
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.mft
File: 04802014594DAC827C3F8FBF392DF25D2C1943C5.mft (raw, json)
Hash identifier: Yj/MiYwdzRESZi3FwZAPw0CtYjWsFBCjisZUwRF2WYU=
Subject key identifier: 40:0A:34:8E:67:C8:72:51:EF:D4:14:87:B4:24:1A:49:70:BA:71:3B
Authority key identifier: 04:80:20:14:59:4D:AC:82:7C:3F:8F:BF:39:2D:F2:5D:2C:19:43:C5
Certificate issuer: /CN=04802014594DAC827C3F8FBF392DF25D2C1943C5
Certificate serial: 3DD261C35EF5355EA88EF4D4111B61DB9E3B3E49
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04802014594DAC827C3F8FBF392DF25D2C1943C5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 16:00:53 +0000
Manifest this update: Wed 23 Sep 2026 15:55:53 +0000
Manifest next update: Thu 24 Sep 2026 19:49:53 +0000
Files and hashes: 1: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: DPbwWaqhZhIf++Ujgi9BYNcGolMoqcI02wvNDZg4xw8=)
2: 04802014594DAC827C3F8FBF392DF25D2C1943C5.crl (hash: 4m102EnTRigueSY1WFZgXnTFXM45T+2U2gNg6gwSzdk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.crl
rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04802014594DAC827C3F8FBF392DF25D2C1943C5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 19:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d2:61:c3:5e:f5:35:5e:a8:8e:f4:d4:11:1b:61:db:9e:3b:3e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04802014594DAC827C3F8FBF392DF25D2C1943C5
Validity
Not Before: Sep 23 15:55:53 2026 GMT
Not After : Sep 24 19:49:53 2026 GMT
Subject: CN=400A348E67C87251EFD41487B4241A4970BA713B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:fe:33:a4:5f:5d:e6:6e:6e:e4:d7:e5:94:
87:ea:f5:53:75:a6:07:07:e7:8e:02:9c:be:dd:75:
e0:35:ae:21:93:bf:95:b7:78:dc:54:b0:68:0c:6e:
dd:71:fd:12:b2:f9:53:9c:31:f9:fd:83:ee:74:43:
52:49:c9:02:c5:ee:64:6b:e1:ef:ef:b3:07:e6:6a:
fd:25:b8:2a:5b:7a:b7:e2:4b:bc:4e:e5:d7:d7:37:
6c:4c:d8:11:bb:8c:2a:18:2b:91:38:f4:0d:38:78:
08:0d:51:6a:cd:16:86:22:3e:f9:eb:1a:d2:5a:29:
09:10:77:09:a2:9f:2b:1d:48:d4:86:89:5b:8e:83:
af:e0:0f:43:30:30:5f:5a:ce:36:b6:bc:3b:2e:68:
a6:6c:64:ba:25:54:77:91:a6:e9:f1:79:40:47:b2:
0b:16:b9:53:2c:9f:1a:5f:da:85:f1:1a:21:ce:a4:
78:ed:01:d7:41:93:ec:e2:fd:39:5d:f1:2b:2c:f9:
23:8c:16:bb:19:22:b2:25:8d:c0:ec:02:98:75:d3:
78:c0:fb:0c:96:04:58:96:66:8a:f4:67:db:eb:e8:
2b:45:44:b4:d0:99:7a:da:f7:b8:8b:5d:66:35:3c:
e2:d3:60:9a:3a:10:91:a4:4e:b6:78:c1:07:5b:cc:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0A:34:8E:67:C8:72:51:EF:D4:14:87:B4:24:1A:49:70:BA:71:3B
X509v3 Authority Key Identifier:
keyid:04:80:20:14:59:4D:AC:82:7C:3F:8F:BF:39:2D:F2:5D:2C:19:43:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04802014594DAC827C3F8FBF392DF25D2C1943C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/04802014594DAC827C3F8FBF392DF25D2C1943C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fb:96:7d:57:24:f5:0d:81:2f:a3:1d:ef:d7:c9:d0:3a:16:
69:31:59:b8:a6:f3:9c:e8:39:11:05:ad:26:dc:8d:8a:a6:f1:
ed:ff:ec:51:94:95:24:96:42:ed:0c:86:e1:a1:ec:61:e4:eb:
a5:86:4a:91:d2:a8:14:c7:08:fe:0e:a3:72:8f:41:20:f0:c7:
f4:0f:c8:bf:ab:f7:8d:12:e9:06:16:4b:28:94:59:81:43:b7:
41:10:10:fb:d5:8c:3a:47:e5:a6:c7:a7:fc:3d:2a:1b:1e:c4:
d0:80:65:e2:8d:14:a4:7b:24:b2:93:24:82:41:c7:d3:a6:f7:
d7:cd:89:18:d0:de:71:aa:12:30:d7:0a:5a:35:68:ad:53:ae:
87:ec:52:82:38:1e:2a:32:68:c1:a1:bc:6f:dc:bd:93:50:f2:
d7:de:7f:f8:af:5e:f2:e1:ba:02:7d:1c:45:e5:c1:65:93:fd:
6e:37:18:55:94:fc:94:59:10:4d:cd:92:1f:74:21:bc:70:53:
f6:82:2d:f5:a8:aa:e5:21:ee:ce:49:ac:7e:67:11:38:7c:63:
31:d4:a0:6a:12:b1:fc:a0:27:ed:40:62:50:98:84:6c:a6:73:
58:9b:0a:dd:7b:c2:99:7f:f0:13:83:83:c9:05:8f:52:a5:f9:
f7:a5:66:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:14:34 2026 by rpki-client