
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft
File: 045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft (raw, json)
Hash identifier: WHS2OYv1FUjBIqN6bnBxAMqkAiGUTlbYPf66iCids34=
Subject key identifier: 64:3A:8B:D9:0D:43:DE:4A:DB:7C:A9:02:9C:C8:7C:CC:26:2F:47:CD
Authority key identifier: 04:5D:9E:46:EE:6E:6B:BD:2A:FE:E4:77:96:4C:6D:9B:A9:BC:1D:D4
Certificate issuer: /CN=045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4
Certificate serial: 1B63ADA2F4EFBC6A75108E79CBB7E5F5050CD41B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft
Manifest number: C0
Signing time: Wed 23 Sep 2026 00:06:22 +0000
Manifest this update: Wed 23 Sep 2026 00:01:22 +0000
Manifest next update: Thu 24 Sep 2026 00:31:22 +0000
Files and hashes: 1: 045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.crl (hash: 6qVYAyyLnEwxo8u43mFt2SkayEMl+5Okp1ONvw4PTNA=)
2: 3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa (hash: Tg4cupk2DXjSvW5xjuL6mIy6JAE0QREMVdBvwDzs2pY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.crl
rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 00:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:63:ad:a2:f4:ef:bc:6a:75:10:8e:79:cb:b7:e5:f5:05:0c:d4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4
Validity
Not Before: Sep 23 00:01:22 2026 GMT
Not After : Sep 24 00:31:22 2026 GMT
Subject: CN=643A8BD90D43DE4ADB7CA9029CC87CCC262F47CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:9c:65:8b:29:e9:f1:2b:0c:3c:b0:31:6a:
79:b3:b4:8f:5c:d1:3a:01:30:98:96:fc:dd:d6:f0:
aa:97:2f:95:7b:a5:0d:c3:23:c0:44:5e:d9:8e:46:
f5:2f:d6:32:07:32:a5:7c:5b:ea:c8:f0:a6:9a:ee:
20:71:26:fe:2c:9f:79:0e:dd:a3:69:60:03:d3:23:
9d:ed:28:82:a7:26:fd:7e:03:c8:25:30:da:ce:87:
af:71:1b:94:7b:f6:b0:0b:73:8e:3e:2e:e2:16:b1:
10:7f:74:cb:d6:5b:1b:b1:40:e6:f4:5f:a7:f5:a4:
c6:94:c8:0d:24:f9:ca:b2:35:f6:2a:36:4e:1f:86:
44:a6:ce:aa:ba:6a:b5:0c:1c:85:67:04:e6:a7:b5:
55:5e:22:9e:ab:c4:e7:8f:8e:46:98:91:17:fe:a3:
b4:b0:ed:75:30:36:b6:90:4f:a6:a7:50:46:d2:8a:
d7:a5:b8:99:5e:bf:c3:79:28:cd:71:a4:fd:60:f6:
8e:c3:68:16:48:fc:55:8c:ec:78:d3:fe:0d:ac:a4:
8b:44:9d:36:6c:42:e7:3d:66:a9:a1:db:4c:24:ca:
84:06:ad:bd:54:38:5a:31:08:2c:70:15:68:94:00:
a4:e3:65:fb:90:5c:de:f9:2d:fa:d7:3f:df:0a:2b:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3A:8B:D9:0D:43:DE:4A:DB:7C:A9:02:9C:C8:7C:CC:26:2F:47:CD
X509v3 Authority Key Identifier:
keyid:04:5D:9E:46:EE:6E:6B:BD:2A:FE:E4:77:96:4C:6D:9B:A9:BC:1D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/045D9E46EE6E6BBD2AFEE477964C6D9BA9BC1DD4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:90:b8:9a:32:8d:14:67:5c:fe:c0:98:ea:71:44:1b:b2:5d:
cf:d7:9d:b0:0f:31:b9:3a:fe:0c:14:dd:b3:d5:e5:4b:ae:21:
e8:80:ba:69:e8:8e:6c:e7:06:fd:75:11:d6:5a:e4:e2:64:50:
3d:ba:56:42:49:c3:d9:be:f7:9a:31:48:3b:8b:e7:c6:75:b7:
15:81:ef:fc:b3:8c:74:d4:91:f5:1b:b0:aa:36:3e:cd:2b:9c:
ad:13:c3:4d:43:c3:31:39:d3:79:b6:1e:64:a5:2f:62:26:97:
ac:2f:62:eb:e7:48:0b:48:14:e7:0c:35:13:46:9c:b0:8f:08:
f3:94:05:6a:a5:74:71:64:33:b2:ae:45:5d:83:12:14:22:c6:
7d:3c:6f:98:31:3e:8f:8a:46:de:1b:94:2b:bd:5a:3d:fd:c6:
9a:a2:ed:d0:d3:1e:d4:9d:5a:60:84:0c:ff:6f:ee:33:22:6d:
9a:c4:16:9f:d6:20:98:7b:06:3e:39:b3:93:bd:8d:a6:eb:89:
e1:d8:58:54:b6:f1:26:74:3e:97:90:7a:66:e3:46:0b:66:57:
65:4b:49:46:8c:13:a6:90:9d:2c:90:e8:08:ee:76:2d:d0:52:
7e:1a:f8:f0:b0:06:2b:64:54:5c:d1:94:b3:a5:65:5d:ef:7d:
60:36:ad:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:17:49 2026 by rpki-client