
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
File: 0446D571B5FD57D22786B0872C74829904EAAB9F.mft (raw, json)
Hash identifier: NrywEwo4RmDyh2mIIrZ5ZzpIJ3BnJySI1w8Xf+SpcOk=
Subject key identifier: 5D:A3:08:98:CB:45:DE:2B:8E:B1:0C:9A:3E:A8:58:DD:40:91:2B:52
Authority key identifier: 04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F
Certificate issuer: /CN=0446D571B5FD57D22786B0872C74829904EAAB9F
Certificate serial: 4A0DFFF8FFF5C523824A08C9C68075A267246958
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 12:42:55 +0000
Manifest this update: Tue 12 May 2026 12:37:55 +0000
Manifest next update: Wed 13 May 2026 15:05:55 +0000
Files and hashes: 1: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: ecVKsNk2S0Aj+ACqfjrNpX8pv8RXijVnKVy2HYKiIA0=)
2: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: kaGHUTZEr4BI633+KX6qHXh8OmneAQRf7YHLIlmtSgU=)
3: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: thRIrZ3+blRuGrSxkOAlYh2ltCPP95UB2kgDE2dzqA4=)
4: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: aC4RLZpJ1CIL1Btz47Fr7aIh879KOm3isCxWG9+kLpI=)
5: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: +WRWxjAdOAaW9ozUiBysIyJuRRO3IGup2Zv05rrzhoE=)
6: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: JHRytoLKe3DoWLn6hLaaCfBPYIXsYxniAiTb3PYHUfQ=)
7: 0446D571B5FD57D22786B0872C74829904EAAB9F.crl (hash: ztMyziKQQMLOZzSEHhbb2lGsCjR5z1SHggdUany9Ibs=)
8: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: K+7+KqgCp4d18TVZTPxmAsUlKSyTdPx9xS3oBJGcNok=)
9: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: HRGJ5g7ob2C6LusF30ZyigavwWaGRf5eI1zjWJC6sRM=)
10: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: RykC0CgepUzoO/XGaABN4CTb5JdoVGJrzeKzsVUCn3M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl
rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:0d:ff:f8:ff:f5:c5:23:82:4a:08:c9:c6:80:75:a2:67:24:69:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0446D571B5FD57D22786B0872C74829904EAAB9F
Validity
Not Before: May 12 12:37:55 2026 GMT
Not After : May 13 15:05:55 2026 GMT
Subject: CN=5DA30898CB45DE2B8EB10C9A3EA858DD40912B52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:e6:71:5e:c5:2c:5c:c8:f5:f8:f3:ad:35:
78:52:33:e3:b3:a3:02:a1:5a:59:db:bf:ce:61:3d:
dd:59:17:d5:cd:cf:2d:cf:f9:bd:12:41:7e:46:8b:
dc:a3:ec:a2:8d:8e:3c:63:86:bb:c1:32:fb:75:c4:
dc:e9:51:49:83:88:27:73:50:15:21:d7:b0:7e:e4:
99:8e:bd:1a:98:2c:17:a5:65:95:4e:9e:5c:fb:dd:
51:39:35:8d:0f:64:6f:8f:a6:25:74:be:d1:e3:71:
c7:f0:c3:f6:44:6e:40:bf:61:df:8a:d5:bf:a3:fd:
c6:a2:d8:33:f4:41:f9:78:ed:68:8f:f7:8c:71:ce:
04:33:bf:19:0e:1a:c4:0f:e9:15:96:1b:98:e1:88:
0f:38:3f:c6:0e:e5:d0:de:20:93:84:84:1e:60:34:
f1:d0:69:48:cf:f4:ad:60:ab:70:6a:0a:9b:e4:c6:
4e:10:13:73:24:35:9c:7b:6c:08:85:40:6b:6a:9f:
b7:9e:26:6d:95:68:31:74:ea:dd:fc:c0:75:c7:cf:
55:e2:37:04:c6:61:b6:f4:79:b4:be:15:72:c9:b7:
1a:cd:46:e4:ee:07:8e:11:8d:50:31:ed:d7:df:07:
3b:d8:e5:e2:73:63:5b:3f:db:85:ef:7f:d3:ab:f3:
0c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A3:08:98:CB:45:DE:2B:8E:B1:0C:9A:3E:A8:58:DD:40:91:2B:52
X509v3 Authority Key Identifier:
keyid:04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:5f:7f:aa:51:12:b8:b2:be:df:52:a3:3f:51:49:79:51:b3:
1a:3a:3f:a2:d7:a2:b3:1f:49:fa:6d:fa:1a:7e:f1:94:f5:78:
4a:ff:30:f1:6b:59:4f:cc:6c:26:41:5a:31:41:f9:ad:80:c1:
0c:82:83:4a:13:5b:8b:7b:d2:f7:04:c8:39:21:eb:f7:d6:8d:
8c:ed:3e:e8:57:37:ef:fa:c7:7b:fa:b6:e5:37:b1:38:b9:5a:
81:6a:c4:31:68:cf:20:ab:4f:5c:01:2d:56:3e:d1:1d:eb:5f:
4a:42:01:8f:21:38:eb:cc:ab:1b:8d:28:07:5b:f0:ad:48:7b:
43:36:61:c4:65:7c:c5:89:79:54:af:ab:d0:d6:cb:41:19:f0:
a5:f2:12:72:f6:04:fd:8c:68:d0:55:36:12:3f:61:7c:bf:e9:
00:a5:36:17:72:2f:ec:2a:e3:2c:d5:b8:0e:6a:d7:d5:5b:9c:
7c:7e:11:fd:79:09:2b:7a:a4:9e:d6:7d:ef:87:d5:17:69:31:
b4:ea:ff:1e:a7:1b:59:ab:69:d1:ea:a1:56:40:49:fe:f8:c6:
a2:dc:3a:8a:92:e8:84:e9:d2:35:d8:8b:5c:50:af:1c:e2:a0:
a0:b8:8d:b4:3f:b4:db:9e:11:33:b9:4b:3f:bd:eb:38:66:7f:
52:05:b4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:06 2026 by rpki-client