
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft
File: 4DD4106B03003D9C5B51BF893631C8E467E07F65.mft (raw, json)
Hash identifier: GKOdzw+7Yr4qZ68lFpwDzKiQ/iABhcSlUcCWF2qgwOM=
Subject key identifier: 81:50:ED:F0:BC:C6:8F:2D:54:EB:9B:FD:23:3D:04:0F:6C:5D:3E:7C
Authority key identifier: 4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65
Certificate issuer: /CN=4DD4106B03003D9C5B51BF893631C8E467E07F65
Certificate serial: 4F259AC9C6342D1F2A181DE258D6D3AC2A07CC3D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft
Manifest number: BE
Signing time: Tue 22 Sep 2026 02:29:36 +0000
Manifest this update: Tue 22 Sep 2026 02:24:36 +0000
Manifest next update: Wed 23 Sep 2026 02:37:36 +0000
Files and hashes: 1: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: 8wp+UX0eKC57lngDUIgSZuJvHJ5tDAZofYJHo8cFmpA=)
2: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: 1g+y0imkE46p3egXComeqIG0umuFfgQzJzzyy2lkq6g=)
3: 4DD4106B03003D9C5B51BF893631C8E467E07F65.crl (hash: BRmpXi8YVJpmxZzgVVyqWIAOHNbbAgHoqPB8ahzWMZE=)
4: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: vt8DYAXcs1pDLyawi9vIroRmMQYzGKkbfW81Knq/qWg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl
rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 02:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:25:9a:c9:c6:34:2d:1f:2a:18:1d:e2:58:d6:d3:ac:2a:07:cc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DD4106B03003D9C5B51BF893631C8E467E07F65
Validity
Not Before: Sep 22 02:24:36 2026 GMT
Not After : Sep 23 02:37:36 2026 GMT
Subject: CN=8150EDF0BCC68F2D54EB9BFD233D040F6C5D3E7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:7d:57:f2:79:13:df:01:cc:86:8b:25:6a:
3a:0f:77:07:3a:5e:21:e5:4e:c9:15:97:f3:a9:0b:
38:ec:93:56:16:b3:3a:4a:42:79:59:c7:96:8f:cd:
56:6e:d1:f8:d7:2f:30:5b:e9:ba:69:6b:b5:21:64:
af:bb:87:4d:5f:1d:e8:69:25:4e:c3:c2:96:05:1b:
98:94:98:fe:ba:fa:c4:03:13:53:86:95:82:1d:8e:
66:e7:48:f1:9d:ba:f2:77:bf:10:0e:ad:a8:98:f3:
2b:0a:39:d7:3e:7e:c4:98:59:e7:48:e0:3c:d5:06:
64:14:41:1a:f4:9d:b0:eb:46:2f:78:52:0c:2a:b7:
a9:bf:58:ca:ca:25:c1:e2:c8:0d:58:6e:42:a4:b7:
3a:0f:71:3e:8b:d7:f2:80:b9:4b:98:28:d9:d2:e4:
94:50:bd:f5:5d:2a:53:b3:32:b7:8e:8c:54:dc:c6:
63:a2:a0:26:80:1a:4f:91:44:2f:d5:f7:8a:b8:46:
86:e8:e2:7c:6f:db:44:b2:a7:93:1f:b8:aa:fc:51:
75:84:0d:9d:9d:d7:10:2c:d6:81:23:7d:6b:54:fd:
54:ec:2c:8c:ca:e5:15:0b:89:06:d6:bb:18:b4:ba:
61:4b:f7:dc:19:85:f8:1f:44:e3:5b:08:b6:f6:cc:
34:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:50:ED:F0:BC:C6:8F:2D:54:EB:9B:FD:23:3D:04:0F:6C:5D:3E:7C
X509v3 Authority Key Identifier:
