
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft
File: 4BD77983D98742985400276FF0F5959696EA7807.mft (raw, json)
Hash identifier: AihRuexK9poxC/066LoRVOCj3HJtg+Effc6su7hLPVk=
Subject key identifier: 76:DE:07:7F:62:EC:AC:B8:7D:56:76:79:CE:F6:24:90:5B:AB:1E:8B
Authority key identifier: 4B:D7:79:83:D9:87:42:98:54:00:27:6F:F0:F5:95:96:96:EA:78:07
Certificate issuer: /CN=4BD77983D98742985400276FF0F5959696EA7807
Certificate serial: 17102C1759D1308869D08DA02B34E6C78F810AB5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft
Manifest number: BD
Signing time: Sun 20 Sep 2026 06:50:33 +0000
Manifest this update: Sun 20 Sep 2026 06:45:33 +0000
Manifest next update: Mon 21 Sep 2026 09:58:33 +0000
Files and hashes: 1: 4BD77983D98742985400276FF0F5959696EA7807.crl (hash: FbB9TEUHW3yK0qFlei3g6yAJVx8J+gcWprphap+d6bo=)
2: 3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa (hash: 2ktJ+LGrBdyxqO+5Ni21bj0NM08xpyYMFhaaSWYusJY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.crl
rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 09:58:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:10:2c:17:59:d1:30:88:69:d0:8d:a0:2b:34:e6:c7:8f:81:0a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BD77983D98742985400276FF0F5959696EA7807
Validity
Not Before: Sep 20 06:45:33 2026 GMT
Not After : Sep 21 09:58:33 2026 GMT
Subject: CN=76DE077F62ECACB87D567679CEF624905BAB1E8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:2e:a1:4a:51:89:fb:db:e6:65:3a:e8:b4:
79:a8:4b:3c:97:8d:18:f5:91:f9:09:3f:2b:6b:96:
c5:76:0f:59:dd:96:28:9c:e1:38:ee:5f:b5:b7:bc:
f5:d3:88:ba:a6:eb:39:04:60:e9:13:5e:1d:13:49:
d1:66:44:18:6b:87:ff:88:fe:6b:7e:f8:24:ad:48:
e1:ce:99:fe:bb:a1:52:5e:5a:30:01:49:2d:16:18:
8a:73:77:e7:27:4c:57:ef:4a:11:fa:ae:ab:3d:c1:
0f:2a:eb:74:65:0a:ad:4a:f4:ee:df:2f:6f:ba:41:
aa:56:39:26:91:2e:3c:50:3b:db:91:ff:b9:b8:3f:
35:ba:8e:2b:2d:8e:1a:1f:30:96:8c:32:68:6b:9f:
31:98:da:aa:4b:14:d9:13:34:66:05:fe:3b:6e:84:
32:15:14:5b:2a:90:ad:6b:54:ed:78:34:d9:a3:c2:
ec:1c:0b:ef:09:15:7b:e4:a0:ef:84:f3:76:df:f6:
9f:10:55:43:34:2c:1d:a6:af:79:b9:45:11:58:89:
71:27:7a:59:c1:ca:aa:f7:12:63:ff:ba:77:1f:12:
82:32:63:96:49:7a:87:7b:c4:e5:e5:5a:aa:a3:29:
45:b7:01:c3:78:0f:ae:c7:a4:cd:44:ad:1f:37:bb:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DE:07:7F:62:EC:AC:B8:7D:56:76:79:CE:F6:24:90:5B:AB:1E:8B
X509v3 Authority Key Identifier:
keyid:4B:D7:79:83:D9:87:42:98:54:00:27:6F:F0:F5:95:96:96:EA:78:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:89:92:10:11:27:7b:3b:6e:1c:ef:f5:a3:6c:be:4b:7e:67:
