
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft
File: 4C87F894274B3B0E1928C39974942F14C8A8B54C.mft (raw, json)
Hash identifier: 5HiUQNrVbR9YO0/VA4M+0nfWK2c2cm7pfDlCVJ6lF38=
Subject key identifier: 6C:C4:C5:33:88:97:8A:0D:E0:26:42:E3:61:CE:A7:9F:6C:3C:14:27
Authority key identifier: 4C:87:F8:94:27:4B:3B:0E:19:28:C3:99:74:94:2F:14:C8:A8:B5:4C
Certificate issuer: /CN=4C87F894274B3B0E1928C39974942F14C8A8B54C
Certificate serial: 3DE26904FCA141072097F5AACA41CD88F4B32AB3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C87F894274B3B0E1928C39974942F14C8A8B54C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft
Manifest number: C6
Signing time: Sat 26 Sep 2026 00:56:15 +0000
Manifest this update: Sat 26 Sep 2026 00:51:15 +0000
Manifest next update: Sun 27 Sep 2026 02:32:15 +0000
Files and hashes: 1: 4C87F894274B3B0E1928C39974942F14C8A8B54C.crl (hash: OnNLf1Gl9gsD/PJ/MrXcHvXgcy0SL4fXwLgbYkfs1LE=)
2: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: 77vqSQ2vYJSpRPJK+Drkv/GhwqBRFPysUVhKsIiSCoU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.crl
rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C87F894274B3B0E1928C39974942F14C8A8B54C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 02:32:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e2:69:04:fc:a1:41:07:20:97:f5:aa:ca:41:cd:88:f4:b3:2a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C87F894274B3B0E1928C39974942F14C8A8B54C
Validity
Not Before: Sep 26 00:51:15 2026 GMT
Not After : Sep 27 02:32:15 2026 GMT
Subject: CN=6CC4C53388978A0DE02642E361CEA79F6C3C1427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0a:24:30:8f:a2:ff:37:c6:47:52:3a:a4:3c:
d1:10:6d:e0:e2:8a:4b:d3:17:22:b0:f2:5f:9d:00:
a0:8d:44:7c:2e:1c:35:1d:32:19:ae:ec:19:b9:66:
9e:6f:0f:9f:34:31:53:0f:aa:49:77:63:c8:2f:87:
b7:96:8f:26:ed:e0:82:bf:a6:2a:97:6e:8c:30:21:
d6:dc:25:74:b7:83:53:2f:f0:d6:84:09:85:bb:f9:
e3:ab:71:cb:5b:35:e8:21:17:a0:71:48:c6:9a:19:
1b:90:8e:c1:1b:80:84:7e:71:eb:14:39:19:2e:dc:
80:2f:1c:92:f8:86:9b:5c:d1:92:e3:cd:16:ab:38:
8c:2d:0f:72:01:fe:c8:cc:7e:d1:85:48:93:a9:1a:
f7:b8:30:ec:74:7c:a2:49:e6:12:56:df:c5:a0:ee:
d5:03:3c:08:0f:36:b7:b2:05:75:21:a3:02:ee:96:
5b:50:6b:14:02:de:95:d9:47:f4:c6:c0:c3:97:f4:
bf:2b:cd:0f:42:0b:45:8a:f7:4b:43:98:76:e0:ed:
bd:dc:a3:d9:92:a3:8b:7b:d2:42:93:48:c9:5b:4c:
94:3b:57:70:7a:93:9d:ba:a8:77:a8:d6:e1:4c:9b:
fb:1b:31:ed:f5:f3:3a:ae:ba:79:35:99:5f:4c:43:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C4:C5:33:88:97:8A:0D:E0:26:42:E3:61:CE:A7:9F:6C:3C:14:27
X509v3 Authority Key Identifier:
keyid:4C:87:F8:94:27:4B:3B:0E:19:28:C3:99:74:94:2F:14:C8:A8:B5:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C87F894274B3B0E1928C39974942F14C8A8B54C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/4C87F894274B3B0E1928C39974942F14C8A8B54C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:be:e8:53:c4:f0:a8:d6:2e:0c:24:1c:f7:7e:fa:ad:34:e8:
9c:d0:22:c9:85:3d:a0:83:57:f6:81:f9:b4:a6:df:4e:f5:1e:
72:73:8b:90:85:0b:28:15:d7:eb:6f:b6:2e:d3:ea:be:17:4d:
4a:3d:71:c6:d0:27:d3:5b:ba:6a:44:24:b8:d5:3a:63:05:78:
4f:e5:ad:46:91:cf:9e:7f:5c:ec:19:94:b4:94:2b:a6:9b:43:
ba:53:b3:98:5b:e9:1d:3c:06:eb:56:f0:f9:67:df:b6:26:02:
f7:62:48:79:ec:06:34:5a:b6:ba:4d:37:5e:31:ad:7a:ce:a8:
8c:51:e6:fd:98:bd:26:ba:0a:df:b7:8d:8f:b5:b5:58:c2:4c:
a5:f0:96:bc:cb:e2:88:d6:f2:92:35:44:0f:ce:7d:0f:46:bd:
24:0c:3f:0c:11:c2:a7:9a:34:48:d5:61:74:90:dd:aa:c5:10:
ff:b8:ba:d5:ba:a9:10:17:a2:32:1a:f5:03:c5:57:5e:a1:45:
48:c5:c2:e3:d7:1a:71:b0:99:33:de:95:2d:17:c4:5b:2b:2e:
31:07:6b:c2:2d:70:a0:b9:e1:15:40:ea:85:70:d1:4d:20:7b:
d0:bc:a7:b3:6f:84:ce:bb:7e:54:12:a5:8c:9d:13:c3:60:9a:
a9:73:51:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:57:12 2026 by rpki-client