
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
File: 04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft (raw, json)
Hash identifier: K2Nbh18yt69qFCtdM8HutNQkswHW+ynqRASgiELgCYE=
Subject key identifier: 6C:93:B5:36:76:8F:52:E3:D4:7B:53:36:82:F3:3B:73:C3:6F:DC:CE
Authority key identifier: 04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93
Certificate issuer: /CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
Certificate serial: 1D41BB4F6FEC4824EBDDC8568CA54C108141D862
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
Manifest number: BC
Signing time: Mon 21 Sep 2026 01:07:53 +0000
Manifest this update: Mon 21 Sep 2026 01:02:53 +0000
Manifest next update: Tue 22 Sep 2026 04:58:53 +0000
Files and hashes: 1: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: D63R0HJY3dfFSWeAvX/hnIAUP8j3QRAbibvDX3rchmw=)
2: 04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl (hash: qlLNEEtkAyfaWyl3LOLXvRZ/b4kDMqY5X6qFXn8DqiM=)
3: 323430313a316430303a3a2f33322d3438203d3e203338353035.roa (hash: 6BMdJfjQOk6ZMP+r3PWXA1452jn4jTz5h082fXgG9S4=)
4: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: HsxEHeytaLeXbzMYkGNZ4CxQC7x6cG09R70sugNWXM0=)
5: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: mnaX8OyQaRRI+TIyOqMa6qm7Y6uLOjvzrF8R5k5MsjU=)
6: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: +N9+uIvrbV+jDpFQEoLWVMjE7Tiq4ZoJyUrk8aQRIxU=)
7: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: E7icouKmlM2nRKVKG7S5JwzSzIgKbeMao7gLF/MZ7HU=)
8: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: FB0gJNbI9gb2zm9vAMp0QwCkUB/Jt+h+ezAWp0ZQAY4=)
9: 3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa (hash: DkvTwpRqRkCZlooRpiKY2+Wy5hBTCQFkxeE1RiY6Adw=)
10: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: X3p+VR9fHu2hyTBK0FsVrH6VXDfYDH8j4Zpx8G4MzCs=)
11: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: U8aX+Se6czCWSw8AT++C8Q2LboeUeYibiDJAjvnWwyg=)
12: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: oVIkdyLyFS+O6KZi8z7bLz7e36SBDG2DA+r6DHbMRLY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl
rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 04:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:41:bb:4f:6f:ec:48:24:eb:dd:c8:56:8c:a5:4c:10:81:41:d8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04C8EF6F5260FDA06661D9E95304572B8E7C4993
Validity
Not Before: Sep 21 01:02:53 2026 GMT
Not After : Sep 22 04:58:53 2026 GMT
Subject: CN=6C93B536768F52E3D47B533682F33B73C36FDCCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:db:52:8e:86:1c:f5:86:da:a3:bb:b8:99:
ea:c3:62:72:01:c4:57:fe:d4:79:cb:9c:f3:2b:2d:
f5:da:55:8a:0c:c7:86:0e:72:17:5a:40:bb:08:c6:
d8:57:ba:30:af:06:12:df:fc:6e:0b:70:47:2c:8d:
64:57:ce:14:60:2b:d3:d5:74:99:10:fc:cc:17:25:
11:fe:f8:d9:77:a0:a4:4f:b3:b6:fe:da:0a:7d:72:
19:c8:d8:54:bc:6d:09:f6:b0:69:06:25:6c:17:fd:
4c:7d:06:3f:ec:7b:24:8c:df:6c:31:3e:db:39:21:
e5:80:2e:19:53:2a:50:ab:fa:16:1d:a8:b5:10:ed:
24:1f:71:9c:1a:50:f0:53:8c:e6:e4:8e:67:81:67:
2c:c1:bc:b2:17:c5:07:48:36:74:9f:0f:06:6c:e0:
cc:7e:df:cd:8b:59:86:0e:c6:e5:ed:d8:b4:d4:82:
f6:f4:64:b6:f6:b4:73:75:c7:2d:fd:b9:37:0a:a6:
fd:83:e1:5e:d9:e0:2a:9c:68:b9:aa:ea:53:d6:d4:
61:73:12:1c:18:f1:c0:62:19:8a:52:38:37:18:6e:
b7:4f:84:13:6d:cf:e2:0a:d2:39:65:e1:9c:b0:bf:
9b:5d:8a:ee:ca:ab:db:2f:eb:a0:eb:75:4f:a4:26:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:93:B5:36:76:8F:52:E3:D4:7B:53:36:82:F3:3B:73:C3:6F:DC:CE
X509v3 Authority Key Identifier:
keyid:04:C8:EF:6F:52:60:FD:A0:66:61:D9:E9:53:04:57:2B:8E:7C:49:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04C8EF6F5260FDA06661D9E95304572B8E7C4993.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/04C8EF6F5260FDA06661D9E95304572B8E7C4993.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:40:5d:67:b8:f2:4d:e0:05:91:34:99:e2:5d:19:89:4f:a0:
5f:06:04:58:4a:89:97:1a:a4:d2:f2:bb:ba:44:e9:af:f2:85:
b9:6b:91:cb:33:bc:68:24:00:06:d2:b0:98:67:36:3b:8e:66:
71:3b:be:91:de:ac:46:c3:e8:9a:e4:c3:e3:0b:3c:6f:b3:39:
2d:c8:ac:40:44:b4:a8:83:f0:bf:68:ed:30:13:e6:21:ec:c8:
0c:a8:17:ee:e9:f7:71:02:c1:d8:bd:00:20:a4:d4:56:78:ab:
5a:2e:ab:39:02:89:f0:f8:c8:66:99:8b:87:20:55:55:69:49:
4e:22:cb:ca:1b:9e:ea:73:45:8e:31:17:f7:eb:20:70:83:37:
71:f7:09:ff:0a:d0:4c:97:92:1d:f1:e0:48:23:5c:96:96:a6:
80:14:cd:39:b1:06:71:75:87:5c:cb:24:48:49:96:09:23:73:
6f:81:1a:1f:4d:38:47:6f:b2:9f:ab:98:2c:aa:19:6d:12:da:
48:3e:f6:7b:20:b8:68:be:de:af:91:f6:c3:28:58:8b:bb:b2:
32:f6:3a:b1:7e:82:7f:e5:ca:20:b9:c7:02:0d:8f:1a:b7:b3:
bb:95:88:f3:37:e8:e6:33:5e:1e:0d:a7:01:b0:29:ba:69:1c:
a1:cd:c6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:40:40 2026 by rpki-client