
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
File: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft (raw, json)
Hash identifier: U5O7BXEAQZbrccbqqH7U0bMkFj/TwH6t0pB2QinNcgo=
Subject key identifier: 20:3E:C4:AE:58:24:ED:CB:B7:09:9A:5F:0A:3C:E4:25:9C:9C:28:41
Authority key identifier: 4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2
Certificate issuer: /CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2
Certificate serial: 0271A1B380F394C7577A31A45C11F5514B9FE01B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 23:40:48 +0000
Manifest this update: Tue 28 Jul 2026 23:35:48 +0000
Manifest next update: Wed 29 Jul 2026 23:45:48 +0000
Files and hashes: 1: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: ry2+KDu888rhvRXyvEVBH/F8IFRWnEG2799s3X5mVKA=)
2: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl (hash: tzfyFSGxfUoyTuoLJa669Z/h+rhuiM0cHMsXDkTDmIw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl
rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:71:a1:b3:80:f3:94:c7:57:7a:31:a4:5c:11:f5:51:4b:9f:e0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2
Validity
Not Before: Jul 28 23:35:48 2026 GMT
Not After : Jul 29 23:45:48 2026 GMT
Subject: CN=203EC4AE5824EDCBB7099A5F0A3CE4259C9C2841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6d:7f:b1:3e:50:5d:c7:f4:51:e1:77:d1:df:
08:8a:ab:b6:30:35:90:83:bd:2d:c4:a5:a3:c8:af:
2e:25:da:bc:11:a4:d3:49:4b:4e:9d:1c:e5:47:04:
0b:b7:ff:37:e9:0c:13:5e:cf:75:4a:41:af:3e:d9:
e0:8a:4d:7e:37:45:b5:76:db:54:b7:cd:51:66:44:
d2:05:2e:20:e2:5f:52:10:f8:72:35:bc:34:0b:3e:
b9:f4:32:04:47:49:f7:00:f6:d1:73:15:bb:fe:e6:
12:1c:37:ce:7b:ad:fd:87:16:73:78:94:ac:cb:30:
99:2a:5d:fc:ff:a9:9b:9e:45:55:a4:65:6a:94:0f:
bd:aa:e1:71:f0:90:6c:11:9c:aa:00:14:a2:81:ee:
ad:31:c1:f1:2a:a7:9d:cd:61:0c:ec:90:c1:28:35:
14:e3:fa:6c:26:9f:70:71:f7:23:fc:71:5a:63:14:
6e:4a:0c:58:c2:c3:4f:18:37:b3:b1:b4:17:04:0d:
11:ac:cf:37:e6:a9:fb:07:e1:bc:1e:6f:e9:b7:cc:
f0:6b:fa:9b:92:46:0f:73:89:2d:f8:b4:9e:e2:b9:
e7:80:9b:0c:27:87:5e:d4:91:b6:18:89:40:5d:14:
d4:7c:37:68:d3:09:7a:89:58:18:05:8f:d8:76:cc:
8c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3E:C4:AE:58:24:ED:CB:B7:09:9A:5F:0A:3C:E4:25:9C:9C:28:41
X509v3 Authority Key Identifier:
keyid:4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a4:c1:da:7c:df:b5:39:53:df:07:9c:24:ef:31:83:22:c7:
ff:48:98:f8:4b:56:33:0e:7c:7c:7c:67:f3:51:f8:5c:67:9b:
56:93:28:f6:8f:d3:21:e2:f7:0d:65:20:57:f5:d5:54:4e:e5:
c2:76:20:5e:f1:19:8b:18:29:c8:eb:ff:a5:4a:0c:c8:95:b7:
a9:57:58:7d:f1:12:99:20:84:22:48:7c:79:12:19:ce:43:ad:
87:e2:c1:1c:d8:ba:ed:ab:8c:b0:7d:5b:66:cb:c0:04:15:34:
cd:12:e0:70:d9:c5:5b:8a:e9:9a:71:20:01:b8:f0:ab:45:fe:
6c:4a:0d:99:de:ef:2b:43:78:04:57:5e:9c:4e:25:43:f6:e4:
be:a3:60:97:c0:61:b1:dc:1d:8d:9e:55:51:34:02:eb:43:4d:
aa:62:eb:46:de:c7:81:6e:e9:30:d0:f9:02:c8:a3:68:83:75:
cd:bd:de:76:43:bd:6f:45:26:b0:15:34:08:9c:d6:49:e2:c9:
cb:d9:0d:eb:63:25:7a:71:de:e3:5a:23:bd:5c:64:0b:5d:cb:
4e:95:c2:70:81:b0:56:29:ac:9b:4c:33:11:03:76:24:06:11:
08:f6:d2:04:02:7b:af:f1:b4:03:29:6d:29:e2:03:be:72:86:
6f:55:4a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:09 2026 by rpki-client