
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
File: A479BE8A2AB736997799C5EDD19DCC1E14080951.mft (raw, json)
Hash identifier: lUQaAKnjs9w506uXLPa7njQodxeKbw2QBIjTXgayyUA=
Subject key identifier: 37:85:D1:63:18:1C:B8:8A:0E:4D:B4:17:EE:F0:84:2E:64:73:1F:B5
Authority key identifier: A4:79:BE:8A:2A:B7:36:99:77:99:C5:ED:D1:9D:CC:1E:14:08:09:51
Certificate issuer: /CN=A479BE8A2AB736997799C5EDD19DCC1E14080951
Certificate serial: 4A25D480E4841FC9D54A1FF37F7CBB38C01C821F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
Manifest number: BC
Signing time: Sun 20 Sep 2026 21:13:16 +0000
Manifest this update: Sun 20 Sep 2026 21:08:16 +0000
Manifest next update: Tue 22 Sep 2026 01:08:16 +0000
Files and hashes: 1: 3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa (hash: x5ipZlEC8pQiu8/sOKh5VKkOUz8rWzbz+F73T1RcjPM=)
2: 3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa (hash: OwuNAyMCdQqzVBOVJzr7kPThUt6VdOd9CvAXA9Sod0M=)
3: 3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa (hash: JhxXluduCB+TXKw1xbSPk6SI13kYg9YOWrV+vNWa+co=)
4: A479BE8A2AB736997799C5EDD19DCC1E14080951.crl (hash: bS+E3aIV7KIIgogpH/iHWv4EoppyPQJeVsgCzLU0lHA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.crl
rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 17:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:25:d4:80:e4:84:1f:c9:d5:4a:1f:f3:7f:7c:bb:38:c0:1c:82:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A479BE8A2AB736997799C5EDD19DCC1E14080951
Validity
Not Before: Sep 20 21:08:16 2026 GMT
Not After : Sep 22 01:08:16 2026 GMT
Subject: CN=3785D163181CB88A0E4DB417EEF0842E64731FB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:95:3a:47:f4:44:6c:af:0b:67:37:8e:3b:03:
53:d6:c9:6d:44:05:20:76:18:1d:51:59:6b:0d:d5:
49:63:a8:13:15:63:e3:4e:d0:a7:d2:b2:45:5e:98:
ab:58:75:56:5a:cc:56:3c:f3:08:22:49:63:82:d0:
61:5d:27:21:d3:93:55:97:da:6e:88:1c:f4:ad:fb:
b8:06:c4:79:03:05:47:15:11:47:ab:4a:57:8e:6e:
9c:d2:7a:14:4b:13:d5:3e:ec:43:95:d9:94:98:c1:
6a:cf:b6:86:f9:70:03:54:a9:1e:9a:df:a0:58:53:
82:7e:b7:60:e3:03:68:64:9c:98:b6:f9:fa:74:5a:
87:11:6f:62:df:59:d6:74:3f:3b:73:f9:c4:d4:91:
4e:3f:b1:0b:61:43:95:18:3d:bb:89:bc:56:73:da:
b0:a5:10:7d:55:ca:a4:a6:36:af:5d:8c:94:17:30:
a7:67:dd:2a:39:32:cc:c1:27:4b:78:4b:89:2c:c2:
5a:a5:e6:07:15:b8:af:c7:49:b6:55:e8:99:70:58:
e4:82:d2:96:7b:08:c1:10:89:55:3c:f7:f9:0e:14:
55:1a:c3:49:a3:0b:21:8b:b7:df:7f:e3:3b:b3:5f:
ae:12:05:dc:15:55:2f:f4:88:8c:88:d0:ca:10:de:
0a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:85:D1:63:18:1C:B8:8A:0E:4D:B4:17:EE:F0:84:2E:64:73:1F:B5
X509v3 Authority Key Identifier:
keyid:A4:79:BE:8A:2A:B7:36:99:77:99:C5:ED:D1:9D:CC:1E:14:08:09:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9d:94:f4:48:38:4f:70:fb:e7:ed:40:a0:04:20:6a:37:e1:
4d:c9:2e:b3:d7:60:17:cd:73:96:e0:ea:c4:f9:f6:8e:b9:df:
09:9f:3c:f6:ae:4e:5a:ae:16:d7:3e:42:09:16:8f:14:c3:5f:
23:f4:c1:e1:f2:46:92:2b:a2:0d:a7:86:95:a8:48:74:18:de:
3f:20:48:79:d8:00:3c:1e:2e:36:5e:4d:99:a8:e1:d4:ae:1e:
c7:21:26:d6:a9:43:04:fb:c1:09:71:c5:ef:1a:c3:30:13:e6:
54:28:0f:25:2b:d6:46:8b:b6:c2:ed:be:91:e0:1f:d3:75:ab:
e7:e6:84:7b:16:0d:15:34:c7:a7:21:9d:8f:8c:4e:2c:a9:b9:
3a:f8:0d:6c:75:c3:2e:72:16:a8:20:d2:4c:4f:25:48:74:b1:
84:6a:1e:4a:2b:3b:5d:ab:28:71:6b:07:b2:1a:59:9b:b4:8c:
04:18:42:25:d9:da:d3:a8:60:f5:29:6d:5a:77:78:e5:0d:10:
59:c0:63:96:26:96:86:8b:30:55:ff:8c:c3:cd:7b:42:c4:a1:
d5:f5:33:33:e8:f0:95:f7:59:d0:6c:38:2b:af:e4:1f:17:45:
20:d5:db:19:c4:3f:62:65:34:b6:5f:03:42:32:f6:16:4e:07:
66:60:c1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:15:30 2026 by rpki-client