
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft
File: 4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft (raw, json)
Hash identifier: GupNXtzZxbw0GzxA4Bo38/j+aLqBexj9z6YBwOSS8PM=
Subject key identifier: 75:A7:F1:F0:8F:51:37:F1:7F:D5:4B:4E:03:DF:D4:34:3D:A1:83:CB
Authority key identifier: 4E:85:79:F4:6C:CA:51:CA:56:CD:9C:3E:A1:A3:A1:29:C1:98:70:4B
Certificate issuer: /CN=4E8579F46CCA51CA56CD9C3EA1A3A129C198704B
Certificate serial: 5D223ACEBD8707E4C6A872F99821DAB0C5781573
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft
Manifest number: C6
Signing time: Mon 28 Sep 2026 15:39:04 +0000
Manifest this update: Mon 28 Sep 2026 15:34:04 +0000
Manifest next update: Tue 29 Sep 2026 19:00:04 +0000
Files and hashes: 1: 4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl (hash: ztBV9WMgacyQnlV04+ppBno3f9OVnaAc4JnkyJNLuXU=)
2: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: l0tvorHSkUZlt4zaL3Dl67F8jKKatHb3Uo7qW6XsBFY=)
3: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: S+rOrm27Es7W6Om8mBBRTFySKu0A8+vu3LzCH/NnAfQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl
rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:22:3a:ce:bd:87:07:e4:c6:a8:72:f9:98:21:da:b0:c5:78:15:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E8579F46CCA51CA56CD9C3EA1A3A129C198704B
Validity
Not Before: Sep 28 15:34:04 2026 GMT
Not After : Sep 29 19:00:04 2026 GMT
Subject: CN=75A7F1F08F5137F17FD54B4E03DFD4343DA183CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:e0:37:0c:c5:db:3a:b2:12:43:fa:de:d4:
8b:e1:14:63:3c:f2:f8:8e:b1:04:23:71:97:e7:d0:
fd:1f:9e:c2:96:ae:57:85:e6:43:71:83:0b:f1:c1:
9d:72:5c:96:15:2e:d2:b1:7e:22:52:5e:e5:1c:5e:
d5:10:39:2e:d2:7d:fa:6e:d3:95:80:e8:c2:31:32:
12:de:1c:72:07:b5:8f:88:1f:07:fc:1b:0a:f3:f2:
35:7e:fd:97:bc:1e:e9:2b:66:5e:51:a2:80:1e:4e:
48:a4:ae:7e:7f:37:a7:ac:7e:dd:11:d2:71:5a:99:
02:5f:a8:eb:d1:c6:38:4b:48:80:82:8b:9f:c6:54:
b7:6e:77:8d:90:b7:62:00:70:5f:14:64:e1:ab:36:
20:94:d1:fd:d8:3a:71:c4:d1:bd:a9:e2:10:22:6e:
fc:d4:19:0e:a5:1c:15:76:6f:42:63:05:c2:e3:b7:
a4:1b:e8:42:a0:f8:38:1c:4d:fc:c8:12:83:f7:5d:
37:68:40:14:8c:b3:93:7e:75:7f:3a:ed:23:5c:bf:
52:c0:cb:0f:5d:73:2b:1d:c9:ee:2b:af:66:ab:37:
cd:f0:1a:77:f3:59:82:c7:e1:bf:40:95:90:bf:f5:
d6:5b:3d:7c:f0:6e:cb:bb:bf:cb:06:4a:61:0a:62:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A7:F1:F0:8F:51:37:F1:7F:D5:4B:4E:03:DF:D4:34:3D:A1:83:CB
X509v3 Authority Key Identifier:
keyid:4E:85:79:F4:6C:CA:51:CA:56:CD:9C:3E:A1:A3:A1:29:C1:98:70:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/4E8579F46CCA51CA56CD9C3EA1A3A129C198704B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f6:48:6b:d4:a7:cc:e3:6d:ce:2e:af:94:e4:42:8b:1b:bb:
