
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
File: 488A458129866D0E7DBFF7668D82664F584F8541.mft (raw, json)
Hash identifier: AO5dmtKLFy3mDsOzMkx9zpDdDp9AXafmOc97NQXawUg=
Subject key identifier: 9C:E3:9F:AF:8E:8C:D4:5A:04:A5:00:7B:A8:9E:6D:28:E5:52:9A:01
Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41
Certificate issuer: /CN=488A458129866D0E7DBFF7668D82664F584F8541
Certificate serial: 509E5978584EAE325C5F3DAA046EEAF1D98023A8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
Manifest number: F0
Signing time: Mon 26 Oct 2026 22:38:41 +0000
Manifest this update: Mon 26 Oct 2026 22:33:41 +0000
Manifest next update: Tue 27 Oct 2026 22:42:41 +0000
Files and hashes: 1: 3130312e35302e31362e302f32302d3234203d3e2034373837.roa (hash: +b5NqaJS6v9hXzvZigHVYiJMJdXpHZYJPG2i54V2Zkg=)
2: 3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa (hash: +JXr82FpG/6Wt8qvldpnb4fgmcqGxYhFwHI7evACCBg=)
3: 3130312e3132382e36342e302f31392d3234203d3e20313335343738.roa (hash: 5id0QnfcKsnw0+S9ulptOtQBEWbR8UG/S4Owh/B9W74=)
4: 3132352e3230382e3132382e302f31382d3234203d3e2034373837.roa (hash: aox2X7SgWnRXu8G+kGHpNIJb4RAjQYMcZgSqdVFmhhE=)
5: 3130312e3132382e36362e302f32332d3233203d3e20313335343738.roa (hash: KiBzwdkwkvBjgtXV0cM+MD3JNlJOyrjNhlEWrqegSSU=)
6: 3230322e3135382e302e302f31372d3234203d3e2034373837.roa (hash: WW8sIJ6AThc6GzaZsxU3S0vSQEeSjQOfDUvBVqio138=)
7: 3130312e3132382e36362e302f32332d3234203d3e20313335343738.roa (hash: 1H3PSuEvCc4YKCR6kgpSZidVqJxCnAhidJTquYvi5XY=)
8: 3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa (hash: wbehxlGBOFZ5POFNUace0mPfuERAJPSvGNjotR14fdE=)
9: 323430353a383138303a3a2f33322d3332203d3e2034373837.roa (hash: UAYb+1HjfSmt5R+QlsY+ZQQtQPafl+SlPKPY7/wXU0Q=)
10: 488A458129866D0E7DBFF7668D82664F584F8541.crl (hash: jJBknfX50cc1ddtnWUEwqTMzBrTd7w+o93VoZKMieYs=)
11: 3231302e3231302e3132382e302f31382d3234203d3e2034373837.roa (hash: cChkhgKm+2KNkrgQft7uIxPkb8RhfpDlI+RUTMMAntw=)
12: 3130312e3132382e36342e302f31382d3234203d3e20313335343738.roa (hash: 99+LHdnDZ+xXSQ4fS/K7+l08VVwSgr8ZFAwx6f4ta24=)
13: 323030313a6431303a393430303a3a2f33382d3438203d3e20313335343738.roa (hash: noWOl6fVub87P1/SVgYHH5T2hrSTXsrQ+oEMt1rrpNg=)
14: 323430353a383138303a3a2f33322d3438203d3e20313335343738.roa (hash: H13662R2JsQ6xsWPNm8piREclR+MKAOjI1IQH6H0ptk=)
15: 3130312e3132382e36342e302f32332d3234203d3e20313335343738.roa (hash: cNsXz0HEcLxttb5xDjo+VflY5ICv7Vrpe3SghZW7FwU=)
16: 3130332e36312e3234382e302f32322d3234203d3e20313335343738.roa (hash: ARl4ZAaC9Jes/owyoPp7apbT6NpWz6hu9CZFgWsDZ/w=)
17: 3131362e3230362e3234302e302f32322d3234203d3e2034373837.roa (hash: Yz2BU+sizR5MaKXnmTSXZbcNfxY4e6NTRVofqsdo3Mc=)
18: 3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa (hash: mML8Y06xC1Ba28dmIO2VE5Ln2tzvvZV3niqEU4AWOB4=)
19: 323030313a6431303a383431303a3a2f34382d3438203d3e20313331313139.roa (hash: G3pU6symkaZdSMicPc79FGi+dBVSw2ehAYC4dr25SgE=)
