4XBX
eX01bqs5Ry37z++9t28qqbh/0z/93xOKLMlWtLYVbY+hNuIROB7zP2hBkOfQnbfp
p/CHUNztqBVAhQY0cAeNdAH2ZJvx1zGTWoNUbusSVjwjFoEU4fbAPRfSr3QvbWSl
fNKGI1n2DPXlPC8HTypAMHXgD6+Klm939qdKh/B5VnkE4rL3f0gSzMZjBHojZ8vN
iGiOza9M8pfIKLI6By8mICKntQ2ritIsjvWzeQnMXlaI2+aJ5k07hi/MmXGortVn
F/sR7pc+XS8Vuq5Ccl8rhTHCIAnmiuLzPiu2YHi15x0uhTMdPbZRXvUHhw8CAwEA
AaOCAjwwggI4MB0GA1UdDgQWBBS36XHcqY6/zEWXwMnkL0VqvISFHTAfBgNVHSME
GDAWgBREX+DzY6swblPx4s2Tnv2MihAjODAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud
HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80
ZWJmNjNlZC1kNDUwLTQ3N2UtYjMxYi1hZjkyYjE3MjZkMmUvMC80NDVGRTBGMzYz
QUIzMDZFNTNGMUUyQ0Q5MzlFRkQ4QzhBMTAyMzM4LmNybDByBggrBgEFBQcBAQRm
MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw
by9JRE5JQy8xLzQ0NUZFMEYzNjNBQjMwNkU1M0YxRTJDRDkzOUVGRDhDOEExMDIz
MzguY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby80ZWJmNjNlZC1kNDUwLTQ3N2UtYjMx
Yi1hZjkyYjE3MjZkMmUvMC80NDVGRTBGMzYzQUIzMDZFNTNGMUUyQ0Q5MzlFRkQ4
QzhBMTAyMzM4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAW91DgUkaSDVRdje0XgwFCLawrFJcrZHjddWA
/aeXpUGQdJ5vH3R6xKQpREJz3EsDD0QG0TxVWTuZD+XWgsLFiiGepNhVebmbpxLv
JSciuh9Pg7OodzN5SgAhPzjWnYwPCykVyq2rOuklbCIYtBSMtp4SBnvAh5dOcsk1
iejCQ6ZpLSI7pWSFEmqzM+hsDJPbjc+jK0ZaFNBUGv7yZTN2LWgmW2iW9mGMyXhR
H/giQoCe9MfbivfwnOrxyOKP23eeEtQGCX1ZBJcagTOXhlihZ/2TjuLnYcJj6rNy
Hi/QJKYb0Bez0F51Jg9U+peZu898kV6EXBz6IfvtOtHmKGwr7Q==
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:39:38 2026 by rpki-client