keyid:4D:D4:10:6B:03:00:3D:9C:5B:51:BF:89:36:31:C8:E4:67:E0:7F:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DD4106B03003D9C5B51BF893631C8E467E07F65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/4DD4106B03003D9C5B51BF893631C8E467E07F65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fe:07:cd:5e:ad:11:29:a9:e0:83:4c:90:e4:26:50:82:fd:
31:1e:8a:9a:b2:9f:d0:13:49:02:48:8e:50:44:da:d1:c7:32:
b5:13:fc:e8:38:ff:2d:7c:cf:27:4a:ee:30:9f:af:66:4e:e0:
f7:95:9c:cf:31:13:d9:4e:95:68:a8:57:f2:f0:03:68:5b:1d:
7d:8e:c9:9b:f4:a1:19:48:0a:d9:b1:f1:5f:95:26:07:43:0e:
ec:17:ca:b7:72:29:9d:b4:d2:cf:0d:4f:70:da:92:59:20:1a:
97:39:f4:3c:c4:cc:4b:71:a6:ca:8f:1f:53:e5:be:e8:c9:a7:
92:a0:7e:69:22:c8:57:a8:a7:c9:6c:4b:d9:21:5a:83:aa:97:
0f:9b:c6:5c:45:46:f9:8e:2c:22:3b:d1:25:dc:e5:9c:7a:c1:
d6:c7:f5:4b:29:15:c2:ce:41:3b:4e:c6:20:3e:91:42:dc:f7:
ea:94:04:55:2a:7a:48:7c:00:45:b6:89:f3:c9:61:85:4d:be:
76:92:94:46:2a:6c:2f:07:32:f8:e9:ea:e4:e1:2e:97:e3:0c:
7d:71:a9:f1:03:9a:58:e1:38:64:03:36:66:ac:d9:24:db:70:
c7:c4:34:44:54:c5:03:eb:83:9d:0e:77:cd:58:5e:fd:4d:cb:
29:26:ec:0a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTyWaycY0LR8qGB3iWNbTrCoHzD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERENDEwNkIwMzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2
N0UwN0Y2NTAeFw0yNjA5MjIwMjI0MzZaFw0yNjA5MjMwMjM3MzZaMDMxMTAvBgNV
BAMTKDgxNTBFREYwQkNDNjhGMkQ1NEVCOUJGRDIzM0QwNDBGNkM1RDNFN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6lH1X8nkT3wHMhoslajoPdwc6
XiHlTskVl/OpCzjsk1YWszpKQnlZx5aPzVZu0fjXLzBb6bppa7UhZK+7h01fHehp
JU7DwpYFG5iUmP66+sQDE1OGlYIdjmbnSPGduvJ3vxAOraiY8ysKOdc+fsSYWedI
4DzVBmQUQRr0nbDrRi94Ugwqt6m/WMrKJcHiyA1YbkKktzoPcT6L1/KAuUuYKNnS
5JRQvfVdKlOzMreOjFTcxmOioCaAGk+RRC/V94q4Robo4nxv20Syp5MfuKr8UXWE
DZ2d1xAs1oEjfWtU/VTsLIzK5RULiQbWuxi0umFL99wZhfgfRONbCLb2zDSbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgVDt8LzGjy1U65v9Iz0ED2xdPnwwHwYDVR0j
BBgwFoAUTdQQawMAPZxbUb+JNjHI5Gfgf2UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWJkZTkzNmItNTNjZi00YjA4LWI1ZjctMmI5MGRlMjFmZTk0LzAvNERENDEwNkIw
MzAwM0Q5QzVCNTFCRjg5MzYzMUM4RTQ2N0UwN0Y2NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80REQ0MTA2QjAzMDAzRDlDNUI1MUJGODkzNjMxQzhFNDY3RTA3
RjY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1
ZjctMmI5MGRlMjFmZTk0LzAvNERENDEwNkIwMzAwM0Q5QzVCNTFCRjg5MzYzMUM4
RTQ2N0UwN0Y2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEb+B81erREpqeCDTJDkJlCC/TEeipqyn9AT
SQJIjlBE2tHHMrUT/Og4/y18zydK7jCfr2ZO4PeVnM8xE9lOlWioV/LwA2hbHX2O
yZv0oRlICtmx8V+VJgdDDuwXyrdyKZ200s8NT3DaklkgGpc59DzEzEtxpsqPH1Pl
vujJp5KgfmkiyFeop8lsS9khWoOqlw+bxlxFRvmOLCI70SXc5Zx6wdbH9UspFcLO
QTtOxiA+kULc9+qUBFUqekh8AEW2ifPJYYVNvnaSlEYqbC8HMvjp6uThLpfjDH1x
qfEDmljhOGQDNmas2STbcMfENERUxQPrg50Od81YXv1Nyykm7Ao=
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:58:02 2026 by rpki-client