17:d8:41:e0:c7:aa:11:62:28:e0:ef:c7:3b:28:40:63:5c:11:
e1:c2:f5:c9:33:5e:46:e7:d3:c0:7d:5a:b9:50:d0:22:6a:b1:
fd:95:80:1a:a9:d2:0f:35:d3:28:91:6d:b9:0c:a9:a8:fa:41:
a5:c2:19:00:f5:94:27:2a:df:c7:be:d6:50:cf:33:bb:66:89:
ed:d7:3f:27:24:cf:e3:f1:19:1d:22:13:ca:a8:d7:e3:0d:ff:
fd:f8:d5:bf:ab:b3:b8:e7:1a:ac:b4:f7:22:97:9c:45:b4:14:
a8:b5:96:5d:ff:35:bc:4c:25:93:f9:77:16:54:1a:51:b3:dc:
8d:b3:2c:8a:4c:eb:fb:31:aa:6b:be:43:76:52:62:5e:a7:c0:
b3:a9:77:6b:74:0e:f2:41:74:5f:e0:87:4e:a3:4b:78:03:3b:
27:39:de:38:58:cc:c1:4c:d1:de:7a:b2:1c:e2:66:60:6b:88:
06:85:b5:2a:8d:cf:54:a8:17:1a:de:e9:f3:26:62:e2:ac:48:
48:e5:aa:de:46:66:1f:d4:ca:80:2e:f0:4a:b6:8e:13:86:62:
b5:df:7c:52:76:4d:4b:96:a5:f5:84:2f:4c:a6:71:13:e9:e0:
15:fd:7d:39
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFxAsF1nRMIhp0I2gKzTmx4+BCrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJENzc5ODNEOTg3NDI5ODU0MDAyNzZGRjBGNTk1OTY5
NkVBNzgwNzAeFw0yNjA5MjAwNjQ1MzNaFw0yNjA5MjEwOTU4MzNaMDMxMTAvBgNV
BAMTKDc2REUwNzdGNjJFQ0FDQjg3RDU2NzY3OUNFRjYyNDkwNUJBQjFFOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VC6hSlGJ+9vmZTrotHmoSzyX
jRj1kfkJPytrlsV2D1ndliic4TjuX7W3vPXTiLqm6zkEYOkTXh0TSdFmRBhrh/+I
/mt++CStSOHOmf67oVJeWjABSS0WGIpzd+cnTFfvShH6rqs9wQ8q63RlCq1K9O7f
L2+6QapWOSaRLjxQO9uR/7m4PzW6jistjhofMJaMMmhrnzGY2qpLFNkTNGYF/jtu
hDIVFFsqkK1rVO14NNmjwuwcC+8JFXvkoO+E83bf9p8QVUM0LB2mr3m5RRFYiXEn
elnByqr3EmP/uncfEoIyY5ZJeod7xOXlWqqjKUW3AcN4D67HpM1ErR83u/fxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdt4Hf2LsrLh9VnZ5zvYkkFurHoswHwYDVR0j
BBgwFoAUS9d5g9mHQphUACdv8PWVlpbqeAcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODcxYWRhOWUtZTJhOS00MDBlLThkZmYtOWJlNDgxYWJhNTgzLzAvNEJENzc5ODNE
OTg3NDI5ODU0MDAyNzZGRjBGNTk1OTY5NkVBNzgwNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QkQ3Nzk4M0Q5ODc0Mjk4NTQwMDI3NkZGMEY1OTU5Njk2RUE3
ODA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODcxYWRhOWUtZTJhOS00MDBlLThk
ZmYtOWJlNDgxYWJhNTgzLzAvNEJENzc5ODNEOTg3NDI5ODU0MDAyNzZGRjBGNTk1
OTY5NkVBNzgwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBANWJkhARJ3s7bhzv9aNsvkt+ZxfYQeDHqhFi
KODvxzsoQGNcEeHC9ckzXkbn08B9WrlQ0CJqsf2VgBqp0g810yiRbbkMqaj6QaXC
GQD1lCcq38e+1lDPM7tmie3XPyckz+PxGR0iE8qo1+MN//341b+rs7jnGqy09yKX
nEW0FKi1ll3/NbxMJZP5dxZUGlGz3I2zLIpM6/sxqmu+Q3ZSYl6nwLOpd2t0DvJB
dF/gh06jS3gDOyc53jhYzMFM0d56shziZmBriAaFtSqNz1SoFxre6fMmYuKsSEjl
qt5GZh/UyoAu8Eq2jhOGYrXffFJ2TUuWpfWEL0ymcRPp4BX9fTk=
-----END CERTIFICATE-----
Generated at Mon Sep 21 01:15:04 2026 by rpki-client