
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.mft
File: 4B772653CA93D4068F6DD1DA58CBDAA651598C94.mft (raw, json)
Hash identifier: +1r+k1y7gYPemULsKHUGsipCpD7JrxR9b5IzauMp1Bs=
Subject key identifier: B2:07:9F:2D:42:B2:37:77:9C:88:62:E2:24:B1:4C:47:65:6E:C4:06
Authority key identifier: 4B:77:26:53:CA:93:D4:06:8F:6D:D1:DA:58:CB:DA:A6:51:59:8C:94
Certificate issuer: /CN=4B772653CA93D4068F6DD1DA58CBDAA651598C94
Certificate serial: 15A933B3A7626BD7B843AF990E0C2535E701491A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B772653CA93D4068F6DD1DA58CBDAA651598C94.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.mft
Manifest number: C0
Signing time: Mon 21 Sep 2026 17:33:24 +0000
Manifest this update: Mon 21 Sep 2026 17:28:24 +0000
Manifest next update: Tue 22 Sep 2026 20:41:24 +0000
Files and hashes: 1: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (hash: LP4i7KxphXT4TiytVVY6T0WCBkg+cxC7sq55Sfj8HZg=)
2: 4B772653CA93D4068F6DD1DA58CBDAA651598C94.crl (hash: 74WqXiN4vW9HEgGhKLRczeMaQF2bokABTPu2dcT7bmc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.crl
rsync://rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B772653CA93D4068F6DD1DA58CBDAA651598C94.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 20:41:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a9:33:b3:a7:62:6b:d7:b8:43:af:99:0e:0c:25:35:e7:01:49:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B772653CA93D4068F6DD1DA58CBDAA651598C94
Validity
Not Before: Sep 21 17:28:24 2026 GMT
Not After : Sep 22 20:41:24 2026 GMT
Subject: CN=B2079F2D42B237779C8862E224B14C47656EC406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cd:4a:30:24:42:6e:46:d4:6c:1a:5c:cc:ce:
bd:07:53:ef:d2:c9:e7:51:d4:db:79:10:ea:64:06:
12:d6:e7:b6:21:c7:9d:41:e8:2d:23:ee:7b:74:19:
78:0b:47:3b:b7:e9:b4:1e:0b:0a:7d:9b:30:0d:7b:
fb:3f:46:e5:74:35:5d:9f:a8:2c:ef:f3:41:fd:40:
77:30:22:43:48:40:61:96:27:99:fd:6d:5f:72:68:
92:0c:8f:f8:dd:ae:7d:d6:da:05:4d:58:94:d1:74:
a5:71:db:10:09:95:90:c4:a5:06:03:55:93:93:0a:
ee:ac:ad:61:65:43:57:9b:33:d5:d6:71:25:b1:d4:
de:cf:82:62:05:04:80:83:0c:4e:48:8e:0f:fe:fe:
e8:23:cd:50:78:0f:d8:1c:5f:7a:e3:cb:89:f5:2b:
14:38:13:8b:95:ce:24:cf:cc:a6:fd:1b:2c:fa:73:
12:4f:70:86:18:c9:67:d1:d6:be:46:60:0d:ec:8c:
be:ef:80:ff:cf:95:30:82:cc:23:8f:f4:c4:78:96:
fb:f4:a5:c7:92:e6:a4:36:bd:cb:7f:d2:2c:b3:95:
72:7d:df:1d:c9:9f:b3:03:1d:c0:d0:53:b4:8a:14:
53:fd:8a:6d:37:03:47:38:cf:45:b4:a5:8c:02:da:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:07:9F:2D:42:B2:37:77:9C:88:62:E2:24:B1:4C:47:65:6E:C4:06
X509v3 Authority Key Identifier:
