
$ rpki-client -vvf rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft
File: 4DD279AECD518B9CE764AE03708B711A40048A1E.mft (raw, json)
Hash identifier: s7pZ+M9iam3lFSACmQAOMZKmz5aEEt5qktBetS/coRY=
Subject key identifier: D0:1C:1C:30:1B:00:6E:29:79:9F:05:DB:1C:E7:DF:64:86:1E:C7:AF
Authority key identifier: 4D:D2:79:AE:CD:51:8B:9C:E7:64:AE:03:70:8B:71:1A:40:04:8A:1E
Certificate issuer: /CN=4DD279AECD518B9CE764AE03708B711A40048A1E
Certificate serial: 5EEB57ED03472F3C92567BB574072ACD31F17AB7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft
Manifest number: 65
Signing time: Fri 17 Jul 2026 00:13:32 +0000
Manifest this update: Fri 17 Jul 2026 00:08:32 +0000
Manifest next update: Sat 18 Jul 2026 01:22:32 +0000
Files and hashes: 1: 3130332e3133392e3132312e302f32342d3234203d3e20313336383234.roa (hash: mxXusZGfsr98abkNgqk3JfvCjZTqoXMC9/o99feBr+E=)
2: 3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (hash: 6Laf+3GLGNpNAkhIsFH3maUJ3BnydIt6ABswzC07SLU=)
3: 4DD279AECD518B9CE764AE03708B711A40048A1E.crl (hash: zzwlNri48Du1R3NSngn13NdOXa8RcsyqAwGjMmlUxhA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.crl
rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 01:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:eb:57:ed:03:47:2f:3c:92:56:7b:b5:74:07:2a:cd:31:f1:7a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DD279AECD518B9CE764AE03708B711A40048A1E
Validity
Not Before: Jul 17 00:08:32 2026 GMT
Not After : Jul 18 01:22:32 2026 GMT
Subject: CN=D01C1C301B006E29799F05DB1CE7DF64861EC7AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:d5:b0:1e:c9:04:fc:8a:3a:a2:be:c6:ea:
70:64:17:82:18:43:1f:a6:c8:ba:f2:08:26:36:3c:
26:f9:0c:59:c6:43:c8:8f:19:25:da:b1:0b:e7:25:
5e:89:97:37:5b:82:3f:cb:41:3f:9b:4b:f5:76:b9:
49:e2:e6:a7:3b:fa:f6:a3:3f:f4:0b:2e:a1:4b:91:
a3:59:f2:1c:af:99:6e:4e:4f:d1:f4:38:fe:79:ce:
5b:ca:1a:07:f7:e8:60:9d:7c:69:df:22:8d:bd:98:
38:e3:57:59:4b:31:37:61:8c:83:04:3c:0a:d8:8c:
c6:52:d0:57:32:16:7f:0d:15:e5:fe:5d:e7:99:df:
ca:67:f7:1b:95:d3:a0:24:63:59:99:30:15:a2:53:
bd:31:ed:50:2a:15:b8:63:64:d4:94:9c:55:1e:d4:
58:58:b2:98:ea:e7:df:3d:1b:20:20:7b:c0:1b:0e:
0a:37:ac:36:eb:70:48:da:86:11:e5:e7:9e:71:8d:
8a:f0:14:cd:ff:61:19:ef:49:68:52:0c:a5:c1:cd:
5a:49:16:34:66:50:b9:6c:1c:23:59:95:0e:c1:28:
5d:27:b4:9f:d6:06:f2:d8:0b:3b:2b:fd:c1:32:e9:
82:19:a7:f9:09:fb:9f:cb:41:7f:82:dd:ca:92:e9:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1C:1C:30:1B:00:6E:29:79:9F:05:DB:1C:E7:DF:64:86:1E:C7:AF
X509v3 Authority Key Identifier:
keyid:4D:D2:79:AE:CD:51:8B:9C:E7:64:AE:03:70:8B:71:1A:40:04:8A:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD279AECD518B9CE764AE03708B711A40048A1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/4DD279AECD518B9CE764AE03708B711A40048A1E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:56:17:7c:09:95:59:4d:62:f6:db:71:fc:db:7a:33:49:6c:
56:17:ef:1e:c0:13:c1:3f:dc:3d:e2:69:ce:1c:9a:4a:9e:11:
a2:9c:39:35:ba:14:5e:1b:da:ce:01:ee:3e:3f:65:7c:40:66:
bf:54:55:36:89:5d:51:a3:9e:95:4c:f5:ba:79:fe:61:87:3e:
6d:b0:e4:b6:13:10:00:d4:9f:c8:9d:92:60:7e:d2:ea:d7:46:
36:fa:45:3f:de:8b:31:ff:2b:42:86:c5:bd:62:06:02:6b:d7:
24:8f:47:eb:19:78:e1:bd:20:1b:42:3b:df:9c:ec:f7:a5:70:
c3:a3:e4:80:cb:98:e6:d2:55:08:cf:96:3b:a7:b1:99:9c:77:
1b:6d:7d:5c:67:92:4e:8a:fe:ac:69:74:85:24:99:91:4c:47:
c6:22:dc:49:7d:41:23:8a:6c:24:07:52:0d:b5:9d:a1:b6:c3:
af:56:77:3d:f1:0a:ee:fc:98:1f:fd:cf:eb:b0:e8:6f:a8:75:
99:d0:a4:b8:f1:68:df:c3:2b:56:c4:0d:8e:9b:95:a6:24:10:
4f:08:e3:57:3e:4d:29:ef:c7:03:ca:7f:43:6f:43:8e:29:bd:
55:8d:f2:71:d3:db:80:96:f1:a3:23:36:6d:d9:0c:65:29:77:
6d:aa:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 10:14:31 2026 by rpki-client