
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft
File: 4AD757CB155CFF255FDEC1E6D09300FD55954787.mft (raw, json)
Hash identifier: YUEYzO8OSUS5okK7sw53VGqIRnKvA1VYD76qVIn9GGM=
Subject key identifier: 96:60:C5:FC:AB:25:28:14:88:24:0F:FF:8A:E4:65:02:56:0B:1C:AF
Authority key identifier: 4A:D7:57:CB:15:5C:FF:25:5F:DE:C1:E6:D0:93:00:FD:55:95:47:87
Certificate issuer: /CN=4AD757CB155CFF255FDEC1E6D09300FD55954787
Certificate serial: 10763B61FAD6D971E46F4EED9E3B692C4D3EB3A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AD757CB155CFF255FDEC1E6D09300FD55954787.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft
Manifest number: BE
Signing time: Sun 20 Sep 2026 23:51:23 +0000
Manifest this update: Sun 20 Sep 2026 23:46:23 +0000
Manifest next update: Tue 22 Sep 2026 03:44:23 +0000
Files and hashes: 1: 4AD757CB155CFF255FDEC1E6D09300FD55954787.crl (hash: VVFG+V9m2EmELXYu/BKg25cY7XZKPcIxjfHD0BA1GE0=)
2: 3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa (hash: YQmR5xszR6XJTWjFcmbhXoD76oy0pbbqOdOUyAmXzbo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.crl
rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AD757CB155CFF255FDEC1E6D09300FD55954787.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 17:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:76:3b:61:fa:d6:d9:71:e4:6f:4e:ed:9e:3b:69:2c:4d:3e:b3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AD757CB155CFF255FDEC1E6D09300FD55954787
Validity
Not Before: Sep 20 23:46:23 2026 GMT
Not After : Sep 22 03:44:23 2026 GMT
Subject: CN=9660C5FCAB25281488240FFF8AE46502560B1CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:69:a5:c9:e1:b9:fe:8b:64:9d:65:e7:05:
e3:c6:56:7d:3d:c1:7e:5f:44:d1:fd:92:e7:5c:3c:
25:be:46:d1:aa:61:d9:11:c5:7d:75:27:3c:f2:af:
d4:9c:d5:ae:e3:5f:35:dd:f5:7c:60:1f:82:85:8c:
d4:13:5d:b3:04:1b:7d:21:9c:4a:80:df:48:2f:96:
4e:e4:2c:5d:a4:9f:cc:3a:dc:e9:88:ac:a6:a7:ec:
8c:ec:af:83:02:2f:b5:9d:8f:6f:7d:6c:f9:8c:ee:
35:08:8d:f7:fd:04:73:d5:ad:e6:e8:30:f2:10:22:
2b:71:b4:46:53:75:07:ce:51:12:f7:de:f6:d8:5a:
55:23:e9:93:bd:fb:3c:01:97:9c:79:5b:d5:52:d0:
28:91:4d:a3:6d:2c:f7:3a:3a:4c:37:0f:89:19:ea:
1c:73:3e:4b:3c:71:fe:50:10:75:3f:29:b2:d0:5a:
34:31:45:4f:e5:20:22:f0:90:0a:5c:35:9d:8d:73:
e4:d0:40:08:bd:8a:75:18:3c:ef:e8:f9:d5:64:fb:
4f:62:71:8c:c1:ec:62:a5:5b:e4:4e:0b:0f:c6:d0:
40:40:5c:5e:32:79:5c:f0:a4:84:64:18:9a:ee:f2:
59:b6:19:d3:37:bb:95:7a:36:87:64:63:5e:49:f7:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:60:C5:FC:AB:25:28:14:88:24:0F:FF:8A:E4:65:02:56:0B:1C:AF
X509v3 Authority Key Identifier:
keyid:4A:D7:57:CB:15:5C:FF:25:5F:DE:C1:E6:D0:93:00:FD:55:95:47:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AD757CB155CFF255FDEC1E6D09300FD55954787.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/4AD757CB155CFF255FDEC1E6D09300FD55954787.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5e:17:39:c5:bc:fe:84:1d:8b:ab:6a:c9:72:6b:ac:70:3b:
1d:a6:87:88:2f:59:c9:93:ad:fe:84:53:b1:24:93:d8:80:08:
c8:cc:50:19:35:5d:6a:7f:3d:7b:43:5e:21:4e:bc:13:f9:4e:
d5:72:58:02:ca:ae:0b:11:89:8e:58:f8:91:48:3d:94:f2:77:
26:d3:59:55:6c:eb:1f:0f:66:ba:d4:78:2d:5b:96:d8:3b:c5:
e6:71:69:b7:c1:1a:2d:fd:f2:8c:d9:bf:c1:3a:21:63:e6:77:
e8:c3:75:a0:38:24:88:26:40:68:32:dc:b3:22:7c:2d:38:53:
f2:39:53:26:8c:13:79:62:a6:c0:a9:83:d0:de:86:e0:a1:58:
4f:2d:ef:56:ab:fb:4b:67:1f:07:93:84:de:e1:45:54:44:8e:
bf:af:17:08:0d:5f:c1:7c:71:cd:37:7b:46:da:6a:3a:94:3f:
25:89:9a:b9:27:b4:76:53:62:fe:8d:33:17:b1:e6:c7:40:4b:
95:3e:ef:54:bc:bf:26:f1:71:b9:47:43:44:2a:8b:c9:41:11:
f5:bd:65:96:57:b3:fb:0a:98:4e:59:15:19:7d:90:be:2f:e6:
fe:0d:e6:1c:27:2c:f7:8c:21:62:b6:f9:ac:6f:c3:04:cd:6e:
78:5f:be:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:58:12 2026 by rpki-client