
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
File: 0446D571B5FD57D22786B0872C74829904EAAB9F.mft (raw, json)
Hash identifier: hXgN1NbpRXZZ1/hEmU+Tij0FfNhzKVcGbx1i5FnXz1A=
Subject key identifier: AA:D4:71:F6:5E:61:33:43:FF:98:56:DF:ED:6B:25:CF:87:BD:CE:1E
Authority key identifier: 04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F
Certificate issuer: /CN=0446D571B5FD57D22786B0872C74829904EAAB9F
Certificate serial: 61315392899DF940E6B7FE47365FBF43370CEE97
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
Manifest number: 70
Signing time: Thu 23 Jul 2026 17:00:40 +0000
Manifest this update: Thu 23 Jul 2026 16:55:40 +0000
Manifest next update: Fri 24 Jul 2026 17:14:40 +0000
Files and hashes: 1: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: kaGHUTZEr4BI633+KX6qHXh8OmneAQRf7YHLIlmtSgU=)
2: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: aC4RLZpJ1CIL1Btz47Fr7aIh879KOm3isCxWG9+kLpI=)
3: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: K+7+KqgCp4d18TVZTPxmAsUlKSyTdPx9xS3oBJGcNok=)
4: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: +WRWxjAdOAaW9ozUiBysIyJuRRO3IGup2Zv05rrzhoE=)
5: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: RykC0CgepUzoO/XGaABN4CTb5JdoVGJrzeKzsVUCn3M=)
6: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: ecVKsNk2S0Aj+ACqfjrNpX8pv8RXijVnKVy2HYKiIA0=)
7: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: thRIrZ3+blRuGrSxkOAlYh2ltCPP95UB2kgDE2dzqA4=)
8: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: HRGJ5g7ob2C6LusF30ZyigavwWaGRf5eI1zjWJC6sRM=)
9: 0446D571B5FD57D22786B0872C74829904EAAB9F.crl (hash: sNokMO6FKYlJ2N5o875zF9tXDJFrmEoCzUZbKDHY4Wc=)
10: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: JHRytoLKe3DoWLn6hLaaCfBPYIXsYxniAiTb3PYHUfQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl
rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 17:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:31:53:92:89:9d:f9:40:e6:b7:fe:47:36:5f:bf:43:37:0c:ee:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0446D571B5FD57D22786B0872C74829904EAAB9F
Validity
Not Before: Jul 23 16:55:40 2026 GMT
Not After : Jul 24 17:14:40 2026 GMT
Subject: CN=AAD471F65E613343FF9856DFED6B25CF87BDCE1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:cc:8c:8b:7f:93:d6:65:ea:d7:16:fd:b2:
70:d3:3f:04:12:4b:f0:52:63:c3:d5:80:6e:6b:7c:
ab:df:0d:62:8f:38:83:f3:42:8e:6e:9d:eb:29:ad:
6e:f5:51:a5:2f:c5:58:8f:6f:9a:fd:d3:d5:c1:b4:
9b:a6:02:16:59:b6:a0:4d:4e:0e:ee:d3:f7:24:a4:
7b:22:be:ae:a2:b4:36:0e:d2:6d:03:10:2d:34:6a:
ee:66:86:cc:ed:86:01:06:da:47:1d:3d:e5:f6:fe:
91:40:3a:8e:f2:a2:a8:e6:4b:63:1a:04:c4:8f:ca:
32:32:77:22:83:24:78:56:92:48:70:75:1b:02:64:
1c:db:65:53:ec:bd:47:ea:6b:e1:fc:d9:aa:a3:c5:
e8:48:70:a6:15:5f:42:57:a0:c7:ba:d6:ab:c5:fc:
1f:b8:00:ec:80:20:3e:8e:d3:cb:9f:82:0f:be:b9:
63:08:54:fd:df:8d:c4:d0:f5:81:39:c6:fb:8c:f9:
b2:5e:3e:8a:fd:4e:03:1f:69:e5:00:de:5e:20:8a:
b9:10:de:77:45:bf:c8:79:d7:b1:f2:55:76:08:e8:
e9:aa:d0:26:72:d4:e1:88:91:f1:fc:9e:4f:a2:f8:
47:93:1b:c5:18:c7:70:bd:23:04:8e:e2:61:e1:af:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D4:71:F6:5E:61:33:43:FF:98:56:DF:ED:6B:25:CF:87:BD:CE:1E
X509v3 Authority Key Identifier:
keyid:04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:22:ad:fd:b2:f6:4a:dd:8c:0c:44:8b:77:ec:82:42:3a:b6:
4e:98:6f:b8:01:15:b3:c5:16:41:47:88:03:c3:c9:8e:51:d5:
64:14:c2:ee:12:9f:ac:71:98:65:79:fe:95:94:71:be:b6:8d:
96:e0:6a:12:b1:63:ed:a2:ea:2f:d1:f9:d8:1a:bd:05:7c:90:
26:8b:13:28:18:c2:28:78:bb:29:1c:eb:b1:46:e2:34:12:22:
71:45:14:6d:9b:bd:a0:df:b6:cd:93:a3:58:82:d4:d1:63:14:
63:fd:ce:ac:3e:68:07:1b:ed:77:87:85:dc:ba:0c:d8:a5:c4:
e8:61:83:b7:e1:9a:3a:2b:25:2a:7d:88:82:a3:f2:05:23:7a:
3c:aa:aa:04:25:c5:d1:fc:17:ca:22:c8:c0:04:a8:80:b1:d0:
3f:d8:43:4d:ac:f7:8b:9d:0e:25:ef:5b:bb:c1:59:87:2e:cc:
b4:8f:9a:90:a2:3b:ca:ef:65:f9:5f:40:f8:cc:e7:e8:06:7b:
7c:68:b1:e3:d6:62:b4:33:5e:0f:16:d4:66:4e:87:0c:1e:ac:
af:cf:c2:36:11:ac:2b:19:69:20:60:11:a2:eb:5b:77:a9:9f:
2e:02:93:d6:f1:eb:bb:3d:80:47:6b:2d:85:34:0d:8e:b3:e4:
d3:cd:23:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:57 2026 by rpki-client