
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
File: 4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft (raw, json)
Hash identifier: 3JapbCFIyVd/USXJ7k4X+jAhLeP2UPkjJybSssrT/6w=
Subject key identifier: CD:C6:09:81:99:75:75:08:F6:13:E9:9A:25:07:FB:95:5F:EB:4B:BB
Authority key identifier: 4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26
Certificate issuer: /CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526
Certificate serial: 4454BD8CB57DF5F4E757DC2FC5B6257C286A53BC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 06:31:35 +0000
Manifest this update: Thu 17 Sep 2026 06:26:35 +0000
Manifest next update: Fri 18 Sep 2026 07:33:35 +0000
Files and hashes: 1: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: crz5wQlV27LIwISEyXo4hYXR+StXchnW3rusJFfd1fY=)
2: 4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl (hash: HdTYuqdwMC1j/ZSVobiQY/KiVEa15Ve+tsNB+YnOBto=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl
rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:54:bd:8c:b5:7d:f5:f4:e7:57:dc:2f:c5:b6:25:7c:28:6a:53:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526
Validity
Not Before: Sep 17 06:26:35 2026 GMT
Not After : Sep 18 07:33:35 2026 GMT
Subject: CN=CDC6098199757508F613E99A2507FB955FEB4BBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:7b:fe:a6:5d:c4:ab:33:55:bd:b9:67:30:
f1:36:5b:b2:12:d1:54:7b:2c:ea:b0:ce:1f:aa:6b:
6c:30:94:4f:61:ea:06:88:63:b9:25:df:61:a1:ff:
aa:5d:2b:ee:1c:f9:e2:a8:e0:86:cb:3d:a9:28:1b:
93:a8:45:79:ff:f8:ab:d2:17:b4:68:88:c2:32:30:
ec:a0:78:2f:2e:6a:b8:85:86:8a:91:0f:5d:65:27:
76:1f:04:b3:f8:8f:67:ef:06:cc:89:4e:2a:82:33:
dd:9e:09:da:90:09:0b:cc:2f:e2:48:c1:90:b6:f3:
a7:25:fc:38:9a:b5:fc:b9:bd:75:42:66:fc:d7:7a:
a7:09:7c:d8:e4:88:5e:10:30:8c:f5:de:e2:f4:8d:
ee:8c:40:77:ae:fd:9a:73:04:a6:40:f6:a6:04:3d:
cd:c2:9e:c8:ad:84:7d:a5:01:75:da:77:c8:36:f3:
42:cc:26:49:2b:3f:ad:93:e1:c5:94:da:e3:a6:98:
62:e4:eb:4e:36:53:70:4d:42:16:63:8b:9b:bb:76:
7f:a9:d1:58:e4:9c:86:8b:d7:93:a5:db:ff:15:cf:
9d:80:38:d3:9d:d2:fd:5b:e4:d0:c3:86:15:08:82:
4f:3d:14:75:8c:ca:b5:0b:d8:b8:e2:17:10:e0:81:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C6:09:81:99:75:75:08:F6:13:E9:9A:25:07:FB:95:5F:EB:4B:BB
X509v3 Authority Key Identifier:
keyid:4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6e:14:97:52:a5:a6:b6:43:f5:c8:b0:da:e1:87:19:ce:28:
15:b1:ce:71:e7:c5:93:90:90:71:c6:03:c8:8f:53:91:28:2f:
