
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft
File: 4C378F3C5E9E84D98D0229475208B1E382584588.mft (raw, json)
Hash identifier: wPcW6b0uEt0mmIS3dZX8HZ+fwQ0VlfHshCrK8mLQgc8=
Subject key identifier: 75:B5:B0:65:4B:BE:15:A7:BC:2E:4D:43:E2:55:E6:4A:64:26:3B:B0
Authority key identifier: 4C:37:8F:3C:5E:9E:84:D9:8D:02:29:47:52:08:B1:E3:82:58:45:88
Certificate issuer: /CN=4C378F3C5E9E84D98D0229475208B1E382584588
Certificate serial: 5C5856F1B022A9EE35F5E4C1C2CD0F00C90F1C45
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C378F3C5E9E84D98D0229475208B1E382584588.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft
Manifest number: C4
Signing time: Sat 26 Sep 2026 10:37:56 +0000
Manifest this update: Sat 26 Sep 2026 10:32:56 +0000
Manifest next update: Sun 27 Sep 2026 12:56:56 +0000
Files and hashes: 1: 4C378F3C5E9E84D98D0229475208B1E382584588.crl (hash: tjYgnfEdWpBb3tG3Y6pkplXZPtdjVvJ+t8Wh2H7ggzc=)
2: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: ABkgOJWd2fNKHCH6GAwk3bSoWGS8bHMY1ISOxz9j9j0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.crl
rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C378F3C5E9E84D98D0229475208B1E382584588.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 12:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:58:56:f1:b0:22:a9:ee:35:f5:e4:c1:c2:cd:0f:00:c9:0f:1c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C378F3C5E9E84D98D0229475208B1E382584588
Validity
Not Before: Sep 26 10:32:56 2026 GMT
Not After : Sep 27 12:56:56 2026 GMT
Subject: CN=75B5B0654BBE15A7BC2E4D43E255E64A64263BB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:b0:2b:f7:6c:21:5b:cc:62:bb:47:41:91:
fb:01:ac:cd:ac:44:6a:4b:b9:7e:d2:e1:b4:c9:17:
8a:9e:1a:3a:dc:01:02:7a:52:15:f5:a1:48:80:ab:
d3:ad:76:c0:64:01:73:14:58:aa:9b:c2:1a:fa:8b:
a2:9c:a7:ad:a9:a9:2a:bb:9e:b4:0a:1d:29:c7:99:
85:7d:78:b0:15:2b:9c:b2:ba:7c:7f:00:77:02:2c:
6d:32:84:58:d7:36:29:9b:0c:45:56:cf:78:9c:3c:
11:bf:c5:4e:94:cd:8c:7d:b3:63:80:4e:30:af:ce:
69:ac:c9:f7:c5:7c:81:38:8d:df:1c:86:fc:c4:a4:
40:c5:0f:d5:50:89:28:06:a2:5f:9a:18:23:b3:72:
41:95:de:4f:d3:68:fb:4c:1c:16:fa:65:6c:e4:1f:
de:00:dc:7d:40:71:20:2f:7a:c0:7c:9f:8c:8b:fa:
5e:8a:8d:46:e9:19:5c:b4:ac:f0:5c:45:ce:2d:85:
e6:ae:d6:af:d8:71:89:8b:d5:4b:57:2a:34:af:ca:
66:fa:12:19:7e:65:54:3d:d7:7e:c0:48:6f:ad:78:
71:26:6f:d0:6e:ad:81:8c:8a:f5:13:48:19:95:08:
8a:74:e6:3e:13:61:61:eb:28:25:1d:56:78:f1:9b:
0d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B5:B0:65:4B:BE:15:A7:BC:2E:4D:43:E2:55:E6:4A:64:26:3B:B0
X509v3 Authority Key Identifier:
