
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft
File: 411E8C45894267DCEFA20514C89165EE7C17C4C4.mft (raw, json)
Hash identifier: ThND/cs2pRxW0ovt6ncP19l/nu5HM1XSq/Ftm+azYiU=
Subject key identifier: 47:C4:85:CD:27:15:DD:3B:2D:C2:94:C2:4B:D2:AF:87:0C:7E:4F:D9
Authority key identifier: 41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4
Certificate issuer: /CN=411E8C45894267DCEFA20514C89165EE7C17C4C4
Certificate serial: 4A95CBDDC0E975BF88451BF2B20B690320DD9DD7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 05:45:34 +0000
Manifest this update: Thu 17 Sep 2026 05:40:34 +0000
Manifest next update: Fri 18 Sep 2026 07:23:34 +0000
Files and hashes: 1: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: Gd2IM01O7z8fqk7GpG61d/HhlCVHlpL3rkOIOFXsAII=)
2: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: RWaRXWbQIpLKoTQziPLdF6KyPF26oe/DwncsbN1gjuY=)
3: 411E8C45894267DCEFA20514C89165EE7C17C4C4.crl (hash: hTrMopOxKEcY2f9el5/3Syb/RTTodszL0vUK+G5Iy5k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl
rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 07:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:95:cb:dd:c0:e9:75:bf:88:45:1b:f2:b2:0b:69:03:20:dd:9d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411E8C45894267DCEFA20514C89165EE7C17C4C4
Validity
Not Before: Sep 17 05:40:34 2026 GMT
Not After : Sep 18 07:23:34 2026 GMT
Subject: CN=47C485CD2715DD3B2DC294C24BD2AF870C7E4FD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:50:a9:5c:10:66:5a:f7:6e:0e:1b:ba:09:
cc:9c:d3:9c:26:d9:c1:65:01:20:5c:7a:af:33:13:
28:bf:a2:15:78:f2:99:48:52:09:e0:bb:a9:d6:4b:
4a:28:70:df:86:78:dc:af:2d:fb:5f:84:bb:a0:41:
99:31:a1:6a:c0:e4:01:e7:f9:64:06:fd:1a:e5:48:
b0:60:17:9c:53:4e:d6:ee:a3:37:bc:d6:eb:c6:df:
2c:f3:2c:0b:8d:81:0d:a2:3c:a9:15:33:c9:9d:37:
f9:82:aa:bf:f6:dc:97:17:15:7e:67:21:dd:16:0f:
3a:c1:60:09:0f:90:39:9e:4b:db:09:7d:e3:73:11:
70:0c:c1:6e:c8:f9:c3:27:18:9b:df:92:2b:79:ea:
81:54:ef:d4:80:59:c3:8a:c4:d5:df:39:d8:84:ac:
17:56:ff:5a:42:8f:c5:25:23:73:14:78:68:57:19:
35:7c:00:79:0c:89:02:4a:16:dc:65:e9:66:7e:c5:
3d:28:97:68:8a:6b:12:9a:85:f7:5d:12:a6:b7:e9:
18:af:41:ab:0b:74:97:eb:df:ca:7f:e2:b5:1f:0a:
53:24:73:a0:5c:62:86:fe:78:85:2d:a5:de:7c:07:
64:f3:f5:a4:df:84:46:31:e0:55:d5:70:5d:27:29:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C4:85:CD:27:15:DD:3B:2D:C2:94:C2:4B:D2:AF:87:0C:7E:4F:D9
X509v3 Authority Key Identifier:
keyid:41:1E:8C:45:89:42:67:DC:EF:A2:05:14:C8:91:65:EE:7C:17:C4:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/411E8C45894267DCEFA20514C89165EE7C17C4C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/411E8C45894267DCEFA20514C89165EE7C17C4C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:45:b4:1a:30:6e:7c:46:1a:fe:88:11:f6:93:e9:83:14:d2:
