
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/1956B47266ADE221B617582972A27AAFA0CA985C.mft
File: 1956B47266ADE221B617582972A27AAFA0CA985C.mft (raw, json)
Hash identifier: 26Fk5w7isphRaGR0pUnXq3+jvlbvL1y/yqLVkAFyW7w=
Subject key identifier: 48:61:66:FC:E7:89:1A:59:75:CC:5A:69:7F:59:A6:DF:97:F3:A9:09
Authority key identifier: 19:56:B4:72:66:AD:E2:21:B6:17:58:29:72:A2:7A:AF:A0:CA:98:5C
Certificate issuer: /CN=1956B47266ADE221B617582972A27AAFA0CA985C
Certificate serial: 4F3BF27CA289BAF051CC85BF08AB0C799DC39724
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1956B47266ADE221B617582972A27AAFA0CA985C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/1956B47266ADE221B617582972A27AAFA0CA985C.mft
Manifest number: C8
Signing time: Tue 29 Sep 2026 03:23:49 +0000
Manifest this update: Tue 29 Sep 2026 03:18:49 +0000
Manifest next update: Wed 30 Sep 2026 05:17:49 +0000
Files and hashes: 1: 3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa (hash: ZU9AWpUxdYUG4I1ckl8naoTziQnadPPBJeiNhP+hrxg=)
2: 1956B47266ADE221B617582972A27AAFA0CA985C.crl (hash: NfpL9CEtO803uq7VDX189thmHFUZoB2awlIXIES0ty8=)
3: 323030313a6466343a6530303a3a2f34382d3438203d3e20313335343731.roa (hash: 3oRCKXggP03TeYQfADSPnmZ6NQSG34iI7wDxyEe4xKM=)
4: 3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa (hash: sEoDdkF8E12rhFyrBqgXKYDjsjxjw7jMWvx8tEjZJI0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/1956B47266ADE221B617582972A27AAFA0CA985C.crl
rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/1956B47266ADE221B617582972A27AAFA0CA985C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1956B47266ADE221B617582972A27AAFA0CA985C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:3b:f2:7c:a2:89:ba:f0:51:cc:85:bf:08:ab:0c:79:9d:c3:97:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1956B47266ADE221B617582972A27AAFA0CA985C
Validity
Not Before: Sep 29 03:18:49 2026 GMT
Not After : Sep 30 05:17:49 2026 GMT
Subject: CN=486166FCE7891A5975CC5A697F59A6DF97F3A909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:81:d5:b9:71:b8:87:cd:7f:f7:dc:bb:62:
24:63:7f:7b:b4:b7:4b:18:6a:11:cb:04:2a:bd:31:
49:47:2c:33:11:76:eb:8a:45:ed:c0:3e:dc:93:fb:
d9:13:a8:0b:d5:3a:b9:0a:22:3e:d8:60:b9:77:af:
df:3b:b9:56:c5:85:3a:26:20:16:fe:a1:b7:25:42:
77:6f:df:68:a1:63:62:dd:e2:44:89:09:78:72:6c:
12:87:ab:fb:21:9f:ea:94:d2:e1:45:76:86:2c:b7:
33:ed:5b:c6:fc:5d:26:80:3e:7d:51:f1:11:f1:c3:
17:a3:a3:51:5d:23:32:8b:6f:c3:76:35:f4:f8:15:
fa:01:e7:5a:c8:e6:43:08:2e:59:59:32:1d:f3:4e:
74:73:17:0d:75:2a:d6:aa:f6:06:c9:ca:bd:78:47:
ff:1a:f6:27:22:05:7c:45:f8:c2:3e:0a:e7:32:bf:
4d:f2:3f:26:b4:9a:54:94:34:f4:a5:19:ae:6f:49:
8b:5b:47:70:d4:b1:3f:93:5f:47:b9:bd:f5:db:b3:
ba:cf:01:0a:87:ca:bd:1c:a1:1e:36:31:90:ae:fa:
dc:b8:b8:de:60:df:77:cd:c4:62:00:7e:9a:3f:34:
7f:8d:b6:a9:e3:4b:f0:fb:1b:8b:d9:c7:f1:69:ff:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:61:66:FC:E7:89:1A:59:75:CC:5A:69:7F:59:A6:DF:97:F3:A9:09
X509v3 Authority Key Identifier:
keyid:19:56:B4:72:66:AD:E2:21:B6:17:58:29:72:A2:7A:AF:A0:CA:98:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/1956B47266ADE221B617582972A27AAFA0CA985C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1956B47266ADE221B617582972A27AAFA0CA985C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/1956B47266ADE221B617582972A27AAFA0CA985C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f2:32:1f:dc:c7:b1:0e:32:4e:0b:38:55:70:11:d3:63:e8:
80:10:1c:80:85:e6:37:f8:71:4a:2d:26:dc:68:d7:11:fd:b2:
c6:9e:54:86:e1:83:21:e2:ba:7a:0c:e3:42:9e:b5:9f:32:aa:
15:87:47:31:17:84:fc:9d:ae:d1:ae:6e:af:61:a8:32:d1:8d:
12:d5:1b:2a:3f:27:b7:f7:38:c8:f2:42:e6:1c:0e:4f:e4:62:
2f:ec:a6:c9:6e:b6:d5:65:1f:c5:33:4f:63:f0:bd:b5:af:7a:
c0:ba:24:92:3c:49:17:df:f0:ae:21:8e:dd:2a:19:90:97:83:
4d:4e:f6:63:43:01:2e:c4:cb:2d:d4:0a:45:a7:17:97:23:0a:
17:9f:a3:f9:08:f3:ff:d9:a0:e4:a4:a5:92:4e:58:76:2d:db:
97:17:f3:5a:3d:7c:f5:d7:62:74:40:6d:8c:f0:63:2f:10:9d:
b2:54:e3:32:6e:36:08:f1:0f:23:d4:4b:ba:98:c4:78:33:2a:
1d:0c:cb:76:6a:76:16:06:d9:59:8b:da:d8:14:32:e2:f7:2d:
38:51:40:5c:af:c7:52:43:75:c2:cb:b9:f5:a8:0e:99:3d:c9:
37:ef:71:c0:42:fe:26:d4:cf:b3:b9:6e:b9:19:af:12:f3:46:
38:ac:57:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:48:33 2026 by rpki-client