keyid:4B:77:26:53:CA:93:D4:06:8F:6D:D1:DA:58:CB:DA:A6:51:59:8C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4B772653CA93D4068F6DD1DA58CBDAA651598C94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/4B772653CA93D4068F6DD1DA58CBDAA651598C94.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:19:f7:fa:01:7b:64:a6:f7:91:cd:8a:2c:6b:3e:36:de:4c:
ba:ab:d2:b1:c2:79:24:c9:e0:7a:d5:78:45:7c:83:88:eb:be:
f2:f3:16:d4:a8:f6:a3:e1:49:cd:54:ab:7d:a4:98:2b:9a:bb:
a7:b4:4b:ad:3f:da:a3:3f:ee:57:23:5a:24:bc:dd:d5:84:b2:
c3:e6:a5:45:b9:6b:93:2e:03:56:85:62:d5:5f:d2:65:8d:11:
f6:99:5a:7a:29:1c:ce:55:cc:b4:83:fc:97:24:87:09:7e:15:
99:9c:de:09:84:d8:71:64:d3:62:09:a0:10:bb:1f:67:48:43:
d5:2b:87:06:f7:bd:46:e8:03:d6:d4:39:8a:2c:5f:1d:60:ef:
fd:a7:2f:8c:52:d3:8e:f1:80:74:ca:c8:e2:a5:51:3a:e6:14:
6f:85:3c:5b:83:dc:f2:05:e8:d2:60:e7:91:1f:5b:44:c4:b7:
f7:8d:78:bc:13:e7:01:be:4c:a5:ac:94:fe:7d:fe:37:d9:cc:
37:1d:86:fb:8a:43:c5:24:35:09:58:df:02:3d:91:0c:bd:8d:
af:6f:6f:6e:19:6d:8e:75:20:f3:6f:38:4b:78:64:36:07:e5:
80:6a:c8:9d:86:5f:35:56:a4:27:2c:70:3f:27:78:ab:61:80:
bb:18:74:a9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFakzs6dia9e4Q6+ZDgwlNecBSRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI3NzI2NTNDQTkzRDQwNjhGNkREMURBNThDQkRBQTY1
MTU5OEM5NDAeFw0yNjA5MjExNzI4MjRaFw0yNjA5MjIyMDQxMjRaMDMxMTAvBgNV
BAMTKEIyMDc5RjJENDJCMjM3Nzc5Qzg4NjJFMjI0QjE0QzQ3NjU2RUM0MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpzUowJEJuRtRsGlzMzr0HU+/S
yedR1Nt5EOpkBhLW57Yhx51B6C0j7nt0GXgLRzu36bQeCwp9mzANe/s/RuV0NV2f
qCzv80H9QHcwIkNIQGGWJ5n9bV9yaJIMj/jdrn3W2gVNWJTRdKVx2xAJlZDEpQYD
VZOTCu6srWFlQ1ebM9XWcSWx1N7PgmIFBICDDE5Ijg/+/ugjzVB4D9gcX3rjy4n1
KxQ4E4uVziTPzKb9Gyz6cxJPcIYYyWfR1r5GYA3sjL7vgP/PlTCCzCOP9MR4lvv0
pceS5qQ2vct/0iyzlXJ93x3Jn7MDHcDQU7SKFFP9im03A0c4z0W0pYwC2otdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsgefLUKyN3eciGLiJLFMR2VuxAYwHwYDVR0j
BBgwFoAUS3cmU8qT1AaPbdHaWMvaplFZjJQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmM2ZjA3MDAtOTExNi00YTA1LThmNmItZDhlZGFmZGI3MmVjLzAvNEI3NzI2NTND
QTkzRDQwNjhGNkREMURBNThDQkRBQTY1MTU5OEM5NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80Qjc3MjY1M0NBOTNENDA2OEY2REQxREE1OENCREFBNjUxNTk4
Qzk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmM2ZjA3MDAtOTExNi00YTA1LThm
NmItZDhlZGFmZGI3MmVjLzAvNEI3NzI2NTNDQTkzRDQwNjhGNkREMURBNThDQkRB
QTY1MTU5OEM5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAL4Z9/oBe2Sm95HNiixrPjbeTLqr0rHCeSTJ
4HrVeEV8g4jrvvLzFtSo9qPhSc1Uq32kmCuau6e0S60/2qM/7lcjWiS83dWEssPm
pUW5a5MuA1aFYtVf0mWNEfaZWnopHM5VzLSD/Jckhwl+FZmc3gmE2HFk02IJoBC7
H2dIQ9Urhwb3vUboA9bUOYosXx1g7/2nL4xS047xgHTKyOKlUTrmFG+FPFuD3PIF
6NJg55EfW0TEt/eNeLwT5wG+TKWslP59/jfZzDcdhvuKQ8UkNQlY3wI9kQy9ja9v
b24ZbY51IPNvOEt4ZDYH5YBqyJ2GXzVWpCcscD8neKthgLsYdKk=
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:58:48 2026 by rpki-client