
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft
File: 4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft (raw, json)
Hash identifier: 7SOCStaHKmB+QC6RVwUD3XswuEv8jMczlfjahsXagmY=
Subject key identifier: 07:38:DC:A4:6C:CC:D2:52:51:C6:47:5E:DE:33:A8:65:22:4A:6B:AA
Authority key identifier: 4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83
Certificate issuer: /CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83
Certificate serial: 47126DA880EA67AED2811F9279507CBFDC469C93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 13:21:22 +0000
Manifest this update: Thu 23 Jul 2026 13:16:22 +0000
Manifest next update: Fri 24 Jul 2026 16:45:22 +0000
Files and hashes: 1: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: qdqJ7c5Hmo5/x5QxaNzAn2E9rlL9+lJv31VY+Z/Gpyo=)
2: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: 4wluMrlK+jd2rPJTz82Wk6jGjGeMH7puimCIfaMcuQc=)
3: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: 4Qok18i+EI2L8O6uVAPOVAbbB1P+8P/IPIRW3fo/nPM=)
4: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: FAVDk3FaWOdSpOkw9ME+3ZGQ0KQHtVqOC+nSGAGC2Kw=)
5: 4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl (hash: XiAWFAaodMPrCvlmVhmz/iB8b3I3YG5kfks2NGOUiwQ=)
6: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: wZnkGHXuoZIhhXDMd29VyKe8jWbDQIfBiqevRGFYhXw=)
7: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: cgIEuYKpgRxefyDoprlhU36lSQZoW3T5mu05arwSfsg=)
8: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: JJjFiNRoaXtW7r6WlFCed+2DZ0XR/8IciP9txj6h+7U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl
rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 16:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:12:6d:a8:80:ea:67:ae:d2:81:1f:92:79:50:7c:bf:dc:46:9c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83
Validity
Not Before: Jul 23 13:16:22 2026 GMT
Not After : Jul 24 16:45:22 2026 GMT
Subject: CN=0738DCA46CCCD25251C6475EDE33A865224A6BAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:b5:0d:f3:6e:d6:4d:72:f9:0a:ba:72:87:
1d:41:43:6e:6f:fe:a6:21:7a:58:2c:79:3e:fe:c4:
24:66:10:e6:69:ff:6a:b6:4e:a1:f9:4b:d9:1a:16:
56:06:a9:39:3c:89:7e:55:cd:a0:d1:df:0a:30:83:
cc:cc:ad:e6:94:5e:4b:18:d0:f3:ef:1a:3f:85:f6:
f5:9b:76:01:92:b1:05:2d:c9:c4:e8:dd:8c:47:9e:
46:d6:da:04:93:5d:eb:20:e1:d9:cc:bc:75:8a:55:
0c:37:0f:36:a0:67:59:ef:cb:11:c8:47:ef:5b:e5:
97:9c:43:1f:57:6c:37:38:af:c9:08:1a:b1:ee:59:
b7:38:12:e2:a2:3d:46:79:2e:e6:f0:c3:6f:15:2f:
e0:cb:3e:62:90:9f:9b:0f:45:bd:4a:39:be:71:e0:
9c:1e:d3:24:86:d3:18:f2:d5:7e:88:dd:ec:cd:be:
70:a4:68:85:67:93:2c:61:58:13:f1:4d:a9:68:66:
30:e1:2e:e0:7e:9e:5a:6b:1a:ec:e3:7a:ec:e2:0e:
e2:f2:a5:14:25:f4:d2:83:fa:1e:6b:57:98:15:08:
b6:bf:69:b7:97:76:f3:ff:9b:ce:5c:20:dd:d4:56:
de:da:e5:74:d0:03:ea:9d:ff:6c:02:fc:0b:4f:2a:
