
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft
File: 4263490508EE6D5873ACA7B620F66196D4A2AE63.mft (raw, json)
Hash identifier: 7P+1It/fhmWKuMTYl65IGQAwp8xo2uy1tedd1TQ1p3E=
Subject key identifier: 5E:70:FD:EB:01:49:32:C8:ED:8D:9E:F5:DE:B3:B0:2A:69:3A:5D:63
Authority key identifier: 42:63:49:05:08:EE:6D:58:73:AC:A7:B6:20:F6:61:96:D4:A2:AE:63
Certificate issuer: /CN=4263490508EE6D5873ACA7B620F66196D4A2AE63
Certificate serial: 29458A968672E92963CB44002BC18958F14D7802
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft
Manifest number: BA
Signing time: Wed 16 Sep 2026 22:31:49 +0000
Manifest this update: Wed 16 Sep 2026 22:26:49 +0000
Manifest next update: Fri 18 Sep 2026 00:22:49 +0000
Files and hashes: 1: 4263490508EE6D5873ACA7B620F66196D4A2AE63.crl (hash: lIOQgO8pzRjdMsOuUm7AJsi3eBBSfmveELaAA/vNNG4=)
2: 323030313a6466363a613434303a3a2f34382d3438203d3e20313432363339.roa (hash: iHApH4ig54MvTMEQeKGAbjPzbWKAy8vcZBqwYCxZPjg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.crl
rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 00:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:45:8a:96:86:72:e9:29:63:cb:44:00:2b:c1:89:58:f1:4d:78:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4263490508EE6D5873ACA7B620F66196D4A2AE63
Validity
Not Before: Sep 16 22:26:49 2026 GMT
Not After : Sep 18 00:22:49 2026 GMT
Subject: CN=5E70FDEB014932C8ED8D9EF5DEB3B02A693A5D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:9f:93:19:ec:7d:fa:e6:c7:9d:5d:5b:06:
f4:ab:97:83:34:d5:a9:fa:3c:2b:eb:bf:96:04:96:
49:e7:cb:4c:da:1c:cd:2f:b9:0f:24:c9:0f:68:3b:
ec:a3:1e:98:d0:a6:7c:9a:84:04:04:73:15:61:74:
5b:85:53:15:69:46:ea:c7:b0:53:06:45:fa:b8:83:
f1:aa:84:97:09:df:b9:4e:57:50:0d:f6:c6:14:33:
f0:50:8b:86:c7:91:7a:ae:a0:f8:94:b2:0f:3b:37:
6b:68:4e:3e:01:1c:ea:a4:57:a7:a7:3b:aa:7c:43:
a9:ef:81:72:95:38:e5:8c:8a:99:c1:60:8e:3c:46:
bb:ad:4e:dc:80:3c:41:ff:ef:17:4e:2a:5a:7e:79:
3c:64:fe:ef:72:af:78:19:86:f7:d0:14:6a:0d:96:
ad:83:c1:10:02:53:5b:0c:60:87:a7:a3:3c:c9:82:
16:60:64:46:f8:b0:91:56:0c:f9:16:21:98:ff:0a:
3c:2a:87:31:83:e5:00:68:51:a0:44:3a:e4:50:7f:
04:a4:03:eb:4a:38:f7:c5:59:86:26:ff:30:e2:63:
a0:f2:52:f3:69:9a:90:b1:8c:e7:dd:f2:4c:87:2d:
c6:0b:24:bb:24:7b:fe:3b:e8:45:a0:87:85:31:fd:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:70:FD:EB:01:49:32:C8:ED:8D:9E:F5:DE:B3:B0:2A:69:3A:5D:63
X509v3 Authority Key Identifier:
keyid:42:63:49:05:08:EE:6D:58:73:AC:A7:B6:20:F6:61:96:D4:A2:AE:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c3:f0:d6:b8:61:38:cb:31:89:12:e5:26:2f:92:c5:a6:7d:
ea:b9:28:df:ec:bb:5c:e8:42:1f:2c:0f:8c:7f:d6:25:e6:de:
e9:df:e2:4e:48:8e:4e:10:ce:fa:22:78:0e:b1:f6:47:74:34:
f9:cb:66:3b:47:48:84:09:27:b4:e1:ea:ab:b3:53:da:2c:86:
63:d1:38:97:e8:64:7f:3e:e6:94:dc:e2:20:d6:fe:4b:41:0e:
6b:24:35:f7:e4:9a:50:49:6f:6c:81:4d:6d:a4:ef:44:e4:2a:
ae:bb:af:d0:df:1c:fa:a9:02:7c:89:d0:09:44:1b:9f:68:d7:
8c:ff:be:c3:a9:80:ae:3d:97:c0:79:52:da:0a:40:66:49:1a:
ad:d7:cb:ef:28:25:17:2b:b1:6b:1d:86:62:47:67:8b:30:e2:
d9:64:71:b6:4b:a8:65:82:3e:74:11:25:7b:d5:90:06:85:d9:
1e:85:55:19:ef:f5:fc:ea:56:bf:92:7b:cc:43:bd:78:29:e7:
59:cf:46:10:4a:2b:5c:d1:07:20:78:a0:4c:11:92:ee:72:ce:
f5:94:5d:96:03:08:60:fa:3a:9e:a9:c7:4c:cc:d5:2d:f1:ec:
c0:05:31:d4:2e:2a:f0:d9:e4:20:b5:65:7f:5e:24:5a:76:de:
5a:52:95:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:45:26 2026 by rpki-client