
$ rpki-client -vvf rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
File: 449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft (raw, json)
Hash identifier: QvR+VDB8IkOTfwZRTZG1JRSYWU5muUW9/wesknQnEP4=
Subject key identifier: A2:62:5A:E5:C7:DD:34:56:96:0F:9F:2B:EF:43:AB:B9:AE:84:A9:EC
Authority key identifier: 44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B
Certificate issuer: /CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B
Certificate serial: 3BBD6CC9C164D8D71A1420A987591736D0F69D44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 17:53:47 +0000
Manifest this update: Tue 28 Jul 2026 17:48:47 +0000
Manifest next update: Wed 29 Jul 2026 21:18:47 +0000
Files and hashes: 1: 449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl (hash: XZfcW1nv7SMnHmIUJ60lEmf7z7UV9vlxhR3g1gXNhnU=)
2: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: 4fUkU+nbH3X0YWVA/nyzT1vHqWQSMJDAjWYPAHB9Lcc=)
3: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: d+pQREUWb58vXjRmKWwC44imrF7e8FC0pHZi7c2qThU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl
rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:bd:6c:c9:c1:64:d8:d7:1a:14:20:a9:87:59:17:36:d0:f6:9d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B
Validity
Not Before: Jul 28 17:48:47 2026 GMT
Not After : Jul 29 21:18:47 2026 GMT
Subject: CN=A2625AE5C7DD3456960F9F2BEF43ABB9AE84A9EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:20:90:2a:4e:d7:06:77:a0:32:50:c1:2d:
f1:f4:c6:4b:63:49:3f:61:9e:4b:96:90:9a:87:23:
b8:d1:7a:62:58:b5:b8:77:71:27:db:0b:62:30:f8:
ac:0b:34:28:de:f6:87:f0:91:d8:b8:44:69:bb:86:
f2:d5:0f:08:93:09:8b:ec:63:a1:59:a6:d9:96:9b:
18:6c:b2:ff:51:c2:dd:3e:52:6f:24:83:97:1a:94:
88:f1:c8:f6:83:4a:55:af:bc:82:06:86:48:d2:c9:
d3:a1:29:e7:85:3a:1c:0d:e8:e8:1e:e8:39:1a:02:
b6:01:3f:ee:9f:ef:04:f7:18:de:de:a1:9b:57:68:
ac:82:fe:3b:73:31:cc:d9:a6:2c:a8:ef:99:73:56:
00:c0:39:ff:74:e0:b8:75:e3:c0:63:6f:8d:43:a8:
16:cc:24:8f:ba:8c:63:81:e6:b2:64:f7:d8:e0:bb:
b0:43:d5:a7:cb:a5:c8:2d:9f:66:87:56:14:e6:47:
2f:46:df:fc:7a:5e:f9:9d:d1:fa:3e:a8:65:1c:5a:
db:20:79:22:05:07:84:e0:61:f8:48:ca:49:a6:78:
bd:27:93:10:4e:86:64:16:7a:92:c8:ea:be:08:fb:
e2:bf:fc:36:8d:e8:27:8c:40:f2:10:9b:f7:8a:51:
54:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:62:5A:E5:C7:DD:34:56:96:0F:9F:2B:EF:43:AB:B9:AE:84:A9:EC
X509v3 Authority Key Identifier:
keyid:44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8d:a6:5f:cd:62:01:c3:84:e8:5b:b6:6d:db:7f:df:d8:7d:
