
$ rpki-client -vvf rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
File: 449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft (raw, json)
Hash identifier: rIw9tbVZZlexiOQ/lP1gYUeaZcfjHyidXcQGMXYvYMg=
Subject key identifier: E8:BE:36:C6:BA:AE:C6:20:6D:0C:F4:48:1E:CB:32:5E:3E:2C:D5:48
Authority key identifier: 44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B
Certificate issuer: /CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B
Certificate serial: 3FD93AEA5F4A3ECAB9113D5B92400C33F24C2616
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
Manifest number: 66
Signing time: Fri 17 Jul 2026 10:30:58 +0000
Manifest this update: Fri 17 Jul 2026 10:25:58 +0000
Manifest next update: Sat 18 Jul 2026 11:46:58 +0000
Files and hashes: 1: 449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl (hash: eyGbMr7QgFbx8L5vGUoKrhTCMeacSWSt7pa43Ofyxxo=)
2: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: 4fUkU+nbH3X0YWVA/nyzT1vHqWQSMJDAjWYPAHB9Lcc=)
3: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: d+pQREUWb58vXjRmKWwC44imrF7e8FC0pHZi7c2qThU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl
rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 11:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d9:3a:ea:5f:4a:3e:ca:b9:11:3d:5b:92:40:0c:33:f2:4c:26:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B
Validity
Not Before: Jul 17 10:25:58 2026 GMT
Not After : Jul 18 11:46:58 2026 GMT
Subject: CN=E8BE36C6BAAEC6206D0CF4481ECB325E3E2CD548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:3e:8a:bd:5d:07:61:13:b4:66:2b:22:cc:
5e:33:fb:ed:33:53:c1:0e:48:41:e9:ad:f1:2d:b2:
0d:8b:d5:bc:b6:52:6b:38:14:63:2e:00:b5:14:03:
15:9d:dc:c4:05:84:bb:17:5c:b3:2d:e3:ae:ac:8f:
6c:61:1d:cc:92:e1:91:82:e5:e6:73:e5:da:e4:77:
f4:ef:00:78:7e:91:82:81:fd:1d:c3:40:40:08:53:
c8:cc:1c:d1:38:04:e6:f2:2e:36:96:60:93:f8:e1:
8a:bd:e7:89:5a:2b:f8:44:5a:f1:d4:99:19:bd:6d:
55:e8:8d:05:8c:86:20:7d:96:f6:51:7e:96:ef:63:
e7:af:bd:e7:6d:9f:8a:2c:48:04:fa:2e:4f:be:a1:
15:b7:89:d0:5b:cc:56:a9:80:27:bb:a6:67:1c:ba:
63:98:11:05:7f:f0:00:dd:33:23:5e:47:52:57:cb:
43:61:73:2f:8c:16:c8:d8:f7:52:5c:e3:3d:60:d3:
e5:3f:b4:bb:1c:c7:5a:bf:ed:7c:0f:52:c6:ff:18:
82:71:d6:a0:cd:d9:e9:2a:c3:c3:a2:66:01:b4:75:
ce:4f:e9:39:ad:97:d7:9a:8b:71:26:68:ee:b3:72:
06:69:a2:16:ea:ce:14:32:b7:af:39:fb:a4:9f:a5:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BE:36:C6:BA:AE:C6:20:6D:0C:F4:48:1E:CB:32:5E:3E:2C:D5:48
X509v3 Authority Key Identifier:
keyid:44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:65:a5:15:a5:48:da:1b:74:5f:d3:06:13:01:c0:f1:e0:d6:
62:d5:36:9e:47:a7:26:28:09:d2:ed:27:c0:16:4d:af:71:ea:
e4:57:52:c6:da:55:35:27:78:02:8c:21:da:66:74:9b:61:12:
5e:8c:de:cd:9c:9d:8e:8f:87:be:57:b3:10:69:51:b9:36:43:
8e:33:bc:50:20:7f:96:d4:7b:e7:a1:90:e0:f0:f9:75:75:1c:
99:6c:e7:b2:eb:72:73:d0:7b:84:fa:6d:3b:0c:e3:54:72:d6:
ee:ef:3c:68:fc:2f:42:21:09:e0:f6:9b:dc:ff:96:40:4e:83:
99:a9:64:52:41:7c:33:47:26:a9:fb:0f:53:c8:4e:6e:00:b8:
25:1a:c3:73:91:ce:2a:36:28:82:79:d4:28:ed:fc:55:4b:be:
ee:14:a5:89:ad:06:ce:19:63:9a:f6:14:7e:f6:b4:f7:7d:45:
a2:b5:a3:54:b2:a7:34:70:cf:cb:92:17:d7:a3:70:70:b6:6b:
2e:5b:5e:fd:d4:d0:1d:76:d5:c4:b8:c8:9f:f0:a4:ac:dd:56:
91:a0:a9:eb:f2:13:3b:38:26:8c:7a:df:20:f3:92:b3:f1:d7:
34:39:e4:90:ae:58:38:36:a7:ec:ea:62:94:82:20:b1:fc:63:
2e:c4:04:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:56:03 2026 by rpki-client