
$ rpki-client -vvf rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
File: 4493CC2E574126EF2608CAE173DD92103E76A98C.mft (raw, json)
Hash identifier: 8LZmeemaU2UsCcJidC4eG4U5lu2O+XWSIj8gw+AZCt8=
Subject key identifier: BA:8B:D2:54:C1:31:BE:D1:64:52:C2:89:1D:EC:29:8E:4C:51:71:A1
Authority key identifier: 44:93:CC:2E:57:41:26:EF:26:08:CA:E1:73:DD:92:10:3E:76:A9:8C
Certificate issuer: /CN=4493CC2E574126EF2608CAE173DD92103E76A98C
Certificate serial: 716F4346D591D689DF6A77EF68A0198F48D767A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 22:50:02 +0000
Manifest this update: Tue 28 Jul 2026 22:45:02 +0000
Manifest next update: Thu 30 Jul 2026 02:28:02 +0000
Files and hashes: 1: 4493CC2E574126EF2608CAE173DD92103E76A98C.crl (hash: G+4FQtlaEV+Y31DKBhZmt61F8qDRD6HSmfWe0S/N5BE=)
2: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: M2aI0TJnAz0O76NPtC1fdB1sxAIiTB3vENA8aunOOWY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.crl
rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:6f:43:46:d5:91:d6:89:df:6a:77:ef:68:a0:19:8f:48:d7:67:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4493CC2E574126EF2608CAE173DD92103E76A98C
Validity
Not Before: Jul 28 22:45:02 2026 GMT
Not After : Jul 30 02:28:02 2026 GMT
Subject: CN=BA8BD254C131BED16452C2891DEC298E4C5171A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:3b:ee:e4:af:21:b7:6a:29:33:76:49:ea:
ce:f0:0c:c3:62:ce:a0:b0:d2:e3:9d:53:11:39:22:
31:64:6b:fa:70:e3:ce:42:1f:52:ef:d7:0b:bb:8f:
78:ab:98:d0:5d:ce:a0:ac:50:cf:e3:a7:e1:77:1d:
6e:e7:9c:25:54:11:6a:2c:d8:fd:75:a6:aa:3e:14:
d3:30:ec:b6:ac:1b:c5:9f:a3:62:6d:a7:29:fc:99:
15:ab:dd:f7:65:ab:e5:4f:5f:9f:80:e0:11:6e:79:
f0:e8:d6:f5:47:29:d1:50:da:8e:24:54:85:cf:ba:
54:57:cb:21:95:8a:b5:98:4c:24:81:19:3f:20:ff:
55:99:39:dc:8f:b3:28:33:6d:b3:87:da:e3:80:37:
02:ea:8e:78:dc:f6:fb:ac:80:6c:91:45:92:1d:8d:
72:f0:aa:3e:29:4d:90:63:be:15:6a:2a:69:ef:9d:
bb:cb:6b:bb:93:3a:4c:ad:10:0c:b7:e5:b9:11:db:
a4:db:a1:39:e3:98:99:cd:43:4a:49:02:a7:43:c0:
a7:2f:98:0b:0f:fa:7a:15:68:e7:0c:aa:49:db:7b:
38:db:ef:82:86:9d:72:08:2a:be:26:17:0d:a5:31:
f7:10:01:80:44:c8:85:4b:18:58:20:6b:66:cd:a8:
2d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8B:D2:54:C1:31:BE:D1:64:52:C2:89:1D:EC:29:8E:4C:51:71:A1
X509v3 Authority Key Identifier:
keyid:44:93:CC:2E:57:41:26:EF:26:08:CA:E1:73:DD:92:10:3E:76:A9:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3a:27:39:ce:5c:ef:53:67:47:8f:1e:54:9b:09:3e:4c:f0:
3e:11:e8:78:b0:ea:31:6a:a5:9e:06:17:48:c0:f5:d2:ea:2f:
fe:bb:cf:50:50:9f:bc:82:bb:09:b6:ae:c8:39:a1:53:f0:af:
e9:51:fb:1f:02:bb:dc:85:25:cd:23:3b:7b:34:19:c9:aa:9f:
d1:e9:19:c1:0c:ef:34:a3:37:61:ca:cf:58:b6:fe:da:31:5a:
eb:6e:32:9a:b5:6e:c4:c3:e9:91:e4:10:53:7a:2a:4b:6c:07:
26:f0:7f:62:7a:fa:7e:65:14:e8:f0:54:d0:3e:be:a5:af:57:
06:71:91:ea:53:41:08:5e:2e:29:77:56:c8:da:b3:5b:14:3c:
04:66:f0:57:f7:b5:ba:3b:57:de:29:2e:ca:08:a7:f6:a3:28:
16:ee:74:ef:91:40:27:dd:9e:cf:a1:05:7e:1d:da:3f:af:d7:
0a:a0:f8:07:c1:24:18:cf:92:85:f5:04:1f:68:0d:91:4c:a7:
d0:98:ce:f4:17:bd:c3:17:5b:f1:ee:af:54:8d:d7:f2:3a:2a:
4d:08:d6:92:e3:ef:88:4a:52:31:74:6b:74:a6:7c:35:7d:81:
c5:b2:c7:10:38:4e:f1:05:cc:3b:4d:53:9d:5a:71:06:13:99:
f1:7a:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:15:48 2026 by rpki-client