
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft
File: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft (raw, json)
Hash identifier: w34ajVrQ8xxc+iCyKMg4j9aX2BMUsUnw1ysPa5YIw24=
Subject key identifier: ED:DB:01:8B:10:51:14:78:E2:B9:5F:31:B2:BE:5E:38:A4:80:FC:2F
Authority key identifier: 4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA
Certificate issuer: /CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA
Certificate serial: 7675B9BAE3B1CC15B909BFBCED6EE702CF6888F9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 03:02:16 +0000
Manifest this update: Thu 17 Sep 2026 02:57:16 +0000
Manifest next update: Fri 18 Sep 2026 04:51:16 +0000
Files and hashes: 1: 3130332e3137312e3235342e302f32342d3234203d3e20313432333939.roa (hash: Y5XB9rqhcbsV9IQfUbYmWZisnqag3EEZWqXjsPcCSU4=)
2: 4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl (hash: Iu1K+WYzEp0QPncGodHw4CDSd35mmacgk1DrYQ6/cwI=)
3: 3130332e3137312e3235352e302f32342d3234203d3e20313432333939.roa (hash: H/rwQ/f8aUBtc58OK4kWZL1DduHZ4X5rHCUaLkdQAjM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl
rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:75:b9:ba:e3:b1:cc:15:b9:09:bf:bc:ed:6e:e7:02:cf:68:88:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA
Validity
Not Before: Sep 17 02:57:16 2026 GMT
Not After : Sep 18 04:51:16 2026 GMT
Subject: CN=EDDB018B10511478E2B95F31B2BE5E38A480FC2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:f9:be:30:48:d1:b2:a8:f3:71:8a:b3:44:
e0:cc:78:ec:2b:f4:2e:ff:b1:de:5c:80:87:2e:4a:
2e:40:ee:94:bf:69:c5:59:19:22:8b:b3:bd:a8:0a:
c1:d8:88:40:98:46:7a:35:95:0b:7f:0d:43:f2:55:
70:5e:44:39:16:24:8f:f6:da:15:75:14:70:72:96:
af:f7:9e:31:f2:86:ab:e2:01:03:df:7f:06:d6:a7:
d7:bc:d6:c9:96:4b:6f:04:7c:d7:72:d4:eb:c3:a4:
63:a7:06:c5:e9:5f:10:d7:6e:90:14:d3:6e:5d:f1:
72:c3:d8:1f:9d:35:8f:fc:44:aa:95:7a:b6:06:7f:
5e:6f:13:16:63:fc:58:d9:c8:d8:0c:f4:75:84:ce:
8c:3d:16:ef:81:a5:19:1d:7f:93:93:da:9e:2e:88:
90:35:c9:8f:a7:dc:21:ea:5a:16:f7:73:9c:da:17:
e9:a9:d2:8b:eb:19:1e:bb:85:4f:c2:6d:19:32:57:
e3:2d:92:90:1e:f0:9d:3e:5d:8e:0f:19:9f:2d:aa:
3e:c1:12:1a:b3:92:81:b6:36:4e:2c:67:02:2b:f8:
2b:65:f9:9a:09:5c:1a:cc:be:0c:e0:56:6e:7f:c4:
94:92:a4:5b:fe:f8:4c:10:dd:2d:b7:3a:4e:f9:9a:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DB:01:8B:10:51:14:78:E2:B9:5F:31:B2:BE:5E:38:A4:80:FC:2F
X509v3 Authority Key Identifier:
keyid:4F:C4:8D:D4:A0:4D:6F:39:93:1A:F1:E8:DE:E3:5A:BD:F9:C7:76:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb01c967-99d0-4c21-9642-87ada67155c8/0/4FC48DD4A04D6F39931AF1E8DEE35ABDF9C776FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:91:a1:f2:7d:e5:48:7f:a1:27:b1:c9:a4:78:ea:7a:14:30:
78:9d:18:b1:25:51:ee:3f:2f:e9:c0:11:3b:b0:1c:01:a6:7a:
1b:de:6c:95:d3:ae:fa:80:8b:0d:a4:ac:52:8f:32:6c:bb:0b:
36:d4:e5:f9:f0:8c:38:16:3b:37:54:fc:3e:d8:9c:65:ba:2f:
9d:6f:f1:cb:42:56:58:34:e1:f7:0c:01:a7:4f:70:b1:b9:1f:
d9:3e:64:8e:9b:e5:d3:e2:4a:33:f7:90:81:cf:9f:f3:2e:29:
10:31:e9:38:81:c7:d4:c1:3c:fb:59:ca:94:78:9e:04:3b:d2:
aa:b9:a4:38:11:9e:e4:89:cc:c2:e6:7c:e6:b7:17:ef:7d:25:
5b:7e:30:5f:b8:b5:da:b9:e7:dc:e2:80:ec:07:4b:a8:64:d2:
29:8b:0e:aa:a4:55:7f:3c:a4:80:0c:a0:9b:80:06:d5:95:24:
15:57:a6:57:22:15:a0:4c:c1:98:8b:4f:be:e0:d0:b0:34:de:
62:b4:10:da:8a:2f:39:12:e5:ab:e2:75:4d:75:c9:fe:7d:1d:
66:6b:2b:12:b2:32:f4:9c:db:ea:ec:cf:5b:ac:93:99:5f:b4:
6f:df:44:3e:02:9b:6e:b4:e9:96:0a:61:03:82:d8:75:c4:0c:
8e:ef:de:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:03:25 2026 by rpki-client