
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft
File: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft (raw, json)
Hash identifier: V7DO63Xts8kO6rxlJmkw4azuFjJ32UvxZoAWl0r27ok=
Subject key identifier: D3:CE:BC:35:D8:6E:C1:00:F3:E1:6B:0E:3E:2C:B8:44:C8:B3:C2:D2
Authority key identifier: 4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91
Certificate issuer: /CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391
Certificate serial: 50CEA69F5286A583CA482DBEBF7788399E364272
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 18:27:34 +0000
Manifest this update: Thu 23 Jul 2026 18:22:34 +0000
Manifest next update: Fri 24 Jul 2026 19:18:34 +0000
Files and hashes: 1: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: 6pyTfAlzYTBLrXJyXEzbPma6QqEhBhRMnugG93bjYxI=)
2: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: fT4vbblEyZhxJwWJVYRrx1888tV3IqafJdFzwCoLzIU=)
3: 4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl (hash: WvqxmAzSopzfWYZJtEAsV5s9eeiNvChi3BDf3I3SZ5g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl
rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ce:a6:9f:52:86:a5:83:ca:48:2d:be:bf:77:88:39:9e:36:42:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391
Validity
Not Before: Jul 23 18:22:34 2026 GMT
Not After : Jul 24 19:18:34 2026 GMT
Subject: CN=D3CEBC35D86EC100F3E16B0E3E2CB844C8B3C2D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:6a:61:38:57:97:80:60:77:c8:a0:64:1b:
21:32:da:b6:ee:28:4c:0b:aa:12:1a:06:77:bc:0d:
44:97:e2:f3:a6:18:85:42:f0:06:bd:56:ab:9c:8c:
7d:eb:d9:36:f6:ec:6d:34:f7:ed:f3:d8:c5:87:2a:
99:c6:41:30:50:9d:00:d9:51:36:07:df:9e:19:ee:
be:ba:0a:aa:c3:19:20:de:61:3b:8b:ff:ae:50:e5:
36:57:7b:d4:bc:39:0a:06:d5:93:a6:32:c3:3c:79:
5e:6f:09:7b:c5:4d:dd:df:f5:8b:08:03:aa:19:dd:
68:6e:4a:b2:15:f9:26:c8:57:15:c3:fb:75:57:04:
1e:19:db:46:25:dc:13:65:53:79:47:59:87:2a:13:
20:97:a9:bf:a6:f3:82:b1:24:2c:5b:41:7e:05:7b:
05:6e:50:75:75:8c:22:4d:ce:f9:c8:3a:f2:22:64:
38:94:ea:d5:7d:b1:6c:f0:3f:68:db:a8:f9:1a:ca:
c3:b4:9a:11:d8:fe:45:f4:45:5c:fc:37:a6:ee:52:
a4:32:b6:8d:a0:69:8d:ac:30:20:fc:f7:4c:47:bf:
e8:51:73:0c:52:dc:7a:41:24:87:6d:75:10:8a:95:
b4:3c:6d:bd:6f:b9:1c:40:d1:a0:99:fd:26:cd:0d:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CE:BC:35:D8:6E:C1:00:F3:E1:6B:0E:3E:2C:B8:44:C8:B3:C2:D2
X509v3 Authority Key Identifier:
keyid:4D:4C:BE:65:1A:A2:20:F9:08:8E:4D:BB:BC:97:BB:E2:D0:E0:D3:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/4D4CBE651AA220F9088E4DBBBC97BBE2D0E0D391.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d6:de:06:ef:d4:e2:e1:02:c6:89:b8:1f:dd:94:d7:6e:b7:
49:2d:b7:e6:a8:0b:ae:f5:be:84:74:9b:41:3e:85:ed:5b:30:
64:2c:22:22:11:13:32:8f:f0:1a:2c:0c:15:67:a0:07:0e:43:
0d:90:fe:2a:a8:63:2e:d8:7f:b5:db:b5:d9:f3:e3:28:bf:4b:
83:f2:8d:e4:d8:1c:38:30:5f:5f:6f:92:ab:f5:2e:0f:96:38:
cf:c9:9d:e6:0e:bf:a2:09:09:1e:91:64:bf:44:b7:c2:f8:9a:
43:0f:de:55:79:1c:c5:3c:a5:6a:7a:f0:22:e5:27:98:59:fa:
39:23:a2:b7:57:03:05:5c:46:d1:8c:e6:a9:df:08:24:d5:77:
d8:3b:68:86:b5:c5:4e:c9:27:0e:82:cc:85:fb:c1:8b:9b:72:
0e:57:fe:5f:88:54:e7:11:b1:8f:8b:26:eb:9f:fd:aa:32:f7:
c6:03:f4:46:13:db:d7:24:67:aa:c4:97:38:13:a0:a6:36:69:
17:34:ac:a9:67:07:e6:f1:ab:6d:19:77:c1:16:ef:52:ad:11:
21:7e:df:d9:7d:11:4d:e1:ac:8f:fa:4c:6c:a8:87:70:0b:6a:
bc:d7:75:8f:b3:71:e4:2f:22:ae:f5:58:b0:6f:c9:05:60:76:
fa:54:98:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:10:24 2026 by rpki-client