
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft
File: C4E9D4469828724936CAE63A417C0DE2014F205A.mft (raw, json)
Hash identifier: zjA1aIjy9GmOrhDI6O3mqRtfn8gSphPKH65faxvenk8=
Subject key identifier: 67:71:60:D7:30:6F:02:FF:3A:39:B3:CF:5E:CA:EE:31:82:33:BD:C9
Authority key identifier: C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A
Certificate issuer: /CN=C4E9D4469828724936CAE63A417C0DE2014F205A
Certificate serial: 1D948DB1AB9113A9105CF8572B95929369D16EC3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft
Manifest number: AF
Signing time: Thu 10 Sep 2026 01:13:43 +0000
Manifest this update: Thu 10 Sep 2026 01:08:43 +0000
Manifest next update: Fri 11 Sep 2026 04:35:43 +0000
Files and hashes: 1: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: n2rjzJ/zLgB675Rxossmph/fEyHX/dgt2ieO+QslQMw=)
2: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: O5O73bIVgP3Ny3ggR2VTr1FgLepLoRHQrtRQ7caTd/s=)
3: C4E9D4469828724936CAE63A417C0DE2014F205A.crl (hash: wJh7P4nYYPXj+IDER3r0wwYBCfvE+w1ya7XIb/nGelg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl
rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 04:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:94:8d:b1:ab:91:13:a9:10:5c:f8:57:2b:95:92:93:69:d1:6e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4E9D4469828724936CAE63A417C0DE2014F205A
Validity
Not Before: Sep 10 01:08:43 2026 GMT
Not After : Sep 11 04:35:43 2026 GMT
Subject: CN=677160D7306F02FF3A39B3CF5ECAEE318233BDC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ca:ce:7b:a6:91:91:03:ea:17:49:88:8b:6d:
7f:1e:8f:cc:42:10:12:26:59:e3:bf:17:97:59:4f:
24:46:24:38:39:09:c5:10:a3:2a:69:5c:16:86:34:
3a:48:9e:0c:18:2f:4b:be:a5:ad:3a:88:ac:d7:3b:
2b:51:c4:3a:45:72:64:cb:67:10:23:f3:45:a4:e2:
5e:c8:18:7e:41:e5:43:fd:f0:b7:1b:88:e1:b5:66:
e7:cc:0c:d6:4c:49:13:c5:f5:91:cc:f8:7e:ca:18:
a3:98:8e:42:df:c5:8a:3a:8d:f0:bb:5a:92:ea:8a:
3c:c5:fa:ed:2c:67:a0:42:17:f8:bf:ec:16:49:86:
85:6f:71:94:b5:bd:ee:53:d6:c8:37:ea:c1:5c:56:
e8:72:80:2d:ba:81:45:0f:53:5e:39:c4:b3:eb:43:
75:c8:3f:35:63:fb:7b:1c:9c:62:7d:96:18:bd:de:
09:b2:4d:e2:ac:5f:8c:9e:ef:f7:f9:78:1c:33:0b:
7e:60:c6:50:52:af:c5:2f:d3:54:8d:d9:f1:36:02:
81:76:ab:d8:71:da:fb:27:88:b4:b3:f1:8a:9b:23:
e3:10:2f:4e:5a:bc:64:72:0c:02:b9:58:d5:e7:c1:
8f:82:09:6d:17:77:7a:25:b6:1b:b4:45:ac:ca:89:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:71:60:D7:30:6F:02:FF:3A:39:B3:CF:5E:CA:EE:31:82:33:BD:C9
X509v3 Authority Key Identifier:
keyid:C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:63:94:ba:ab:5f:1e:7e:b4:4f:f7:03:47:c3:65:3d:95:f8:
2d:be:25:93:71:7f:b2:7b:9f:7c:ae:05:ae:7c:98:2d:21:fa:
b6:c9:56:fb:1f:f9:17:f4:27:a4:cf:a8:2a:b6:60:1d:d7:b3:
63:fe:2c:24:da:68:18:6d:cc:8e:3d:68:a7:9d:ce:4e:6e:34:
b7:5e:b4:3f:2f:dd:b2:96:95:9f:01:7a:ad:e3:a1:4a:12:10:
6e:1d:5a:89:be:bd:85:30:58:ad:75:9a:c7:7b:90:ad:2c:e7:
b6:87:95:55:56:4b:4c:13:fc:65:2d:26:0c:2d:aa:b1:36:bc:
f6:f6:ed:3e:6d:4d:46:42:66:5a:b5:c5:4d:05:a5:d7:1d:68:
1f:ad:6e:55:fc:97:1a:b8:ad:c7:0c:93:04:c5:00:87:d7:37:
84:01:5a:98:6e:47:2b:7e:8b:3b:a9:cf:f3:93:a2:ab:6c:a5:
34:20:06:82:c9:20:fd:47:6f:68:c6:26:4e:1f:af:81:a2:64:
73:14:7d:f0:b7:08:0c:cc:d6:24:6a:c6:d2:9c:bc:5c:9d:3c:
0d:76:69:b5:5b:61:a7:9f:98:6d:45:3f:53:b2:85:6e:15:90:
76:17:36:65:a3:5b:71:ee:37:44:09:70:b8:96:e1:aa:6f:d6:
f7:a0:cd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:07:27 2026 by rpki-client