keyid:4C:37:8F:3C:5E:9E:84:D9:8D:02:29:47:52:08:B1:E3:82:58:45:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C378F3C5E9E84D98D0229475208B1E382584588.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:00:19:34:1b:56:04:2b:80:fb:d1:38:1a:59:65:8a:3e:60:
f4:48:d4:98:2f:18:c8:a1:6c:7b:de:73:56:f6:02:31:21:55:
59:c3:74:dc:0a:f4:f4:53:18:e4:9d:16:b6:81:23:7a:42:4e:
7d:b5:cd:d7:db:8e:a7:f8:1a:5a:a3:1e:3e:31:1a:ec:69:4c:
04:f1:8e:e5:6d:d0:75:dd:94:dc:12:73:e0:ae:7d:b7:ab:cb:
c4:60:23:ad:0b:2b:94:9c:5c:84:89:bc:b1:8d:f3:57:94:39:
c1:5d:8d:8a:6b:5f:86:39:75:65:72:a4:cf:86:34:d7:87:df:
95:63:eb:a3:aa:05:b8:ad:b3:d6:0a:14:4d:cf:1c:a7:bb:0b:
b6:14:96:09:41:28:e6:e9:19:45:b1:67:31:83:ea:c6:da:60:
6a:12:a8:7d:b8:61:cf:03:2e:d4:3b:69:5f:b5:6e:ea:8b:59:
2c:fd:58:7e:d4:30:51:13:37:15:ed:6e:0b:d6:b9:04:27:74:
71:b6:c5:1e:ac:48:a6:67:98:b4:d7:f2:17:19:bc:d3:7c:1a:
31:14:5c:05:bd:c9:d9:7a:7f:5e:73:5f:09:be:99:0e:6c:60:
2a:1e:ac:97:20:28:f9:84:5e:c8:52:c2:77:94:5e:69:89:9c:
2b:9d:e0:a1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXFhW8bAiqe419eTBws0PAMkPHEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMzNzhGM0M1RTlFODREOThEMDIyOTQ3NTIwOEIxRTM4
MjU4NDU4ODAeFw0yNjA5MjYxMDMyNTZaFw0yNjA5MjcxMjU2NTZaMDMxMTAvBgNV
BAMTKDc1QjVCMDY1NEJCRTE1QTdCQzJFNEQ0M0UyNTVFNjRBNjQyNjNCQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw6rAr92whW8xiu0dBkfsBrM2s
RGpLuX7S4bTJF4qeGjrcAQJ6UhX1oUiAq9OtdsBkAXMUWKqbwhr6i6Kcp62pqSq7
nrQKHSnHmYV9eLAVK5yyunx/AHcCLG0yhFjXNimbDEVWz3icPBG/xU6UzYx9s2OA
TjCvzmmsyffFfIE4jd8chvzEpEDFD9VQiSgGol+aGCOzckGV3k/TaPtMHBb6ZWzk
H94A3H1AcSAvesB8n4yL+l6KjUbpGVy0rPBcRc4theau1q/YcYmL1UtXKjSvymb6
Ehl+ZVQ9137ASG+teHEmb9BurYGMivUTSBmVCIp05j4TYWHrKCUdVnjxmw1fAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdbWwZUu+Fae8Lk1D4lXmSmQmO7AwHwYDVR0j
BBgwFoAUTDePPF6ehNmNAilHUgix44JYRYgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmU5YjBiYWQtNjZiOS00ZjI4LWE3YzUtZTlhOWZlMTIwYWQ3LzAvNEMzNzhGM0M1
RTlFODREOThEMDIyOTQ3NTIwOEIxRTM4MjU4NDU4OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QzM3OEYzQzVFOUU4NEQ5OEQwMjI5NDc1MjA4QjFFMzgyNTg0
NTg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3
YzUtZTlhOWZlMTIwYWQ3LzAvNEMzNzhGM0M1RTlFODREOThEMDIyOTQ3NTIwOEIx
RTM4MjU4NDU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADsAGTQbVgQrgPvROBpZZYo+YPRI1JgvGMih
bHvec1b2AjEhVVnDdNwK9PRTGOSdFraBI3pCTn21zdfbjqf4GlqjHj4xGuxpTATx
juVt0HXdlNwSc+Cufbery8RgI60LK5ScXISJvLGN81eUOcFdjYprX4Y5dWVypM+G
NNeH35Vj66OqBbits9YKFE3PHKe7C7YUlglBKObpGUWxZzGD6sbaYGoSqH24Yc8D
LtQ7aV+1buqLWSz9WH7UMFETNxXtbgvWuQQndHG2xR6sSKZnmLTX8hcZvNN8GjEU
XAW9ydl6f15zXwm+mQ5sYCoerJcgKPmEXshSwneUXmmJnCud4KE=
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:47:05 2026 by rpki-client