
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft
File: 4263490508EE6D5873ACA7B620F66196D4A2AE63.mft (raw, json)
Hash identifier: 0AW0bcswj0PK8fUu76X1k+cxV1HNRxAZ5gP8BotNz+Q=
Subject key identifier: 89:5C:0C:C7:67:34:90:D6:72:9B:5C:DB:16:DF:FE:6A:AB:1E:40:8C
Authority key identifier: 42:63:49:05:08:EE:6D:58:73:AC:A7:B6:20:F6:61:96:D4:A2:AE:63
Certificate issuer: /CN=4263490508EE6D5873ACA7B620F66196D4A2AE63
Certificate serial: 672F5EECDA4E26A64471802EF8497935EB54B1C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft
Manifest number: BF
Signing time: Sun 20 Sep 2026 21:28:32 +0000
Manifest this update: Sun 20 Sep 2026 21:23:32 +0000
Manifest next update: Tue 22 Sep 2026 00:39:32 +0000
Files and hashes: 1: 4263490508EE6D5873ACA7B620F66196D4A2AE63.crl (hash: ozBUUkkhcSBdIJEMm9STFllSUfjlNFFJIFtHnHHpu/4=)
2: 323030313a6466363a613434303a3a2f34382d3438203d3e20313432363339.roa (hash: iHApH4ig54MvTMEQeKGAbjPzbWKAy8vcZBqwYCxZPjg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.crl
rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 00:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:2f:5e:ec:da:4e:26:a6:44:71:80:2e:f8:49:79:35:eb:54:b1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4263490508EE6D5873ACA7B620F66196D4A2AE63
Validity
Not Before: Sep 20 21:23:32 2026 GMT
Not After : Sep 22 00:39:32 2026 GMT
Subject: CN=895C0CC7673490D6729B5CDB16DFFE6AAB1E408C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:28:3a:d3:a4:7d:a5:61:be:66:ee:b1:c1:
03:08:7d:0e:ac:32:ba:79:1a:4f:c3:45:9d:f8:d6:
58:80:3d:82:47:4b:2c:5b:69:bc:5a:ac:c5:52:47:
f2:76:4e:c7:45:77:f8:9f:a8:b5:91:63:89:29:6f:
03:f2:18:0d:e5:ae:a9:46:49:53:96:e1:89:45:78:
49:4f:ae:92:d1:fc:b7:70:d9:58:e5:ac:90:18:13:
0d:46:27:c1:bb:5d:22:82:3a:14:95:a4:ac:94:9b:
3b:2b:41:d5:e4:90:cd:10:cd:35:39:c6:4a:fa:6e:
bb:0f:e7:f6:00:c3:ad:8a:ad:ca:4a:de:fb:37:3e:
2c:b7:86:66:31:35:e0:4f:99:d9:97:86:85:7c:37:
f7:88:d8:e5:bb:7f:6c:7a:98:ec:51:26:a0:98:7f:
aa:f2:8e:d0:e0:7c:1e:e9:98:f1:e8:7d:5a:81:41:
00:19:d6:bc:85:cd:dd:9e:f6:7e:46:01:2b:51:71:
05:7e:f8:f2:f6:d6:05:4b:a4:95:d5:89:82:30:97:
dd:d2:af:23:37:0b:11:52:3d:fc:92:b8:64:2f:4e:
07:78:7f:40:b4:3c:d2:46:59:c9:5f:5c:64:f9:ec:
b5:e2:62:57:e7:db:a3:c7:12:31:a7:46:06:56:fb:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5C:0C:C7:67:34:90:D6:72:9B:5C:DB:16:DF:FE:6A:AB:1E:40:8C
X509v3 Authority Key Identifier:
keyid:42:63:49:05:08:EE:6D:58:73:AC:A7:B6:20:F6:61:96:D4:A2:AE:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6e:de:e1:32:04:be:68:1c:d2:43:a3:ca:45:d6:52:f3:72:
cb:92:c0:2e:ed:db:c9:f8:08:70:2c:a4:67:30:dc:55:1d:ab:
c3:b1:aa:89:eb:7d:48:ec:f7:8e:f3:da:ae:b7:44:26:91:7d:
ba:b0:4e:9f:6d:a8:42:a3:22:52:d0:9e:86:c1:ff:09:af:68:
9c:1b:87:bf:36:8e:12:41:e2:f4:b9:65:ae:53:dc:02:35:05:
d7:3b:85:69:4f:81:4b:ae:30:4d:ba:08:19:da:b8:b9:60:68:
d8:f8:b0:eb:cf:92:d5:bd:56:57:83:4b:c7:ac:80:28:54:a4:
38:2c:58:47:e6:4a:98:43:de:78:0e:71:d5:cb:73:3c:be:4d:
7d:d9:b8:0c:20:b7:52:ae:ca:4f:1b:fa:c2:83:77:83:04:02:
ec:1b:16:9c:dd:de:d6:a2:3b:d7:68:66:93:c8:19:d5:6b:64:
fe:41:b8:0b:ec:5a:e1:72:c4:be:b7:97:39:8f:0c:25:b7:3d:
13:03:e1:6e:04:70:f4:d7:7a:40:6d:2b:fb:d2:78:32:da:ce:
cd:c9:75:49:39:37:9d:7b:70:29:39:f3:66:1d:51:e0:a2:fe:
12:4b:43:9a:d4:76:31:7a:d2:25:5c:f5:31:9a:65:ad:18:75:
7e:f0:21:9a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZy9e7NpOJqZEcYAu+El5NetUscAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI2MzQ5MDUwOEVFNkQ1ODczQUNBN0I2MjBGNjYxOTZE
NEEyQUU2MzAeFw0yNjA5MjAyMTIzMzJaFw0yNjA5MjIwMDM5MzJaMDMxMTAvBgNV
BAMTKDg5NUMwQ0M3NjczNDkwRDY3MjlCNUNEQjE2REZGRTZBQUIxRTQwOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJKig606R9pWG+Zu6xwQMIfQ6s
Mrp5Gk/DRZ341liAPYJHSyxbabxarMVSR/J2TsdFd/ifqLWRY4kpbwPyGA3lrqlG
SVOW4YlFeElPrpLR/Ldw2VjlrJAYEw1GJ8G7XSKCOhSVpKyUmzsrQdXkkM0QzTU5
xkr6brsP5/YAw62KrcpK3vs3Piy3hmYxNeBPmdmXhoV8N/eI2OW7f2x6mOxRJqCY
f6ryjtDgfB7pmPHofVqBQQAZ1ryFzd2e9n5GAStRcQV++PL21gVLpJXViYIwl93S
ryM3CxFSPfySuGQvTgd4f0C0PNJGWclfXGT57LXiYlfn26PHEjGnRgZW+9yLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUiVwMx2c0kNZym1zbFt/+aqseQIwwHwYDVR0j
BBgwFoAUQmNJBQjubVhzrKe2IPZhltSirmMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGE5Y2Q2NjgtNmNjNS00OWE2LTlmY2YtYWUzMmE4N2ZlNjM2LzEvNDI2MzQ5MDUw
OEVFNkQ1ODczQUNBN0I2MjBGNjYxOTZENEEyQUU2My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MjYzNDkwNTA4RUU2RDU4NzNBQ0E3QjYyMEY2NjE5NkQ0QTJB
RTYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGE5Y2Q2NjgtNmNjNS00OWE2LTlm
Y2YtYWUzMmE4N2ZlNjM2LzEvNDI2MzQ5MDUwOEVFNkQ1ODczQUNBN0I2MjBGNjYx
OTZENEEyQUU2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE5u3uEyBL5oHNJDo8pF1lLzcsuSwC7t28n4
CHAspGcw3FUdq8OxqonrfUjs947z2q63RCaRfbqwTp9tqEKjIlLQnobB/wmvaJwb
h782jhJB4vS5Za5T3AI1Bdc7hWlPgUuuME26CBnauLlgaNj4sOvPktW9VleDS8es
gChUpDgsWEfmSphD3ngOcdXLczy+TX3ZuAwgt1Kuyk8b+sKDd4MEAuwbFpzd3tai
O9doZpPIGdVrZP5BuAvsWuFyxL63lzmPDCW3PRMD4W4EcPTXekBtK/vSeDLazs3J
dUk5N517cCk582YdUeCi/hJLQ5rUdjF60iVc9TGaZa0YdX7wIZo=
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:43:00 2026 by rpki-client