
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft
File: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft (raw, json)
Hash identifier: rl26rL4MvDeR7e7t8/ghxVPYmTSSwl19Na0fNCImPQ4=
Subject key identifier: 01:0E:0C:E4:78:32:1B:DF:AD:8A:5F:60:C5:E0:54:06:F6:3C:B8:08
Authority key identifier: 4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44
Certificate issuer: /CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244
Certificate serial: 36D828BBE289CC8E70BF3F5B87CD5C8F6AFF27A2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft
Manifest number: 0111
Signing time: Sun 15 Nov 2026 05:51:28 +0000
Manifest this update: Sun 15 Nov 2026 05:46:28 +0000
Manifest next update: Mon 16 Nov 2026 07:48:28 +0000
Files and hashes: 1: 323430313a626534303a3a2f33322d3332203d3e20313336383431.roa (hash: Ves5jRMi/5EDvNVgjq2NV5Rewvezf6fsTEyfpVhJ6T4=)
2: 323430313a626534303a626535373a3a2f34382d3438203d3e20313336383431.roa (hash: EDOA776ZBXiqiY4eqigWvv/+QyZHm7LfEzPSamLmh/0=)
3: 323430313a626534303a623630323a3a2f34382d3438203d3e20313336383431.roa (hash: 78TydUmxf9GHgX1Agqkz3/BZHEMvi8Tt2ihO1Z/Fz48=)
4: 323430313a626534303a3838383a3a2f34382d3438203d3e20313336383431.roa (hash: eCcjsEvFJImaEokWvZN6tjThYT7Ao5ZfbDlrEDWVz0M=)
5: 323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa (hash: Q+ngoFu885sNrsbrQRL3AeApBJ1Eb5cBUZ33V1u7hNU=)
6: 323430313a626534303a343030303a3a2f34382d3438203d3e20313336383431.roa (hash: rDva47R8c0GLS0PITsAoWHne7friMNaYf5+1QgY8skY=)
7: 323430313a626534303a323031333a3a2f34382d3438203d3e20313336383431.roa (hash: 0dVO2U/e4KocHPPJF0rYgdh1j1cflMspgiMZuuPT6P0=)
8: 323430313a626534303a373331323a3a2f34382d3438203d3e20313336383431.roa (hash: 5OgzEAW/g/SRvoPB9AqawBtKsq0L83am9x6K2N/QNx8=)
9: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (hash: 2ukK53+fe7S5M2zaDBH1WtDgIsIsj4+Dshs68GBh99o=)
10: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (hash: lcj9Lo8ozccThBUG7wqDK1apaR2k1E0ODhzzBgFVW1M=)
11: 323430313a626534303a3636363a3a2f34382d3438203d3e20313336383431.roa (hash: lxs0QxceYfBfQBIsSiWBKsBI3ZvM+Jpb3ALFBdKG9KU=)
12: 323430313a626534303a623135613a3a2f34382d3438203d3e20313336383431.roa (hash: jd3vHaB8q+AqvNTiv+qYIQMgI88XtveZzMhnkYPnSgU=)
13: 4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl (hash: 4KzRDWB/9inRGCKazqR7AOFK6bQ5XL+1tt4DAtGHTlA=)
14: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (hash: z5zbKQho3avhtYmaIotiPUiQQJ/mO8YtqexQXDW4gG0=)
15: 323430313a626534303a316632613a3a2f34382d3438203d3e20313336383431.roa (hash: KVIx9MqRz+qX3+vcH5zJGXq2ddLKxWGGE2TzgtXK/JQ=)
