
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft
File: 04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft (raw, json)
Hash identifier: AQnIyKPcOQtp7KO71ka76S5ofvLbGqua8k7rWK7XORg=
Subject key identifier: 19:23:52:CB:5C:5B:7F:0B:EB:6A:93:00:86:2D:79:24:08:92:48:94
Authority key identifier: 04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36
Certificate issuer: /CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36
Certificate serial: 4B19EA8D5AD6CAECEB8373AE981C72CC1E454095
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 23:27:56 +0000
Manifest this update: Wed 16 Sep 2026 23:22:56 +0000
Manifest next update: Fri 18 Sep 2026 02:51:56 +0000
Files and hashes: 1: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: 8fVyhPJOnEawBWwgARzQly7FMcHwy/+Ghg0XkCT2OOs=)
2: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: vatB6xTCpKTsE4tbG+JDKUhfyJC22x4PAXCG04Pc2lA=)
3: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: bImD2ZtrKw/qYZlZEa6DVDo0ea7PH2tJcz0npEPPdds=)
4: 3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (hash: ngWzWlF3BDUAfLENIH4eXpEMJ09d6MMBm0aRXwTS2DE=)
5: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: jiJN5uTtVqTyi/LsSOB3CZxJlHQ5mjW5GcesMlLX4EE=)
6: 04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl (hash: ewb/xA4lXsKmK/iSPV3pmgcTzBT1DFzCOpy3jxC1WXA=)
7: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: Sxgjfc3rJMR/6kggcztr6diqTcIFdNjFMaFwfjqQRVc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl
rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:19:ea:8d:5a:d6:ca:ec:eb:83:73:ae:98:1c:72:cc:1e:45:40:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36
Validity
Not Before: Sep 16 23:22:56 2026 GMT
Not After : Sep 18 02:51:56 2026 GMT
Subject: CN=192352CB5C5B7F0BEB6A9300862D792408924894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:df:a6:87:6c:e1:a4:a8:7b:3e:86:21:3b:
9b:cf:8a:f6:fd:5e:d2:84:2d:1a:27:05:94:dc:5f:
dc:6e:c8:59:e7:75:9d:af:d1:9e:23:41:8d:87:f7:
77:40:b4:c3:46:a6:43:55:da:a7:d1:ac:95:5f:fc:
84:1e:ac:26:25:a7:86:10:8e:69:f5:52:a6:2a:61:
4f:2e:0b:b5:0d:33:6a:a7:78:ba:e8:96:7d:a5:47:
c4:fd:69:fe:06:5b:ac:e3:25:cf:a1:f5:f8:d6:7a:
48:17:95:6b:b9:53:2a:c8:cc:21:72:33:3b:be:f1:
5d:f8:f8:b7:95:5b:3b:bf:79:f1:91:0f:6a:d6:5e:
30:4f:25:30:c6:d9:94:00:08:e9:4d:92:b4:63:ae:
ce:e1:ed:db:eb:13:fd:e8:3e:fa:b9:da:91:3b:d8:
d4:60:f6:1b:6b:00:95:8b:9e:5e:8a:ed:d9:a7:31:
1c:e5:66:92:a3:e8:2b:4a:f9:7a:dc:1a:98:22:9c:
dd:5b:85:d7:bc:c7:ac:54:f2:c9:9b:da:b3:12:b0:
ef:ee:f3:ec:7f:53:3f:b5:56:72:11:80:7f:b0:55:
ad:65:84:25:d2:ba:59:c2:53:19:2a:ce:66:4b:25:
f6:a3:8d:86:93:f6:6b:e1:54:1f:ff:5d:c9:97:24:
93:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:23:52:CB:5C:5B:7F:0B:EB:6A:93:00:86:2D:79:24:08:92:48:94
X509v3 Authority Key Identifier:
keyid:04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bc:e5:05:36:38:4d:e5:9e:77:7c:2d:1f:1d:9b:a0:70:85:
0f:31:1b:f8:08:7f:ef:25:ab:21:7c:c5:ce:64:fe:7e:96:00:
f4:2c:54:61:79:15:02:30:f5:c4:a2:1f:b9:d0:6a:63:49:93:
5e:09:74:5d:02:dd:ad:c7:1e:bf:73:81:a5:10:27:1d:ad:22:
aa:7c:83:41:cf:90:35:b2:56:71:f1:83:4b:b6:f8:03:5b:5f:
11:7b:9d:67:f8:e6:fa:d9:31:e3:28:e0:05:45:45:b7:3c:59:
db:7b:da:1d:c8:8a:20:73:a6:fb:2a:ed:e4:70:c3:af:3d:da:
47:bd:39:4c:a5:81:d0:16:44:16:64:f5:46:17:5a:e3:98:72:
b2:65:0a:66:d5:bf:72:39:c3:70:bf:44:6e:7a:fd:78:fe:29:
4b:87:44:8c:44:16:6c:33:38:ca:9e:d5:c2:e7:9b:a1:ea:55:
36:fb:f4:2b:7f:1e:e6:5b:ef:a9:66:c3:ab:96:f7:bb:26:26:
fa:44:32:cb:87:78:e2:6e:b1:a6:16:65:6b:88:f3:e8:0d:dc:
34:a9:01:d7:38:d1:c1:5a:f4:a6:5a:f0:44:d1:47:b0:04:bb:
b5:2e:ab:a4:e7:f9:f9:9e:95:49:e5:da:ec:a1:0f:b9:27:d8:
cf:9d:c3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:46:39 2026 by rpki-client