63:34:7f:09:44:15:0c:b8:63:da:c1:bd:56:30:de:bf:db:10:
9b:64:56:b0:8f:5e:c7:85:05:de:28:b2:1d:2a:ba:22:34:8a:
9b:9a:ad:e0:e4:9a:f4:52:56:d0:89:dd:cb:76:a9:5c:fe:17:
d2:e8:81:73:a5:df:09:63:9e:25:84:01:90:06:00:f1:3d:33:
74:40:9b:c6:6c:7f:4c:19:a3:a9:9a:eb:fe:25:bb:23:be:08:
20:b5:be:1e:39:d0:2c:05:34:b9:91:3b:e5:28:18:d9:1b:96:
12:ec:3a:70:aa:09:38:9e:e7:2a:99:fb:e7:ec:12:6d:ef:ec:
e1:60:79:86:79:4f:be:24:01:7b:82:c3:a6:9d:ca:8f:f1:82:
86:83:3c:20:0d:da:6b:0c:61:84:ce:1f:3c:d7:e3:d1:84:a7:
fc:df:19:68:a6:6a:43:8d:af:a5:7e:88:5b:ba:0e:1f:0e:de:
30:ae:50:8d:b6:41:c2:c7:60:ba:ce:56:e7:c4:27:3d:ed:66:
ae:7c:4d:19:98:29:15:dd:d3:55:bf:86:c4:72:29:d4:05:8d:
7a:d6:04:15:bc:0d:0e:c0:65:16:c2:61:13:e7:fd:14:7b:e3:
18:24:ce:6f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXSI6zr2HB+TGqHL5mCHasMV4FXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU4NTc5RjQ2Q0NBNTFDQTU2Q0Q5QzNFQTFBM0ExMjlD
MTk4NzA0QjAeFw0yNjA5MjgxNTM0MDRaFw0yNjA5MjkxOTAwMDRaMDMxMTAvBgNV
BAMTKDc1QTdGMUYwOEY1MTM3RjE3RkQ1NEI0RTAzREZENDM0M0RBMTgzQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRsuA3DMXbOrISQ/re1IvhFGM8
8viOsQQjcZfn0P0fnsKWrleF5kNxgwvxwZ1yXJYVLtKxfiJSXuUcXtUQOS7Sffpu
05WA6MIxMhLeHHIHtY+IHwf8Gwrz8jV+/Ze8HukrZl5RooAeTkikrn5/N6esft0R
0nFamQJfqOvRxjhLSICCi5/GVLdud42Qt2IAcF8UZOGrNiCU0f3YOnHE0b2p4hAi
bvzUGQ6lHBV2b0JjBcLjt6Qb6EKg+DgcTfzIEoP3XTdoQBSMs5N+dX867SNcv1LA
yw9dcysdye4rr2arN83wGnfzWYLH4b9AlZC/9dZbPXzwbsu7v8sGSmEKYo+XAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdafx8I9RN/F/1UtOA9/UND2hg8swHwYDVR0j
BBgwFoAUToV59GzKUcpWzZw+oaOhKcGYcEswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTM1MjI0YzYtMzM0ZC00ZjNkLTk4MzctMWJhY2NhNWEwMjJiLzAvNEU4NTc5RjQ2
Q0NBNTFDQTU2Q0Q5QzNFQTFBM0ExMjlDMTk4NzA0Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80RTg1NzlGNDZDQ0E1MUNBNTZDRDlDM0VBMUEzQTEyOUMxOTg3
MDRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4
MzctMWJhY2NhNWEwMjJiLzAvNEU4NTc5RjQ2Q0NBNTFDQTU2Q0Q5QzNFQTFBM0Ex
MjlDMTk4NzA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJH2SGvUp8zjbc4ur5TkQosbu2M0fwlEFQy4
Y9rBvVYw3r/bEJtkVrCPXseFBd4osh0quiI0ipuareDkmvRSVtCJ3ct2qVz+F9Lo
gXOl3wljniWEAZAGAPE9M3RAm8Zsf0wZo6ma6/4luyO+CCC1vh450CwFNLmRO+Uo
GNkblhLsOnCqCTie5yqZ++fsEm3v7OFgeYZ5T74kAXuCw6adyo/xgoaDPCAN2msM
YYTOHzzX49GEp/zfGWimakONr6V+iFu6Dh8O3jCuUI22QcLHYLrOVufEJz3tZq58
TRmYKRXd01W/hsRyKdQFjXrWBBW8DQ7AZRbCYRPn/RR74xgkzm8=
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:47:09 2026 by rpki-client