16: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (hash: 1SNuWHPKyjm9i33KVxLucA1qoW0DruITzpVEbkOYzp4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl
rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 07:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d8:28:bb:e2:89:cc:8e:70:bf:3f:5b:87:cd:5c:8f:6a:ff:27:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DA11D5AF5F17AE716519F84A263E1A5E57D5244
Validity
Not Before: Nov 15 05:46:28 2026 GMT
Not After : Nov 16 07:48:28 2026 GMT
Subject: CN=010E0CE478321BDFAD8A5F60C5E05406F63CB808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:d4:c3:f8:48:ab:af:74:a8:c0:d1:9d:51:
04:31:ff:10:60:1c:5c:14:7f:ed:13:10:fa:26:60:
ea:2a:db:b7:a7:b0:ef:1b:79:8e:06:12:b0:ce:05:
a7:07:40:3c:c0:b3:b7:e4:ae:4f:a8:87:7d:07:82:
3b:27:64:bc:b4:98:1e:bc:ed:8a:44:5d:d3:fc:d1:
72:2d:63:b8:bd:03:1a:1f:0f:49:13:36:11:26:b4:
f8:17:19:99:0c:04:37:7b:3b:95:0d:0a:41:75:bc:
5b:45:91:e3:26:92:2d:fd:60:62:e6:e7:8f:b4:e6:
1e:34:e0:83:81:b3:f6:39:fb:c6:1d:aa:e5:28:e7:
1a:f1:63:7f:0c:1c:c2:2a:a7:89:db:ec:b2:07:f9:
f0:8e:96:cb:5b:99:7c:1d:6e:74:f7:29:8e:1f:e1:
94:49:4d:d1:52:6a:7b:84:da:e2:e1:46:ba:26:d6:
55:95:07:a3:51:a2:56:02:dd:6f:44:47:8e:6e:0c:
9e:e6:5d:de:b4:51:12:8a:59:1b:fb:0a:50:2a:0c:
3c:53:c8:9a:9d:c5:d6:95:aa:8d:cf:ad:47:9d:88:
ba:a8:2a:aa:24:b5:a8:2f:2e:b3:a2:64:79:29:69:
b7:72:36:17:2f:c9:27:8f:37:dd:3a:55:1b:9f:ab:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0E:0C:E4:78:32:1B:DF:AD:8A:5F:60:C5:E0:54:06:F6:3C:B8:08
X509v3 Authority Key Identifier:
keyid:4D:A1:1D:5A:F5:F1:7A:E7:16:51:9F:84:A2:63:E1:A5:E5:7D:52:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/4DA11D5AF5F17AE716519F84A263E1A5E57D5244.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:13:ef:03:3d:19:96:ce:19:f5:d0:17:8b:31:34:0a:a0:17:
72:92:ea:96:2a:fa:95:9e:bf:c7:ce:4b:c1:4c:f6:e2:03:a5:
88:25:ac:62:62:95:b1:d7:1b:d0:f7:4b:57:a1:ee:22:eb:2c:
4a:37:29:32:00:d0:61:03:69:65:5e:f4:1e:b9:c2:dc:38:84:
db:55:4e:94:3b:4e:9d:39:39:57:00:f0:31:a6:03:72:62:ad:
1d:eb:0c:b5:b7:cf:21:a3:b4:f4:09:8d:d7:7c:f5:c4:02:75:
b0:c2:a3:0b:4c:a8:0a:51:15:66:86:0f:75:0c:4a:f7:c8:7b:
5d:4e:c4:8f:f3:56:bf:1d:a4:59:46:27:4c:97:79:c0:7a:ff:
af:e1:bb:48:b2:8a:6a:67:d9:0b:17:74:97:00:0d:1c:07:fe:
3e:eb:e9:78:e5:19:3c:e6:0d:e0:45:ee:fa:0e:4e:9c:21:a6:
eb:d9:25:1a:52:48:0e:6b:30:3e:ef:2d:7a:e6:83:15:cb:28:
ea:7a:b0:4b:5a:1a:3a:f7:43:d4:11:b7:84:41:87:0a:29:0d:
16:cc:7c:64:54:60:0e:23:60:a6:12:f6:40:a7:6e:8c:47:62:
1f:61:3d:cb:c8:4c:57:d3:a6:df:f5:24:ba:89:8b:4c:09:68:
52:fc:80:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:00:56 2026 by rpki-client