
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft
File: 4758527FF3B22322A18B7C6E96C4B735849522DD.mft (raw, json)
Hash identifier: k2EmMNG1GTui+YWtr2q4wiWEYM4Y9dtEP5LlNdnwh+4=
Subject key identifier: 11:77:DC:87:AC:F1:97:3A:99:F5:13:C4:C0:2D:6C:DD:9B:F6:E9:9B
Authority key identifier: 47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD
Certificate issuer: /CN=4758527FF3B22322A18B7C6E96C4B735849522DD
Certificate serial: 7F8EE2C114F6DA112E6914B10041057F06060940
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft
Manifest number: F0
Signing time: Wed 28 Oct 2026 20:56:04 +0000
Manifest this update: Wed 28 Oct 2026 20:51:04 +0000
Manifest next update: Thu 29 Oct 2026 22:04:04 +0000
Files and hashes: 1: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: ylJge9zfunu5v1K50c60A5sirSQ6LDBHCjbwOHfjZrQ=)
2: 4758527FF3B22322A18B7C6E96C4B735849522DD.crl (hash: neJC2ZyT5iL6I9GwCPbMmUd0ax6SimVtAY8ozF40TQY=)
3: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: vc1a0hkgw07q2g/3N/OSu/ce4WygjulqelJe6kgXLWg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.crl
rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 22:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:8e:e2:c1:14:f6:da:11:2e:69:14:b1:00:41:05:7f:06:06:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4758527FF3B22322A18B7C6E96C4B735849522DD
Validity
Not Before: Oct 28 20:51:04 2026 GMT
Not After : Oct 29 22:04:04 2026 GMT
Subject: CN=1177DC87ACF1973A99F513C4C02D6CDD9BF6E99B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:54:31:b1:a5:2b:a5:c7:db:6b:6b:c7:8f:
c0:68:de:c9:5a:af:24:be:02:39:93:8b:a3:af:d1:
cf:3c:47:01:f3:49:a5:2d:24:23:7c:dd:89:80:96:
6b:3b:26:cc:f7:96:e7:b6:8d:8a:7d:a8:26:87:cb:
64:76:00:67:3a:73:4b:66:39:ad:36:b6:ef:a0:8c:
13:5a:3b:05:c9:c8:78:8f:02:41:7e:01:27:98:8a:
39:aa:b8:bb:3c:a6:a5:17:e6:e2:86:6f:7c:e6:36:
ef:13:ae:40:65:5f:ef:42:b7:cb:4f:f6:b3:b2:c3:
84:d9:91:1b:17:e6:8a:ae:1f:21:8d:57:b2:7e:1a:
55:32:ed:93:be:18:0c:d1:bf:c4:f3:9e:9c:89:ca:
c9:20:45:da:b8:ac:8a:5e:68:92:b6:79:7a:f5:0c:
79:00:9b:95:23:f7:8c:8c:2e:69:8a:1b:23:6f:f6:
c3:21:aa:ed:fa:a9:15:e8:b8:5a:1c:af:d3:a2:7e:
40:36:25:4b:dd:56:8f:fc:e5:36:23:22:dd:03:69:
f0:da:da:a2:af:e6:86:ad:4a:40:32:ea:46:1b:0b:
e0:f1:b6:0b:23:39:5c:be:b1:52:b0:cc:67:6f:11:
b7:50:aa:15:db:45:8d:e4:dd:2c:db:20:f8:26:7d:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:77:DC:87:AC:F1:97:3A:99:F5:13:C4:C0:2D:6C:DD:9B:F6:E9:9B
X509v3 Authority Key Identifier:
keyid:47:58:52:7F:F3:B2:23:22:A1:8B:7C:6E:96:C4:B7:35:84:95:22:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4758527FF3B22322A18B7C6E96C4B735849522DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/4758527FF3B22322A18B7C6E96C4B735849522DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:04:49:cc:53:cc:dd:b1:fb:91:36:ea:2e:0e:ac:68:45:34:
31:81:95:66:7e:5d:fb:49:a1:0f:3e:82:50:fa:47:a2:20:ab:
2a:e6:02:6b:90:78:bf:bc:4b:d5:50:d3:6b:f8:4f:d9:ae:ad:
66:74:08:72:88:28:9d:80:a3:cd:90:42:34:f7:b9:d3:f8:35:
04:2f:56:8f:21:0a:7e:d4:82:39:37:85:d3:a8:22:3b:61:ef:
26:f4:f2:8d:d5:b7:d9:c5:05:cf:1e:6a:23:fe:89:b5:2f:a5:
6d:47:70:fb:60:f1:7a:a0:3f:cd:8c:69:f3:62:06:12:66:be:
34:e0:6b:4c:87:ff:a4:5f:ca:95:9e:ed:39:a3:73:b3:a5:04:
e1:7e:69:9d:b3:99:de:cd:ea:28:1e:3d:10:b5:71:1d:38:f0:
44:ac:d4:3e:1c:bc:bd:75:e7:26:0f:e8:4e:6c:2e:4f:60:bc:
bf:52:25:86:0b:66:76:0a:3b:28:30:fe:f6:1e:fc:87:79:94:
c4:c4:c7:4f:3c:20:e0:9e:e0:0e:7c:df:b5:f7:b2:0e:01:00:
a6:05:a6:ba:18:d1:ee:e6:0b:d1:0d:14:96:1e:e5:21:86:71:
16:1f:d0:74:0c:8e:93:90:a3:c4:7c:16:d4:33:31:12:55:aa:
a7:04:89:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 03:55:13 2026 by rpki-client