7e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:38:DC:A4:6C:CC:D2:52:51:C6:47:5E:DE:33:A8:65:22:4A:6B:AA
X509v3 Authority Key Identifier:
keyid:4F:D9:C4:CB:62:40:81:CE:C4:77:48:A0:AB:67:BE:27:BC:DF:8B:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/4FD9C4CB624081CEC47748A0AB67BE27BCDF8B83.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ae:b1:c6:d4:8e:f0:ef:5a:74:53:dd:c4:98:85:cd:da:8f:
4a:73:6b:17:c1:9c:7f:03:b6:c3:ed:fc:ad:7b:be:b8:8a:b9:
13:5f:1c:b6:cb:a6:52:4b:66:c8:33:fd:ec:b5:61:fa:4c:51:
ad:a1:88:17:83:96:9c:c6:d3:da:73:88:e5:47:fb:61:01:04:
c8:05:21:17:90:8e:f9:93:36:b3:cb:a1:e2:70:29:9e:f7:b5:
33:77:b3:12:72:cd:c0:9a:83:93:15:e1:63:73:3b:41:14:7f:
ae:36:fb:d7:17:1d:91:a8:ad:f1:34:e5:5f:cb:35:38:85:9f:
6e:79:5f:6b:ec:6b:4c:70:42:b1:4b:1c:37:b6:d2:fd:98:13:
1b:94:77:09:4a:a4:e9:fb:e5:8d:12:c2:31:5a:a7:0b:af:b3:
7a:58:68:09:0f:0d:51:36:2c:59:65:39:bd:db:e1:84:00:cd:
2f:9c:1c:4d:70:db:b8:28:2d:94:ce:fe:ec:5a:1a:08:24:c8:
3e:ad:d3:fe:e6:17:f0:56:f2:4d:17:52:48:a8:7e:9f:fe:8f:
d4:75:53:4c:57:62:bb:fa:89:e8:19:9a:90:83:b8:d8:c2:9c:
e1:8e:96:d1:b1:19:81:d2:af:bb:9a:99:7a:b9:6d:70:40:0d:
75:62:72:f6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURxJtqIDqZ67SgR+SeVB8v9xGnJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZEOUM0Q0I2MjQwODFDRUM0Nzc0OEEwQUI2N0JFMjdC
Q0RGOEI4MzAeFw0yNjA3MjMxMzE2MjJaFw0yNjA3MjQxNjQ1MjJaMDMxMTAvBgNV
BAMTKDA3MzhEQ0E0NkNDQ0QyNTI1MUM2NDc1RURFMzNBODY1MjI0QTZCQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43LUN827WTXL5Crpyhx1BQ25v
/qYhelgseT7+xCRmEOZp/2q2TqH5S9kaFlYGqTk8iX5VzaDR3wowg8zMreaUXksY
0PPvGj+F9vWbdgGSsQUtycTo3YxHnkbW2gSTXesg4dnMvHWKVQw3DzagZ1nvyxHI
R+9b5ZecQx9XbDc4r8kIGrHuWbc4EuKiPUZ5Lubww28VL+DLPmKQn5sPRb1KOb5x
4Jwe0ySG0xjy1X6I3ezNvnCkaIVnkyxhWBPxTaloZjDhLuB+nlprGuzjeuziDuLy
pRQl9NKD+h5rV5gVCLa/abeXdvP/m85cIN3UVt7a5XTQA+qd/2wC/AtPKn6RAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBzjcpGzM0lJRxkde3jOoZSJKa6owHwYDVR0j
BBgwFoAUT9nEy2JAgc7Ed0igq2e+J7zfi4MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTU5MmMyNzQtMTFkYi00MTI3LWJhYmItYWVhZTk5Mjg0YjAwLzAvNEZEOUM0Q0I2
MjQwODFDRUM0Nzc0OEEwQUI2N0JFMjdCQ0RGOEI4My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80RkQ5QzRDQjYyNDA4MUNFQzQ3NzQ4QTBBQjY3QkUyN0JDREY4
QjgzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTU5MmMyNzQtMTFkYi00MTI3LWJh
YmItYWVhZTk5Mjg0YjAwLzAvNEZEOUM0Q0I2MjQwODFDRUM0Nzc0OEEwQUI2N0JF
MjdCQ0RGOEI4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEyuscbUjvDvWnRT3cSYhc3aj0pzaxfBnH8D
tsPt/K17vriKuRNfHLbLplJLZsgz/ey1YfpMUa2hiBeDlpzG09pziOVH+2EBBMgF
IReQjvmTNrPLoeJwKZ73tTN3sxJyzcCag5MV4WNzO0EUf642+9cXHZGorfE05V/L
NTiFn255X2vsa0xwQrFLHDe20v2YExuUdwlKpOn75Y0SwjFapwuvs3pYaAkPDVE2
LFllOb3b4YQAzS+cHE1w27goLZTO/uxaGggkyD6t0/7mF/BW8k0XUkiofp/+j9R1
U0xXYrv6iegZmpCDuNjCnOGOltGxGYHSr7uamXq5bXBADXVicvY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:49 2026 by rpki-client