
$ rpki-client -vvf rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
File: 4A690EC844644FC7C72921E7FA9D8B8827A68133.mft (raw, json)
Hash identifier: 30S+k9oeGIuHQ0bIYWplXbLTd6O9Ffc0c7wqyohFa2w=
Subject key identifier: 3C:63:8A:33:78:FF:ED:18:49:F0:D4:0E:60:ED:32:4F:FB:28:EF:FC
Authority key identifier: 4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33
Certificate issuer: /CN=4A690EC844644FC7C72921E7FA9D8B8827A68133
Certificate serial: 194D38B145154A15176ACC531F9A4CC57E50776E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
Manifest number: 70
Signing time: Thu 23 Jul 2026 23:33:36 +0000
Manifest this update: Thu 23 Jul 2026 23:28:36 +0000
Manifest next update: Fri 24 Jul 2026 23:49:36 +0000
Files and hashes: 1: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: pESLqdHWwG9pCnMMcNgeB95CfcGiK8SY4ni1NsaDZJU=)
2: 4A690EC844644FC7C72921E7FA9D8B8827A68133.crl (hash: tDhKJ0XZ2PauKiGoNyWONbTI2zXG8xs0XTzksCVawlA=)
3: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: UugzJo0XG4CnPFobTcgFSX6/vfuVvh/vQ7HS0KjLKPQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl
rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:4d:38:b1:45:15:4a:15:17:6a:cc:53:1f:9a:4c:c5:7e:50:77:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A690EC844644FC7C72921E7FA9D8B8827A68133
Validity
Not Before: Jul 23 23:28:36 2026 GMT
Not After : Jul 24 23:49:36 2026 GMT
Subject: CN=3C638A3378FFED1849F0D40E60ED324FFB28EFFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:40:ce:c8:c0:d6:ac:8b:d0:a8:76:6d:95:
33:3a:62:86:ef:5c:f4:86:fa:54:53:b0:58:26:46:
65:a8:4f:e7:9f:12:01:bd:1b:84:46:dd:64:ea:ce:
0c:ab:6f:89:b4:fd:11:f0:11:0f:d9:77:ba:49:b8:
cf:83:56:48:db:59:06:d7:78:1a:80:90:ef:e1:68:
10:0c:c2:87:8a:68:1e:d5:12:b5:e9:4c:1a:60:68:
45:b9:85:ac:f6:2b:c6:16:70:79:0d:8f:6f:d2:8e:
85:6a:10:79:7d:76:32:d0:f4:e4:e9:9a:18:4f:e2:
10:d6:f0:83:1e:87:cd:58:8c:f1:74:fe:ca:be:25:
a7:f5:60:28:6e:f2:dd:e4:06:8a:5e:54:7a:db:54:
32:0a:e7:20:48:a6:08:8a:f5:e2:91:db:4d:44:b4:
c3:15:59:f1:05:de:18:bd:8a:64:d9:0f:9b:9d:cc:
27:51:04:39:0e:8a:ad:82:99:cf:a6:57:d5:ef:db:
eb:4c:87:b5:b2:1d:64:de:c8:80:5d:c8:2d:fd:e8:
5b:6f:d6:0d:32:65:16:7c:96:8f:06:23:b7:98:6e:
8f:dc:d1:8c:b9:76:c8:f6:51:71:3c:ed:30:a4:99:
4f:db:2f:24:96:28:d2:54:88:a2:3b:8a:96:ed:8c:
f0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:63:8A:33:78:FF:ED:18:49:F0:D4:0E:60:ED:32:4F:FB:28:EF:FC
X509v3 Authority Key Identifier:
keyid:4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a5:42:a9:b1:4e:e8:a6:ac:a3:84:58:7c:63:03:ef:90:1d:
54:3c:35:b8:c6:ac:0d:84:73:4f:d2:7e:7c:9b:8b:46:35:80:
72:a5:5e:cc:a1:c8:be:91:87:50:91:9b:50:46:9a:86:09:1a:
79:2d:2f:30:75:18:70:b8:9a:53:ce:b5:27:87:1d:7b:c1:f2:
6f:fd:d5:1a:09:54:9c:47:91:7f:1b:99:84:38:dd:5c:a8:2e:
e2:d1:64:ed:6b:9c:46:c7:f7:f4:0a:89:74:92:75:15:3b:30:
8b:07:30:67:4e:e4:ef:f9:12:16:8f:d8:6a:30:2d:53:4c:c1:
75:4b:bc:e2:b1:24:5b:8b:42:e1:d4:e2:12:5c:8e:87:2f:27:
84:7c:46:9d:dc:7a:e8:65:73:87:3a:c3:9d:13:6d:07:20:21:
7d:06:f8:ea:74:0a:7d:da:25:40:56:7d:d9:8c:72:42:b6:18:
87:d0:6b:5f:5d:11:69:85:5e:b9:58:b0:1e:d9:24:76:b5:d6:
e3:3d:33:a8:4e:80:02:7e:58:39:93:7d:bb:30:16:32:e2:2a:
7d:f5:e6:af:45:fd:2f:b4:b0:48:d0:7c:dc:df:7b:27:f5:4f:
4c:f8:6f:ea:e9:d0:de:58:05:b4:11:e9:62:f0:54:80:5d:41:
c9:27:52:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:23:17 2026 by rpki-client