4b:1f:c6:21:f9:8a:8e:c0:41:e8:0e:0c:ca:8b:f3:71:ea:53:
c7:f5:4c:55:eb:e2:fb:9b:ad:03:cc:e0:06:f3:c6:5f:e8:44:
be:c5:6d:38:a1:8a:70:78:47:af:3c:90:fb:1d:d1:20:e7:ac:
e5:a7:05:1f:23:1d:98:cd:7d:ed:9f:8f:23:e4:73:fa:74:8c:
73:81:9d:3f:b4:57:81:3f:ad:4b:31:7d:0c:47:82:2f:73:f9:
ec:8c:14:be:41:49:96:21:b9:f0:d8:a3:0b:19:56:a4:02:a3:
67:2a:89:07:70:95:65:59:3a:93:27:71:a3:34:4f:4a:bb:d9:
de:42:fc:a6:5e:16:31:2f:b5:91:73:c4:40:a1:92:9c:a3:d4:
9b:b3:c7:e1:89:b5:57:71:73:90:6f:ad:83:e1:2d:c0:a2:31:
b9:0e:68:a6:1a:a1:5f:40:28:af:2f:c1:f6:bf:b3:99:cb:b9:
57:9a:3b:3f:2d:ea:e4:1a:7f:15:cd:be:7b:9f:9e:00:43:f6:
e4:fe:03:fd:66:5b:bc:40:05:80:87:61:90:d9:68:cd:c1:eb:
a3:4b:5f:6f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURFS9jLV99fTnV9wvxbYlfChqU7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQzNjhENjBFQUUyQjcyMThFOUM1MjI0NjVERkRBRDdE
MkRENzUyNjAeFw0yNjA5MTcwNjI2MzVaFw0yNjA5MTgwNzMzMzVaMDMxMTAvBgNV
BAMTKENEQzYwOTgxOTk3NTc1MDhGNjEzRTk5QTI1MDdGQjk1NUZFQjRCQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYgXv+pl3EqzNVvblnMPE2W7IS
0VR7LOqwzh+qa2wwlE9h6gaIY7kl32Gh/6pdK+4c+eKo4IbLPakoG5OoRXn/+KvS
F7RoiMIyMOygeC8uariFhoqRD11lJ3YfBLP4j2fvBsyJTiqCM92eCdqQCQvML+JI
wZC286cl/Diatfy5vXVCZvzXeqcJfNjkiF4QMIz13uL0je6MQHeu/ZpzBKZA9qYE
Pc3CnsithH2lAXXad8g280LMJkkrP62T4cWU2uOmmGLk6042U3BNQhZji5u7dn+p
0VjknIaL15Ol2/8Vz52AONOd0v1b5NDDhhUIgk89FHWMyrUL2LjiFxDggTp/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUzcYJgZl1dQj2E+maJQf7lV/rS7swHwYDVR0j
BBgwFoAUTTaNYOrityGOnFIkZd/a19LddSYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWI3MDkwNDQtNTcxOC00ZjFkLWE2ZDAtODc2NmVhNzNlYWY0LzAvNEQzNjhENjBF
QUUyQjcyMThFOUM1MjI0NjVERkRBRDdEMkRENzUyNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80RDM2OEQ2MEVBRTJCNzIxOEU5QzUyMjQ2NURGREFEN0QyREQ3
NTI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MDkwNDQtNTcxOC00ZjFkLWE2
ZDAtODc2NmVhNzNlYWY0LzAvNEQzNjhENjBFQUUyQjcyMThFOUM1MjI0NjVERkRB
RDdEMkRENzUyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFRuFJdSpaa2Q/XIsNrhhxnOKBWxznHnxZOQ
kHHGA8iPU5EoL0sfxiH5io7AQegODMqL83HqU8f1TFXr4vubrQPM4Abzxl/oRL7F
bTihinB4R688kPsd0SDnrOWnBR8jHZjNfe2fjyPkc/p0jHOBnT+0V4E/rUsxfQxH
gi9z+eyMFL5BSZYhufDYowsZVqQCo2cqiQdwlWVZOpMncaM0T0q72d5C/KZeFjEv
tZFzxEChkpyj1Juzx+GJtVdxc5BvrYPhLcCiMbkOaKYaoV9AKK8vwfa/s5nLuVea
Oz8t6uQafxXNvnufngBD9uT+A/1mW7xABYCHYZDZaM3B66NLX28=
-----END CERTIFICATE-----
Generated at Thu Sep 17 10:03:48 2026 by rpki-client