
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft
File: C4E9D4469828724936CAE63A417C0DE2014F205A.mft (raw, json)
Hash identifier: xOnzaL0ZrNdD49DYDYr5eOAGzrc9Y4FHHt2fzO0xoEQ=
Subject key identifier: 41:78:A8:23:AA:F3:43:74:66:D8:19:24:70:71:22:74:37:08:81:C0
Authority key identifier: C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A
Certificate issuer: /CN=C4E9D4469828724936CAE63A417C0DE2014F205A
Certificate serial: 70677A7F0022D2617249D043E1AB9ED3945A57D1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 06:28:40 +0000
Manifest this update: Wed 29 Jul 2026 06:23:40 +0000
Manifest next update: Thu 30 Jul 2026 07:29:40 +0000
Files and hashes: 1: C4E9D4469828724936CAE63A417C0DE2014F205A.crl (hash: mDmNCo5sjG6p3j83cOSRAv8ohbS7XyYxbnhK5Pi8b98=)
2: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: n2rjzJ/zLgB675Rxossmph/fEyHX/dgt2ieO+QslQMw=)
3: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: O5O73bIVgP3Ny3ggR2VTr1FgLepLoRHQrtRQ7caTd/s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl
rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:67:7a:7f:00:22:d2:61:72:49:d0:43:e1:ab:9e:d3:94:5a:57:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4E9D4469828724936CAE63A417C0DE2014F205A
Validity
Not Before: Jul 29 06:23:40 2026 GMT
Not After : Jul 30 07:29:40 2026 GMT
Subject: CN=4178A823AAF3437466D8192470712274370881C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:6e:0a:80:9a:0c:3a:a2:9a:2c:4d:d1:b5:
d9:33:5c:3d:60:8a:44:c2:c1:2d:05:aa:0e:45:32:
f9:1b:b7:b8:00:06:ad:85:f1:16:ef:4f:6b:10:a6:
c9:48:4c:94:47:0a:1d:5b:66:3a:40:1b:c0:6b:49:
ed:01:78:df:c1:2e:78:6e:a2:7a:3b:09:78:4b:60:
7a:93:58:91:25:62:3e:cc:58:75:1a:6a:d2:44:88:
23:04:73:50:b9:84:3d:d8:1a:47:bb:79:6a:24:a2:
a7:2e:b4:fb:a4:de:72:6c:94:8f:8c:87:da:1b:b4:
14:f4:8d:4e:f4:70:a3:30:a6:08:b4:7c:3f:d5:fd:
da:b1:b2:32:10:21:31:75:90:5a:af:7b:cd:fe:78:
09:17:37:06:c0:0b:5b:cd:e8:ac:c1:01:e4:bf:10:
b6:25:69:aa:da:87:68:80:91:5f:4f:e8:66:59:a9:
dc:65:3a:c5:4c:0a:f9:49:86:b6:a9:5e:d3:14:56:
54:2f:f8:e0:6b:0d:0d:2b:48:ac:c3:15:3c:7c:32:
a5:14:e7:59:3b:94:9a:64:35:4c:21:6d:8b:fc:f4:
7c:09:71:06:9f:57:38:69:6b:56:25:77:c6:da:02:
a2:47:18:bc:96:65:9e:83:c7:69:80:86:00:f5:b5:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:78:A8:23:AA:F3:43:74:66:D8:19:24:70:71:22:74:37:08:81:C0
X509v3 Authority Key Identifier:
keyid:C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ea:f5:f9:d6:67:84:92:bb:b7:be:c9:72:73:86:29:dc:41:
60:99:7f:c7:c7:22:03:11:fe:a6:59:fd:54:0c:97:25:22:f0:
4d:40:ec:d4:84:5d:6d:39:02:e0:37:7f:b0:a0:72:82:ba:69:
10:db:04:1f:8e:87:b0:c5:1e:1e:f5:f3:05:b0:fd:1a:d2:60:
e6:53:c5:b7:f1:31:2b:63:c0:54:ae:ca:85:66:1a:47:f0:d5:
69:8a:84:fe:e4:57:53:42:88:a8:73:46:94:55:6b:c5:b0:64:
28:5d:e8:7e:09:3a:f6:6b:80:97:41:70:ae:49:17:b7:28:83:
ea:68:fa:e5:d6:ad:fa:02:d5:9d:56:a1:92:1d:ed:ef:90:6c:
3a:21:df:53:95:c9:45:3e:29:54:80:24:a5:3f:1b:c4:cc:6f:
41:4d:b3:e4:ea:4e:cd:07:21:5c:86:ec:9a:44:6b:cf:46:74:
8f:5a:28:f1:ec:8b:d4:6b:c3:f0:46:54:39:e6:56:87:bf:32:
f7:74:fb:6b:0c:90:5c:1f:17:20:9a:e9:0f:bc:a0:dc:6b:04:
ab:7f:90:56:2c:01:ca:98:1a:cd:69:4b:a2:4d:a2:8f:01:6c:
bb:26:fc:98:28:0a:d8:bd:e7:d7:b2:86:18:0e:d3:8a:d0:83:
d5:08:8e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:30:28 2026 by rpki-client