
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft
File: 731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft (raw, json)
Hash identifier: B0Ou/tg7L7VVtcHmhwtJB4hGZ5y68SOnNVvpJcH3+LE=
Subject key identifier: 4F:00:2D:BD:B3:5A:35:26:AA:08:C4:71:C1:0F:46:85:DF:8D:A3:60
Authority key identifier: 73:1D:5D:59:A9:23:8F:79:E8:E4:54:0B:7B:F8:83:9F:82:4A:A2:E6
Certificate issuer: /CN=731D5D59A9238F79E8E4540B7BF8839F824AA2E6
Certificate serial: 32545ADB3DE580EE6E76264AC51A44DC3CF315E8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft
Manifest number: BD
Signing time: Sun 20 Sep 2026 20:06:42 +0000
Manifest this update: Sun 20 Sep 2026 20:01:42 +0000
Manifest next update: Mon 21 Sep 2026 20:10:42 +0000
Files and hashes: 1: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: +l7H6IXgAvTv+3glkvk8VLjCw4Za7qX1HwAcAg3brR0=)
2: 731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl (hash: yrBtX2LSAwwytPAt/ZW2n0SsrWwJIQWBnIF64HoAZLc=)
3: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: J0CxZDsJ9hK/vFJkCmlYVTK0Hkphd/z0nczFHp0XF3o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl
rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 17:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:54:5a:db:3d:e5:80:ee:6e:76:26:4a:c5:1a:44:dc:3c:f3:15:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731D5D59A9238F79E8E4540B7BF8839F824AA2E6
Validity
Not Before: Sep 20 20:01:42 2026 GMT
Not After : Sep 21 20:10:42 2026 GMT
Subject: CN=4F002DBDB35A3526AA08C471C10F4685DF8DA360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:e3:8c:15:17:9e:5d:12:88:f2:5d:44:9b:
29:b8:03:7d:24:dc:e0:d4:f5:93:bd:ff:c6:ce:34:
57:ba:af:83:f3:2a:d2:61:de:e4:ce:f2:e0:58:e5:
56:09:0a:80:f5:7b:b0:17:c6:e1:1b:9a:54:c2:93:
80:5c:2c:93:08:8a:9d:01:31:9a:20:09:97:0d:c6:
f7:11:f7:96:ee:4a:ea:c9:be:c0:a4:7c:dc:99:6d:
45:2a:f0:49:f6:ae:31:5a:7e:60:94:d0:d5:a0:3b:
d4:6f:2c:9d:a2:e8:10:f3:40:52:0e:9d:59:87:0c:
2a:14:be:df:65:6b:3a:6b:fc:ba:e6:8c:18:30:46:
ea:b4:aa:21:77:0e:41:88:20:28:5b:6e:0e:ba:31:
ce:73:b5:af:44:47:f4:31:2f:28:81:79:5c:93:5c:
62:d5:30:b0:2a:cd:c5:79:5a:09:11:7b:40:c1:34:
71:a1:51:a4:88:ab:6f:0e:73:ef:86:20:14:54:bf:
36:18:2b:82:63:1b:ff:ab:1e:58:1a:87:5e:21:ec:
04:42:95:28:a1:c7:77:c2:42:0c:8b:fd:af:cc:03:
21:38:e5:b5:b7:66:b0:75:7c:8c:ab:ab:c5:2e:69:
9d:25:ec:ba:08:e6:93:41:7b:ac:74:d5:07:35:05:
16:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:00:2D:BD:B3:5A:35:26:AA:08:C4:71:C1:0F:46:85:DF:8D:A3:60
X509v3 Authority Key Identifier:
