
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
File: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft (raw, json)
Hash identifier: /oiroWWCeyZk/4u5m56nfF1i0izwb0MjoNrGNjiIw3o=
Subject key identifier: EC:A6:B7:94:F9:92:C4:0A:1A:59:AD:0F:67:F6:12:56:F3:5A:B6:DA
Authority key identifier: 4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2
Certificate issuer: /CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2
Certificate serial: 541F424DBBA9DDF7ED65F8DC81497EB7CDE92A6D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 00:24:37 +0000
Manifest this update: Sun 25 Oct 2026 00:19:37 +0000
Manifest next update: Mon 26 Oct 2026 01:20:37 +0000
Files and hashes: 1: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl (hash: g67Ex57qsipj3zNXiMXo4vPtyUFjHTsRNuJG04xxs5k=)
2: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: ry2+KDu888rhvRXyvEVBH/F8IFRWnEG2799s3X5mVKA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl
rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 19:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:1f:42:4d:bb:a9:dd:f7:ed:65:f8:dc:81:49:7e:b7:cd:e9:2a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2
Validity
Not Before: Oct 25 00:19:37 2026 GMT
Not After : Oct 26 01:20:37 2026 GMT
Subject: CN=ECA6B794F992C40A1A59AD0F67F61256F35AB6DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:1a:07:71:d0:93:c2:3d:0c:a0:44:ea:24:
fc:97:4e:a6:42:2d:8b:69:0a:80:8b:a5:4b:05:23:
1c:48:e3:2b:ca:3c:cd:79:73:25:be:1f:86:b5:cd:
3d:1e:2e:c9:b2:48:ac:38:35:8b:63:98:8e:dc:ed:
bd:1c:f6:68:71:ce:7f:5a:ef:ee:3d:bb:b5:56:93:
14:eb:dc:47:99:4b:59:7c:2f:cb:90:c8:64:63:02:
67:1b:f5:90:b0:3d:d2:53:24:7e:b2:06:73:75:ba:
73:17:a4:0f:23:45:27:17:f8:4d:51:46:b0:8a:a1:
50:d7:a7:e2:fb:90:a2:e9:a0:bc:28:27:f2:83:67:
f5:87:a5:5d:be:8e:e8:6d:cd:5b:ce:4a:76:60:40:
bd:cb:15:dd:50:30:25:2b:85:eb:7d:e2:4f:27:20:
b1:03:aa:93:cb:7d:47:2a:b9:25:16:00:9f:4f:6d:
f7:b8:41:05:f4:60:af:ce:32:e0:63:1d:6b:58:9a:
2a:3e:24:22:00:3d:33:c9:a2:50:b3:f1:83:e7:b6:
5b:cc:b2:64:96:62:8e:e9:3a:b5:65:d5:e2:d3:95:
22:d3:8b:7a:03:ff:7e:cf:a2:07:92:a4:ea:73:d0:
ef:f5:ed:2f:71:6c:e9:6c:98:4c:62:4a:c8:a8:6b:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A6:B7:94:F9:92:C4:0A:1A:59:AD:0F:67:F6:12:56:F3:5A:B6:DA
X509v3 Authority Key Identifier:
keyid:4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:dd:99:b8:02:42:44:3b:4d:76:2e:11:17:27:19:35:32:b3:
b2:7c:ae:11:8d:83:96:32:e2:b0:dc:fa:e7:9a:cc:26:36:5d:
e3:4c:a5:62:a0:24:f9:13:19:58:77:55:6a:d7:71:76:f0:a3:
08:07:66:90:97:bc:da:d3:c5:31:f9:30:2d:04:e8:c2:5b:23:
4e:14:0f:d5:c6:f7:b4:e3:46:a2:32:e9:0d:66:40:4d:03:d3:
c5:7d:af:38:80:88:62:77:ef:ff:e5:b1:85:8c:45:32:d2:28:
81:1b:b6:90:cf:2c:51:79:dc:06:47:03:07:94:91:97:ab:33:
78:d9:9d:9b:64:9d:54:5a:44:de:c5:b1:53:c3:31:58:a9:cd:
93:5f:f8:53:ae:e3:ef:d8:c9:3a:55:89:ca:73:2a:d2:86:d5:
4f:f0:e7:1f:6d:1c:0f:73:b6:8b:c3:cf:20:06:3a:6a:83:11:
36:ac:eb:ce:3f:8c:2b:7a:f9:a6:9c:30:04:6d:c7:2b:d9:66:
8a:b9:e9:6b:70:48:94:c8:71:fd:19:38:53:03:4f:38:57:b5:
56:4d:97:a9:84:7e:f0:05:49:e8:73:98:36:90:4e:61:be:ae:
ae:f8:f2:a4:7e:22:f9:c0:63:72:c9:51:5b:a2:d1:45:cf:11:
c3:41:c7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 05:26:37 2026 by rpki-client