
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
File: 4BCE188DE42B539EBB860A376D13FE292B001147.mft (raw, json)
Hash identifier: Rz32lqGK7E7Nj8JPUGF5VF8s0vOR0zzWvIQ4AK/dXEw=
Subject key identifier: 46:42:5C:C9:1B:1C:99:DB:AC:52:09:C3:B2:05:4F:BA:8E:21:73:F7
Authority key identifier: 4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47
Certificate issuer: /CN=4BCE188DE42B539EBB860A376D13FE292B001147
Certificate serial: 52F3B38B78F5C9368C593A91CFDE35E8CEEC0FF9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 02:51:59 +0000
Manifest this update: Thu 17 Sep 2026 02:46:59 +0000
Manifest next update: Fri 18 Sep 2026 05:11:59 +0000
Files and hashes: 1: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: /L4LgvuxEYbH0dgsif++d85ZiL7YhQs+ni89j41DhXM=)
2: 4BCE188DE42B539EBB860A376D13FE292B001147.crl (hash: jqNtChrfPKZ7h6dTTyXfBasamc1UAsipBKSN2s/f0xc=)
3: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: u8jjg+GiS9S6r5A4phLntvppacWIJllmMAB+9fmlXA0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl
rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f3:b3:8b:78:f5:c9:36:8c:59:3a:91:cf:de:35:e8:ce:ec:0f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BCE188DE42B539EBB860A376D13FE292B001147
Validity
Not Before: Sep 17 02:46:59 2026 GMT
Not After : Sep 18 05:11:59 2026 GMT
Subject: CN=46425CC91B1C99DBAC5209C3B2054FBA8E2173F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:5c:1e:4f:4e:4b:fa:22:26:90:f0:3e:b2:
b7:bc:75:f0:cd:9a:78:a7:81:27:0b:13:73:ba:34:
ea:39:fe:fe:52:2b:20:38:1f:52:da:04:00:30:65:
77:fd:03:ad:79:b8:76:e5:99:63:e6:bd:58:84:7b:
c3:eb:0c:44:0a:4e:eb:0b:ed:fb:fc:22:d6:c8:ea:
0b:c5:e4:f6:c1:a8:79:99:09:91:0e:24:2a:e4:6e:
4f:0b:f7:80:66:81:8e:dd:ea:5a:35:41:52:96:96:
9f:1d:b8:90:04:ba:9f:c2:41:2d:f1:64:5a:52:7f:
24:10:b4:b3:7f:48:4a:72:d2:81:b8:c7:73:b2:e6:
77:06:5c:d7:e1:83:35:ed:ab:22:15:03:97:da:3f:
bf:09:82:7a:2b:99:bd:7c:70:17:9b:00:2d:a7:6b:
e8:e8:63:7e:0b:4b:9f:78:22:8d:b4:e7:60:af:86:
6c:c9:9d:ff:eb:fd:78:41:08:42:52:8b:09:6b:8a:
6c:0a:1d:0a:95:38:de:28:df:75:26:a1:db:cb:36:
4d:21:7f:7e:8f:c1:22:7e:e9:2c:f4:b9:04:2d:b4:
c0:75:59:ff:51:7b:c2:dd:14:86:61:7c:ae:9d:44:
61:2b:42:59:2b:d5:69:20:e4:99:e6:6f:c0:0f:e8:
51:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:42:5C:C9:1B:1C:99:DB:AC:52:09:C3:B2:05:4F:BA:8E:21:73:F7
X509v3 Authority Key Identifier:
keyid:4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e8:0a:d2:08:94:37:d0:f4:74:4c:6d:ce:f6:61:fe:47:e5:
a1:dd:6d:bf:12:b2:ef:f5:9e:b4:40:6d:ad:ff:f2:6c:b8:10:
8a:23:cc:39:2e:56:dc:42:ab:43:e3:37:56:8b:93:32:af:e8:
2f:43:1d:6a:9c:d5:3c:9b:52:77:0e:a4:12:69:1d:a3:64:f0:
a8:51:4d:f3:d1:67:14:20:db:be:ec:45:f9:30:32:85:5f:19:
cf:28:5b:f0:67:a5:0b:09:63:d2:60:56:55:0f:81:57:05:98:
b4:4a:63:62:e0:d3:ff:43:a7:9f:b5:4b:5a:56:b5:85:c2:19:
3d:b9:bb:32:56:09:a8:96:44:02:35:25:7d:b1:86:c4:44:c7:
4b:54:3b:f0:eb:4f:38:cb:f8:0a:02:7a:65:dc:4c:e5:95:a5:
47:00:01:e5:6c:7a:6a:44:43:05:49:79:8b:33:a4:da:3a:4a:
a8:fe:2d:4f:09:b9:da:0e:f3:f0:e3:4d:34:20:7e:84:1d:5b:
b7:09:f5:f1:9f:65:68:6b:60:3a:a7:7e:e8:f9:a8:3d:90:3d:
b1:d4:ac:bb:5b:75:87:e8:4b:99:3c:7c:69:80:9c:08:c7:d7:
d7:2d:98:dc:ad:27:b8:23:f8:d1:4f:28:48:4a:39:49:f1:11:
1f:f1:c5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:07:53 2026 by rpki-client