keyid:73:1D:5D:59:A9:23:8F:79:E8:E4:54:0B:7B:F8:83:9F:82:4A:A2:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8d:f5:2f:c2:3d:7c:11:b8:5a:93:96:27:f6:a7:f4:00:66:
1c:73:d2:90:ba:a9:1f:3b:2b:9a:14:75:92:8b:f7:57:67:02:
9f:b7:e3:74:3c:4b:d0:11:40:07:cf:7f:b6:d4:3e:44:90:6c:
6c:d6:30:b6:d6:06:ef:92:53:1f:ec:5d:b7:7c:46:b3:3d:16:
db:21:96:8a:57:f7:7d:d9:77:4c:87:92:ab:7c:8b:29:f7:d6:
b7:ce:a5:cf:b5:02:e9:5f:d8:1f:c5:f5:27:03:10:4c:94:26:
f2:93:81:21:67:9b:f7:aa:b4:30:6c:23:8c:89:41:75:70:ce:
cf:5b:f9:b6:82:f2:98:a2:d3:c8:f7:ea:90:e4:ec:88:70:60:
a3:6b:9e:9d:ca:d8:29:89:52:2b:81:7f:48:c3:c9:2c:9f:16:
06:d4:4a:0b:53:2e:6a:3a:9b:ce:47:ef:54:59:8d:5e:ee:d4:
18:e2:bf:67:c2:0a:4b:75:4e:ff:2d:3c:8d:10:95:3b:35:e1:
82:cd:02:d7:1e:d6:50:ab:e7:8e:c9:af:3f:ec:28:15:8c:6d:
2c:68:d9:4f:1a:fe:0b:b5:35:aa:31:3a:0a:e5:97:c7:44:3a:
00:07:c8:e3:2b:a4:20:90:27:3e:62:84:de:e3:62:5a:48:ce:
44:e0:25:c9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMlRa2z3lgO5udiZKxRpE3DzzFegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMxRDVENTlBOTIzOEY3OUU4RTQ1NDBCN0JGODgzOUY4
MjRBQTJFNjAeFw0yNjA5MjAyMDAxNDJaFw0yNjA5MjEyMDEwNDJaMDMxMTAvBgNV
BAMTKDRGMDAyREJEQjM1QTM1MjZBQTA4QzQ3MUMxMEY0Njg1REY4REEzNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDB+OMFReeXRKI8l1Emym4A30k
3ODU9ZO9/8bONFe6r4PzKtJh3uTO8uBY5VYJCoD1e7AXxuEbmlTCk4BcLJMIip0B
MZogCZcNxvcR95buSurJvsCkfNyZbUUq8En2rjFafmCU0NWgO9RvLJ2i6BDzQFIO
nVmHDCoUvt9lazpr/LrmjBgwRuq0qiF3DkGIIChbbg66Mc5zta9ER/QxLyiBeVyT
XGLVMLAqzcV5WgkRe0DBNHGhUaSIq28Oc++GIBRUvzYYK4JjG/+rHlgah14h7ARC
lSihx3fCQgyL/a/MAyE45bW3ZrB1fIyrq8UuaZ0l7LoI5pNBe6x01Qc1BRbRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUTwAtvbNaNSaqCMRxwQ9Ghd+No2AwHwYDVR0j
BBgwFoAUcx1dWakjj3no5FQLe/iDn4JKouYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDQ3MDI2YTktMGM5YS00ZDc5LWFkNjctMmM5ZGJkMzY2ZDBiLzAvNzMxRDVENTlB
OTIzOEY3OUU4RTQ1NDBCN0JGODgzOUY4MjRBQTJFNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MzFENUQ1OUE5MjM4Rjc5RThFNDU0MEI3QkY4ODM5RjgyNEFB
MkU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk
NjctMmM5ZGJkMzY2ZDBiLzAvNzMxRDVENTlBOTIzOEY3OUU4RTQ1NDBCN0JGODgz
OUY4MjRBQTJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEGN9S/CPXwRuFqTlif2p/QAZhxz0pC6qR87
K5oUdZKL91dnAp+343Q8S9ARQAfPf7bUPkSQbGzWMLbWBu+SUx/sXbd8RrM9Ftsh
lopX933Zd0yHkqt8iyn31rfOpc+1Aulf2B/F9ScDEEyUJvKTgSFnm/eqtDBsI4yJ
QXVwzs9b+baC8pii08j36pDk7IhwYKNrnp3K2CmJUiuBf0jDySyfFgbUSgtTLmo6
m85H71RZjV7u1Bjiv2fCCkt1Tv8tPI0QlTs14YLNAtce1lCr547Jrz/sKBWMbSxo
2U8a/gu1NaoxOgrll8dEOgAHyOMrpCCQJz5ihN7jYlpIzkTgJck=
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:35:22 2026 by rpki-client