
$ rpki-client -vvf rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
File: 4A690EC844644FC7C72921E7FA9D8B8827A68133.mft (raw, json)
Hash identifier: kzVTaacIaI4eBwwpEQZ7y/szdLCgzPXBFa95PElCkrM=
Subject key identifier: E4:FB:C8:51:1D:55:53:00:8F:59:C4:22:8B:C8:83:E2:DE:2B:F5:41
Authority key identifier: 4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33
Certificate issuer: /CN=4A690EC844644FC7C72921E7FA9D8B8827A68133
Certificate serial: 731787D944DB64BF8AD2EF4DC4F3280837289B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
Manifest number: 77
Signing time: Wed 29 Jul 2026 05:17:25 +0000
Manifest this update: Wed 29 Jul 2026 05:12:25 +0000
Manifest next update: Thu 30 Jul 2026 07:24:25 +0000
Files and hashes: 1: 4A690EC844644FC7C72921E7FA9D8B8827A68133.crl (hash: MFLM9kRmOTJcDgaaYLXJXAmW21bWTF7QXYxf6kNIlMg=)
2: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: pESLqdHWwG9pCnMMcNgeB95CfcGiK8SY4ni1NsaDZJU=)
3: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: UugzJo0XG4CnPFobTcgFSX6/vfuVvh/vQ7HS0KjLKPQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl
rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:17:87:d9:44:db:64:bf:8a:d2:ef:4d:c4:f3:28:08:37:28:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A690EC844644FC7C72921E7FA9D8B8827A68133
Validity
Not Before: Jul 29 05:12:25 2026 GMT
Not After : Jul 30 07:24:25 2026 GMT
Subject: CN=E4FBC8511D5553008F59C4228BC883E2DE2BF541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:ee:f6:53:85:36:46:3e:63:65:48:35:b8:
50:69:37:58:7f:9b:00:f3:20:7d:8d:15:3c:77:e6:
6e:80:61:32:86:0e:e4:21:38:7e:09:b0:cf:ba:ff:
ca:70:27:f8:00:43:6e:22:b3:39:a9:9a:58:c0:54:
f3:1f:b3:9f:ca:54:fb:5e:27:3d:f8:97:3f:49:f0:
9e:87:ec:9a:5f:86:a2:fc:83:52:f4:54:af:e8:ef:
c6:89:33:90:06:74:94:ec:b6:f6:89:58:31:20:7e:
38:52:ff:25:7d:ec:b0:b0:dd:cc:df:aa:42:81:25:
e5:db:b3:25:6b:3c:fd:b4:1e:47:5a:b7:52:b5:a9:
77:c7:d8:c9:30:05:16:6e:eb:f6:70:4c:b7:ff:10:
fe:1a:6a:c4:49:54:35:8e:89:97:62:7c:72:4f:dc:
ce:7e:f1:37:89:85:b9:1c:5e:d3:e7:6f:6b:a8:9e:
b7:ec:cf:a3:52:77:f7:17:df:f3:4f:a9:5e:75:ff:
4d:60:99:77:6a:4d:fe:a4:16:1d:d8:55:2b:19:ce:
69:cc:d5:d1:24:59:8c:9e:e6:46:21:42:71:08:9b:
69:4d:ff:c6:a4:9b:97:3d:eb:95:41:11:69:6b:3b:
19:00:3d:7b:ac:15:19:f2:78:c8:d6:e0:b9:ce:85:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FB:C8:51:1D:55:53:00:8F:59:C4:22:8B:C8:83:E2:DE:2B:F5:41
X509v3 Authority Key Identifier:
keyid:4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4e:cf:b5:d7:61:c5:fc:21:07:90:fc:13:33:5c:c8:3d:a5:
77:51:6c:66:82:b9:bb:91:46:e2:41:20:35:b6:f4:d6:1d:10:
f9:e4:bb:88:86:d5:75:46:b6:a3:ca:73:bd:b7:cc:00:e3:c0:
ba:7d:3f:77:fb:65:7f:ea:bd:90:d8:e9:ca:84:78:f2:37:78:
d7:54:b6:ae:15:ec:74:72:de:c0:b9:b6:3b:17:4b:ce:0f:bd:
b9:61:4b:a9:68:e3:6d:16:26:24:98:2e:ec:02:6d:80:98:c3:
2a:58:48:57:87:ee:e3:e8:e4:f4:79:b6:4b:b7:77:5f:83:19:
cc:78:6a:f0:05:d2:9c:3f:11:1a:38:85:a5:1c:49:01:06:c8:
dc:cd:8d:55:03:ee:36:33:7c:fd:d1:75:de:c8:13:86:72:5a:
9e:37:37:55:28:e5:de:11:65:32:ec:db:a1:81:7c:37:01:3a:
42:6a:49:f9:ba:8d:75:7e:c3:bc:a8:4c:b3:69:17:8b:c9:60:
ef:dd:d3:04:09:18:48:5c:98:2a:34:32:40:1d:ee:88:4d:eb:
29:84:8d:33:4a:1b:2e:c0:7d:bf:7c:94:99:4b:20:95:aa:c7:
27:18:88:36:8e:95:a2:a7:b1:8d:99:a2:4e:04:46:03:c4:5d:
8d:51:29:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:50:17 2026 by rpki-client