fa:12:34:13:09:d0:e7:37:b4:39:49:13:04:e1:c7:15:8a:6b:
c7:88:ba:21:ff:8f:90:fb:33:30:0a:65:e9:d2:e5:36:22:cf:
49:3b:08:bd:f8:c2:86:91:af:3d:0c:39:45:a6:99:09:73:a2:
ab:08:8c:22:d8:12:fa:2b:05:e9:e7:e3:19:1b:ea:ec:f0:0a:
50:e2:4c:37:0e:4a:38:7c:bf:25:fa:de:7a:c6:a5:da:40:c6:
b8:ad:2c:3e:5c:b9:64:52:52:fc:2e:c3:d3:18:3f:0b:33:1c:
a2:85:af:fe:60:1e:91:11:65:34:21:1d:2d:c0:56:19:c2:93:
42:66:6b:98:2f:74:32:99:52:70:c9:4b:b9:a2:f9:ce:e8:07:
cf:dc:6f:e6:56:f0:cc:60:25:72:17:ae:5e:39:a3:f3:cb:8c:
c2:3d:9f:4b:3e:71:00:3b:d5:d1:6f:cb:a9:fa:f6:fa:3e:73:
71:9c:3d:02:ac:91:d2:f5:91:59:19:ba:81:09:63:30:20:75:
bd:55:5d:4e:bd:e0:9d:bb:a8:f0:43:f6:ac:47:71:7a:62:87:
03:56:99:c9:82:dd:36:71:d6:5a:24:8c:4e:f9:4f:2c:b3:74:
e2:c8:c7:f4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUO71sycFk2NcaFCCph1kXNtD2nUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ5ODU4QzZDMzVGOEY5QzhDQUE3NUEwNjU2ODZGNzMy
RjZGNEYzQjAeFw0yNjA3MjgxNzQ4NDdaFw0yNjA3MjkyMTE4NDdaMDMxMTAvBgNV
BAMTKEEyNjI1QUU1QzdERDM0NTY5NjBGOUYyQkVGNDNBQkI5QUU4NEE5RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWryCQKk7XBnegMlDBLfH0xktj
ST9hnkuWkJqHI7jRemJYtbh3cSfbC2Iw+KwLNCje9ofwkdi4RGm7hvLVDwiTCYvs
Y6FZptmWmxhssv9Rwt0+Um8kg5calIjxyPaDSlWvvIIGhkjSydOhKeeFOhwN6Oge
6DkaArYBP+6f7wT3GN7eoZtXaKyC/jtzMczZpiyo75lzVgDAOf904Lh148Bjb41D
qBbMJI+6jGOB5rJk99jgu7BD1afLpcgtn2aHVhTmRy9G3/x6Xvmd0fo+qGUcWtsg
eSIFB4TgYfhIykmmeL0nkxBOhmQWepLI6r4I++K//DaN6CeMQPIQm/eKUVRbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUomJa5cfdNFaWD58r70Orua6EqewwHwYDVR0j
BBgwFoAURJhYxsNfj5yMqnWgZWhvcy9vTzswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTU5NjEyYTItNDQzMy00MmI5LThmNGYtYjg0Nzc3NmFjYWZkLzAvNDQ5ODU4QzZD
MzVGOEY5QzhDQUE3NUEwNjU2ODZGNzMyRjZGNEYzQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC80NDk4NThDNkMzNUY4RjlDOENBQTc1QTA2NTY4NkY3MzJGNkY0
RjNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm
NGYtYjg0Nzc3NmFjYWZkLzAvNDQ5ODU4QzZDMzVGOEY5QzhDQUE3NUEwNjU2ODZG
NzMyRjZGNEYzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGuNpl/NYgHDhOhbtm3bf9/YffoSNBMJ0Oc3
tDlJEwThxxWKa8eIuiH/j5D7MzAKZenS5TYiz0k7CL34woaRrz0MOUWmmQlzoqsI
jCLYEvorBenn4xkb6uzwClDiTDcOSjh8vyX63nrGpdpAxritLD5cuWRSUvwuw9MY
PwszHKKFr/5gHpERZTQhHS3AVhnCk0Jma5gvdDKZUnDJS7mi+c7oB8/cb+ZW8Mxg
JXIXrl45o/PLjMI9n0s+cQA71dFvy6n69vo+c3GcPQKskdL1kVkZuoEJYzAgdb1V
XU694J27qPBD9qxHcXpihwNWmcmC3TZx1lokjE75TyyzdOLIx/Q=
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:13 2026 by rpki-client