20: 3230322e3135382e35302e302f32332d3234203d3e2034373837.roa (hash: QPI+dREhzvsIigpY59BOgb1O27ZG4A0uLzoVwlmd6ns=)
21: 3130312e3132382e36342e302f32332d3233203d3e20313335343738.roa (hash: t2MsMuM/1YQ0d1jlVRk+UQIkBTqKfcyfuzkWNhKm+2Y=)
22: 323030313a6431303a3a2f33322d3438203d3e2034373837.roa (hash: 14/1HVNOXsDEYMMhgV/UFslejkV/yr/QLEVbg8K0YaE=)
23: 34352e3132362e38302e302f32322d3234203d3e20313335343738.roa (hash: b2lWOoaou2J1YIxknocGyrbJm7waL5thO0MNRGLl9mc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl
rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 12:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:9e:59:78:58:4e:ae:32:5c:5f:3d:aa:04:6e:ea:f1:d9:80:23:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541
Validity
Not Before: Oct 26 22:33:41 2026 GMT
Not After : Oct 27 22:42:41 2026 GMT
Subject: CN=9CE39FAF8E8CD45A04A5007BA89E6D28E5529A01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:e4:e0:ee:8d:7b:eb:e9:e0:06:e8:f2:75:
c9:bf:a6:78:a9:dc:a1:f4:5f:b6:7f:66:26:fa:27:
a3:7b:f9:c6:8c:4c:97:ac:70:77:ad:08:b4:fc:be:
2c:3f:15:bc:ee:c4:28:63:7b:3b:99:24:9d:04:4a:
14:08:61:95:44:e2:33:0e:05:79:54:b1:ea:8c:35:
bf:d5:c5:11:41:18:86:75:cb:ab:01:cd:6f:73:44:
55:f7:c4:40:f0:ce:e8:0f:c5:ee:b5:8b:87:ee:87:
27:c6:f8:c8:00:ed:d9:61:c4:c0:96:44:89:9c:16:
6a:64:c4:fb:69:50:b0:59:dd:41:b7:a5:86:e1:62:
e0:44:68:1a:de:4c:08:8a:98:61:09:5c:de:3d:08:
70:43:af:54:99:bf:ed:bf:c2:01:fa:7f:a2:6e:82:
f6:ef:eb:ae:59:60:19:e8:50:89:85:d3:2c:9a:9e:
37:13:1d:8b:76:0b:1a:78:d9:38:c8:c4:1c:24:c9:
36:c6:d7:20:14:be:68:29:98:ac:14:9f:1d:40:c1:
9b:04:b2:bb:64:3d:c7:63:ea:b4:6b:40:b6:df:ed:
dd:52:b1:29:d6:60:a9:ca:1b:73:46:c8:7b:5f:38:
56:4e:41:5a:0b:3d:c8:08:25:c6:62:1a:e4:f8:97:
6e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E3:9F:AF:8E:8C:D4:5A:04:A5:00:7B:A8:9E:6D:28:E5:52:9A:01
X509v3 Authority Key Identifier:
keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0f:04:0a:1a:67:fd:69:e0:7a:65:be:b1:ec:7f:89:ce:8a:
51:2b:fa:90:78:13:7a:0c:e5:d4:5f:16:e2:61:95:87:bc:a0:
4b:67:7f:c4:08:3d:10:27:a4:fa:83:05:5d:16:05:9e:ac:c6:
00:f2:e1:7d:10:72:00:ce:6e:c4:70:50:9c:d8:b5:25:71:c3:
52:b2:b2:13:7e:e6:a6:e7:e1:68:82:f2:e1:02:54:f9:82:42:
c3:7f:d3:27:68:f5:7a:28:8f:97:d0:7e:c0:b9:60:c4:82:bf:
67:46:c0:ae:86:07:a3:13:ed:7b:0c:ec:02:48:45:8b:af:0e:
89:46:0f:bd:eb:9d:f4:25:85:36:9d:95:18:17:16:dd:59:26:
03:4b:f9:4e:33:ce:99:e5:10:cf:47:91:8a:8e:9c:16:1f:9a:
ec:9e:c6:0d:24:d1:b4:1c:76:03:67:22:81:74:5a:0b:05:2f:
44:46:fb:a1:e3:26:d5:27:f9:f6:14:fe:ab:57:99:38:b5:40:
0f:2a:cd:9b:b0:b2:7b:80:d4:4f:80:8c:2e:2f:1a:ee:a6:99:
05:a2:f6:6c:a6:46:c2:f3:79:df:7b:4b:62:2c:97:4d:81:56:
c2:c7:d6:cb:da:31:55:6b:d5:16:cb:4a:8e:f6:1d:b4:53:7a:
e8:85:ee:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 02:39:10 2026 by rpki-client