
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
File: 468662DE4789E1663881A25708CA5FBF0EC39637.mft (raw, json)
Hash identifier: XAHVU0g2cyXlPGv71X8fgANB6lWS3hIOyLqgtmpOlgE=
Subject key identifier: F9:94:0A:AC:AB:5F:74:71:80:51:EB:1C:0D:5B:C5:8A:43:F9:AB:96
Authority key identifier: 46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37
Certificate issuer: /CN=468662DE4789E1663881A25708CA5FBF0EC39637
Certificate serial: 73AAA288E0C89FC9D1C6A02EAC091E7EA9F04305
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 20:44:36 +0000
Manifest this update: Wed 16 Sep 2026 20:39:36 +0000
Manifest next update: Thu 17 Sep 2026 23:20:36 +0000
Files and hashes: 1: 468662DE4789E1663881A25708CA5FBF0EC39637.crl (hash: CTobmSbl5sPl0I4chFbjMM/GuueuLAYYVb1kYaxpF8Y=)
2: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: TDJxU3359vrwAFB04SP7SYHre1Ki2hvpSBCNPL07USs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl
rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 23:20:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:aa:a2:88:e0:c8:9f:c9:d1:c6:a0:2e:ac:09:1e:7e:a9:f0:43:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468662DE4789E1663881A25708CA5FBF0EC39637
Validity
Not Before: Sep 16 20:39:36 2026 GMT
Not After : Sep 17 23:20:36 2026 GMT
Subject: CN=F9940AACAB5F74718051EB1C0D5BC58A43F9AB96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:f3:14:71:fa:2d:83:44:30:0b:5a:86:42:
78:e7:a5:d9:93:3f:a2:84:43:78:a9:67:b7:11:aa:
aa:29:97:00:85:26:66:7c:af:a7:af:fb:52:5c:bc:
f4:6c:78:05:9e:ad:fd:34:30:a8:4d:e2:9a:cc:d0:
24:dc:47:d5:66:c1:88:a3:4e:f3:13:cc:cd:c9:e2:
f2:c4:ee:cf:01:30:5e:fc:76:c4:ea:62:d7:cb:71:
d9:d5:42:58:19:bd:36:d5:2d:6b:59:7f:b2:b9:45:
95:e0:9d:fb:a1:07:77:a0:d3:c0:94:a9:69:d4:d5:
07:d7:39:cc:1c:7a:0e:24:3f:f6:a6:2a:48:28:96:
b3:3f:e8:01:bf:15:b3:87:5e:0c:7a:9e:51:68:6b:
2a:90:d1:e9:50:bb:eb:0d:e4:1a:8e:be:27:86:0c:
2c:39:6f:93:39:49:7e:be:50:b9:a5:52:a9:10:87:
5f:17:36:48:1f:a3:b3:d3:a3:67:22:bd:c8:54:3c:
fc:5a:05:bf:93:9e:2d:c6:e9:db:a9:19:f6:93:fc:
1a:c5:a4:c7:78:ae:9e:51:47:d0:86:ef:ef:40:c7:
fe:d2:b1:c6:08:b7:83:fc:42:33:b5:23:0d:15:b0:
df:d1:0f:9e:8b:1b:20:ad:97:99:7b:0b:1d:af:9a:
c6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:94:0A:AC:AB:5F:74:71:80:51:EB:1C:0D:5B:C5:8A:43:F9:AB:96
X509v3 Authority Key Identifier:
keyid:46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cd:be:8f:75:8f:9f:ac:90:f6:85:5e:07:8a:03:0f:72:3d:
5e:cb:f1:51:21:5c:01:c7:84:8e:c3:8a:b9:74:ed:44:a4:d9:
03:ec:dd:0d:1f:ca:fc:6c:38:70:9a:7c:ca:ec:c5:d6:63:69:
84:5d:bb:ca:41:09:ab:0e:c4:f1:15:43:44:aa:dc:47:7c:8a:
53:a8:d4:ba:4a:84:21:bd:9e:be:87:c6:1e:95:99:f8:9f:64:
99:52:64:7e:c5:47:5f:16:13:fd:a5:05:eb:10:9c:f9:3f:53:
70:e4:a8:f1:4b:9b:76:21:c1:28:45:92:ed:70:07:6d:cf:b1:
14:d5:c8:f4:21:66:a1:e1:16:4c:46:eb:56:73:d7:a1:d0:fe:
a4:54:1a:17:f9:37:f7:1b:c4:13:98:a9:7f:54:0a:ce:96:e3:
7c:e1:30:13:38:72:4d:78:c7:b4:13:d5:30:46:4e:66:10:3e:
7d:23:b0:b3:b0:8a:8b:62:2e:8f:5a:e1:d9:33:e1:84:2c:99:
c6:16:94:c5:6d:c5:3a:e6:73:f8:17:1e:48:d5:e3:a9:a2:de:
84:70:57:35:02:09:6d:4f:70:b6:2b:9f:e6:8c:64:34:39:43:
cd:aa:8c:3a:1d:29:bd:e0:03:43:1f:4a:1a:2d:35:56:01:d2:
7a:f0:90:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:12:19 2026 by rpki-client