
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft
File: 14649B106FA0C411D7FCD73A4B0147226E8A8454.mft (raw, json)
Hash identifier: FaR1Ebf1LwJxNjysX+POem524BMaFztDt1TNrBqT1Hw=
Subject key identifier: 6B:A5:07:89:A0:66:AF:F1:41:07:6E:8C:0C:3E:E3:3C:20:19:63:54
Authority key identifier: 14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54
Certificate issuer: /CN=14649B106FA0C411D7FCD73A4B0147226E8A8454
Certificate serial: 18929BDEA116DB6FC967CF9A24323EF43A00ED8B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft
Manifest number: C5
Signing time: Fri 25 Sep 2026 17:16:42 +0000
Manifest this update: Fri 25 Sep 2026 17:11:42 +0000
Manifest next update: Sat 26 Sep 2026 17:35:42 +0000
Files and hashes: 1: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: O5MLHMcohhvApO1/L1RvpM2jYbsZVQ8eLBzNQkddTHQ=)
2: 14649B106FA0C411D7FCD73A4B0147226E8A8454.crl (hash: RRMOoTnCGno6pVvpn/jZSFoadcoviLju5BRXmCoQjf0=)
3: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: eR7s3iDJUbgwn7vG0iEll3YQrHiAYjHNsvD28zhjxXY=)
4: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: j+ssfk4JgFO6Pb/CGHEOZfos8czQhoSwZB6YERcUzUI=)
5: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: HpCznd8LAemIm49TlwLV1GhAVKIU4sZ5BY+7TeR1EA4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl
rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:92:9b:de:a1:16:db:6f:c9:67:cf:9a:24:32:3e:f4:3a:00:ed:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14649B106FA0C411D7FCD73A4B0147226E8A8454
Validity
Not Before: Sep 25 17:11:42 2026 GMT
Not After : Sep 26 17:35:42 2026 GMT
Subject: CN=6BA50789A066AFF141076E8C0C3EE33C20196354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5b:5f:9f:a1:ee:b9:2a:15:d5:33:92:af:29:
7d:02:b4:fd:0a:5d:51:66:00:2e:d0:ba:c3:ea:4d:
89:05:d8:5b:a7:1a:8d:fc:b9:39:af:9a:21:7c:54:
13:b8:0a:54:f6:d6:20:33:20:30:38:12:e4:be:f0:
c4:1b:11:eb:39:c0:4f:03:88:15:31:55:ad:f4:8a:
be:6c:e7:df:b5:c3:10:43:20:52:d8:a8:f1:02:db:
b3:ff:c4:c3:53:fe:88:22:9d:67:f2:7d:5a:4e:ee:
7c:78:10:8d:df:9d:fa:26:88:1d:3c:b8:ea:99:9c:
57:f9:6a:d5:36:66:f7:89:ae:56:be:e4:6a:cc:c3:
a4:be:6b:bf:cc:a4:91:1f:78:de:1e:92:a9:b8:4f:
75:1f:b7:6c:26:ff:fb:fe:7e:1a:47:06:67:43:dd:
a1:e1:0c:37:46:5b:a6:9a:c6:bd:95:54:f7:23:fe:
d8:79:d1:96:7b:db:c7:a6:ee:fe:28:52:da:cd:74:
4e:29:5b:73:f7:af:15:f2:f8:64:fb:a0:2b:02:79:
15:0e:28:05:bd:35:c8:47:d3:87:c8:12:9d:57:2d:
34:27:f0:89:f0:4e:5d:87:4a:d8:26:c2:4b:c3:cf:
6e:49:0e:e2:cd:22:41:69:99:c5:af:48:c2:64:ee:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A5:07:89:A0:66:AF:F1:41:07:6E:8C:0C:3E:E3:3C:20:19:63:54
X509v3 Authority Key Identifier:
keyid:14:64:9B:10:6F:A0:C4:11:D7:FC:D7:3A:4B:01:47:22:6E:8A:84:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14649B106FA0C411D7FCD73A4B0147226E8A8454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/14649B106FA0C411D7FCD73A4B0147226E8A8454.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ae:de:e0:10:7a:b4:cf:31:f7:fd:3c:96:3f:4f:33:43:a4:
6e:ae:9d:fe:25:9b:e7:03:be:e8:e8:c5:2b:d3:d9:f1:d1:e5:
28:49:60:87:35:85:3c:77:b0:a5:b6:77:f1:ac:c4:57:cb:89:
8a:80:9d:83:17:6f:bb:8e:ab:b1:32:26:d9:ea:9f:ba:35:25:
e1:aa:7d:b0:d7:a6:b6:c1:38:56:1a:2e:a9:bc:8c:a8:6d:cc:
0e:ff:7f:1a:38:43:ae:bf:a8:3d:3a:45:bc:ed:31:40:78:73:
0d:2f:b6:94:af:10:5e:d6:4b:5b:bc:d8:80:42:00:cf:b0:84:
51:a3:55:5e:ae:b4:fe:04:d3:2b:6f:49:70:fb:22:38:53:f4:
4a:a7:1f:39:ee:99:c9:42:ed:cd:9f:10:d6:49:cb:75:a6:0c:
57:59:f6:34:e3:b9:32:ba:f8:b5:e1:6f:c2:4f:ed:35:a5:42:
21:09:78:f0:15:bc:06:2e:65:12:53:e2:b8:6a:da:2d:1f:61:
98:33:26:8e:f1:86:50:b2:13:19:f5:16:b7:80:75:1f:85:02:
35:f8:40:31:f2:50:91:94:d8:d1:0b:ee:57:db:fd:7b:09:8d:
4f:9f:79:03:0e:17:19:7e:0e:e2:7d:8f:71:70:17:91:39:77:
e5:78:99:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:46:49 2026 by rpki-client