e7:4c:5f:5d:f7:ac:63:9c:e4:a7:d4:87:f6:69:b4:ef:2d:27:
ff:f6:d2:ba:7c:83:1f:fb:a5:76:01:f8:a9:9a:34:e6:bd:93:
64:4a:2a:cf:62:2d:2e:9f:84:64:ca:9f:ad:db:0a:ae:44:ce:
f1:8a:db:b4:9c:37:fb:21:4c:6a:a5:99:54:b1:33:9d:3b:e8:
41:68:a9:44:fd:d3:56:05:e1:dc:96:2d:8c:9c:af:a1:80:ab:
b4:26:78:b6:3b:76:3e:94:12:2f:a2:71:db:08:dd:fa:f1:41:
37:d1:92:59:21:4a:d3:1c:77:56:e4:f6:9b:87:c8:bf:cd:df:
45:b9:21:aa:c2:96:ee:b2:94:00:1b:16:4b:a9:60:34:c2:e2:
96:1e:8a:16:da:ab:db:8a:01:99:19:b6:37:14:2e:91:c4:2e:
4f:67:36:ab:9b:34:51:43:40:85:d9:72:09:f3:48:0d:f2:30:
93:ca:e3:c9:76:4c:a8:20:f7:ca:6d:1c:83:13:e3:09:77:c4:
27:9d:6a:d2:d7:2a:da:e3:2f:9b:06:34:85:27:5b:2e:37:a3:
b4:15:b6:af:9b:26:2d:b2:c1:f9:77:ab:2f:d6:da:aa:42:44:
50:f7:9d:a4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSpXL3cDpdb+IRRvysgtpAyDdndcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDExRThDNDU4OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1RUU3
QzE3QzRDNDAeFw0yNjA5MTcwNTQwMzRaFw0yNjA5MTgwNzIzMzRaMDMxMTAvBgNV
BAMTKDQ3QzQ4NUNEMjcxNUREM0IyREMyOTRDMjRCRDJBRjg3MEM3RTRGRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJulCpXBBmWvduDhu6Ccyc05wm
2cFlASBceq8zEyi/ohV48plIUgngu6nWS0oocN+GeNyvLftfhLugQZkxoWrA5AHn
+WQG/RrlSLBgF5xTTtbuoze81uvG3yzzLAuNgQ2iPKkVM8mdN/mCqr/23JcXFX5n
Id0WDzrBYAkPkDmeS9sJfeNzEXAMwW7I+cMnGJvfkit56oFU79SAWcOKxNXfOdiE
rBdW/1pCj8UlI3MUeGhXGTV8AHkMiQJKFtxl6WZ+xT0ol2iKaxKahfddEqa36Riv
QasLdJfr38p/4rUfClMkc6BcYob+eIUtpd58B2Tz9aTfhEYx4FXVcF0nKUwTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUR8SFzScV3TstwpTCS9Kvhwx+T9kwHwYDVR0j
BBgwFoAUQR6MRYlCZ9zvogUUyJFl7nwXxMQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGMwMjAxZTMtODc1ZC00OWM0LThlMTQtOTk5OTQ5MzZkNDkxLzAvNDExRThDNDU4
OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1RUU3QzE3QzRDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MTFFOEM0NTg5NDI2N0RDRUZBMjA1MTRDODkxNjVFRTdDMTdD
NEM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGMwMjAxZTMtODc1ZC00OWM0LThl
MTQtOTk5OTQ5MzZkNDkxLzAvNDExRThDNDU4OTQyNjdEQ0VGQTIwNTE0Qzg5MTY1
RUU3QzE3QzRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEdFtBowbnxGGv6IEfaT6YMU0udMX133rGOc
5KfUh/ZptO8tJ//20rp8gx/7pXYB+KmaNOa9k2RKKs9iLS6fhGTKn63bCq5EzvGK
27ScN/shTGqlmVSxM5076EFoqUT901YF4dyWLYycr6GAq7QmeLY7dj6UEi+icdsI
3frxQTfRklkhStMcd1bk9puHyL/N30W5IarClu6ylAAbFkupYDTC4pYeihbaq9uK
AZkZtjcULpHELk9nNqubNFFDQIXZcgnzSA3yMJPK48l2TKgg98ptHIMT4wl3xCed
atLXKtrjL5sGNIUnWy43o7QVtq+bJi2ywfl3qy/W2qpCRFD3naQ=
-----END CERTIFICATE-----
Generated at Thu Sep 17 14:46:27 2026 by rpki-client