
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft
File: 445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft (raw, json)
Hash identifier: YkFvV1nA8oaxkXo922jyPiN49HmoI+bGZxrUvwC60bY=
Subject key identifier: C0:9D:59:C5:EE:15:FC:47:29:7D:0E:CA:69:CC:3A:C0:32:1B:AD:EE
Authority key identifier: 44:5F:E0:F3:63:AB:30:6E:53:F1:E2:CD:93:9E:FD:8C:8A:10:23:38
Certificate issuer: /CN=445FE0F363AB306E53F1E2CD939EFD8C8A102338
Certificate serial: 19898F3CCD0E7B92477855BDC517F8A92407BC54
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/445FE0F363AB306E53F1E2CD939EFD8C8A102338.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:00:03 +0000
Manifest this update: Tue 12 May 2026 21:55:03 +0000
Manifest next update: Thu 14 May 2026 00:21:03 +0000
Files and hashes: 1: 3130332e36382e3231342e302f32332d3234203d3e20313530353137.roa (hash: d1AieqPDTSFuqQUNZRSOLnDH+s/AlA829gDqC0nNU8o=)
2: 445FE0F363AB306E53F1E2CD939EFD8C8A102338.crl (hash: PrpMb6QKDwkEwU9r0T9/S/yvvyAMkZmVA08tyeYZpJs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.crl
rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/445FE0F363AB306E53F1E2CD939EFD8C8A102338.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:89:8f:3c:cd:0e:7b:92:47:78:55:bd:c5:17:f8:a9:24:07:bc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=445FE0F363AB306E53F1E2CD939EFD8C8A102338
Validity
Not Before: May 12 21:55:03 2026 GMT
Not After : May 14 00:21:03 2026 GMT
Subject: CN=C09D59C5EE15FC47297D0ECA69CC3AC0321BADEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:06:1b:7f:27:21:49:30:e7:40:14:bb:89:
ab:c6:b4:37:88:3e:1f:19:42:a9:cc:ec:92:ba:65:
61:6c:7a:8a:5f:b7:a5:b5:29:e2:a1:2e:7d:89:04:
b5:be:1f:88:62:20:1d:e9:fc:9a:4b:69:ed:87:9c:
82:1f:35:44:69:d4:87:10:d9:7f:c9:7b:bb:e4:16:
51:4e:dc:61:c2:fb:6d:58:21:a4:db:42:ed:34:d2:
19:40:3e:d0:16:be:0e:55:5b:f1:e4:72:d2:ca:52:
35:69:f9:7b:23:0a:f5:64:57:c4:4c:f2:f3:96:e3:
d9:d5:10:93:ae:83:76:6e:06:e8:96:5b:d4:c5:ef:
23:20:a3:7c:3e:9f:35:5b:d2:ed:78:08:0a:52:77:
30:32:89:ba:e8:68:56:0d:2e:ce:29:1f:a1:53:59:
c7:48:a9:7e:44:ed:2c:1e:49:a3:4e:50:1c:03:d3:
fe:5f:d8:99:f1:5f:4d:c0:81:ea:43:eb:3b:8c:d1:
90:d8:cd:52:d7:ab:52:a9:72:95:e9:fe:82:c2:07:
e5:98:0c:e8:b8:6c:ac:23:53:7b:ee:6f:84:69:8c:
3b:5c:12:87:5b:86:f0:92:cc:fa:16:76:d5:bb:20:
55:ba:10:cd:0d:41:c7:38:d7:36:c9:1e:ad:92:a6:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9D:59:C5:EE:15:FC:47:29:7D:0E:CA:69:CC:3A:C0:32:1B:AD:EE
X509v3 Authority Key Identifier:
keyid:44:5F:E0:F3:63:AB:30:6E:53:F1:E2:CD:93:9E:FD:8C:8A:10:23:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/445FE0F363AB306E53F1E2CD939EFD8C8A102338.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/445FE0F363AB306E53F1E2CD939EFD8C8A102338.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a4:27:8d:1c:c8:82:4a:ce:4d:79:61:79:4c:cb:1b:8d:56:
75:31:c9:1c:8a:bb:50:6e:25:12:e1:1b:fa:3b:fc:c9:ff:68:
9c:24:61:bc:3f:94:5c:40:53:0c:40:33:29:95:36:64:87:53:
49:9f:bc:f5:66:4c:99:f0:97:46:78:91:a3:d5:50:a9:75:00:
05:ba:16:55:04:20:2f:f8:49:0a:49:44:69:20:e6:b0:b0:f0:
ef:0c:72:31:9a:90:71:99:9b:2c:3b:39:7a:bd:3c:60:b5:c7:
5b:c9:7a:a1:1b:85:0c:14:01:b8:26:7e:12:eb:8e:c3:42:4c:
78:9a:d3:e9:93:38:03:7a:3c:bc:5b:09:ac:f5:d7:10:82:84:
d1:06:43:fc:45:ae:35:05:0e:60:fd:45:02:46:e1:80:a6:e4:
ac:c8:62:a4:68:55:40:fe:a9:33:b4:50:6e:ef:cf:2f:65:b3:
3a:5e:eb:1d:a7:9d:8f:e6:a1:fe:d8:e4:8b:3f:0e:77:9f:54:
b3:4f:94:50:9e:60:8c:b4:ad:f8:01:cf:a5:49:a7:8e:af:c6:
58:76:c5:ff:a5:6e:3d:9a:b7:c5:9c:2e:c4:62:5c:ce:a4:70:
b3:71:28:68:4a:36:5f:82:3b:f5:ff:ff:27:9f:2a:22:a9:f6:
81:89:35:09
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGYmPPM0Oe5JHeFW9xRf4qSQHvFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ1RkUwRjM2M0FCMzA2RTUzRjFFMkNEOTM5RUZEOEM4
QTEwMjMzODAeFw0yNjA1MTIyMTU1MDNaFw0yNjA1MTQwMDIxMDNaMDMxMTAvBgNV
BAMTKEMwOUQ1OUM1RUUxNUZDNDcyOTdEMEVDQTY5Q0MzQUMwMzIxQkFERUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKAYbfychSTDnQBS7iavGtDeI
Ph8ZQqnM7JK6ZWFseopft6W1KeKhLn2JBLW+H4hiIB3p/JpLae2HnIIfNURp1IcQ
2X/Je7vkFlFO3GHC+21YIaTbQu000hlAPtAWvg5VW/HkctLKUjVp+XsjCvVkV8RM
8vOW49nVEJOug3ZuBuiWW9TF7yMgo3w+nzVb0u14CApSdzAyibroaFYNLs4pH6FT
WcdIqX5E7SweSaNOUBwD0/5f2JnxX03AgepD6zuM0ZDYzVLXq1KpcpXp/oLCB+WY
DOi4bKwjU3vub4RpjDtcEodbhvCSzPoWdtW7IFW6EM0NQcc41zbJHq2SphyRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwJ1Zxe4V/EcpfQ7Kacw6wDIbre4wHwYDVR0j
BBgwFoAURF/g82OrMG5T8eLNk579jIoQIzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGViZjYzZWQtZDQ1MC00NzdlLWIzMWItYWY5MmIxNzI2ZDJlLzAvNDQ1RkUwRjM2
M0FCMzA2RTUzRjFFMkNEOTM5RUZEOEM4QTEwMjMzOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80NDVGRTBGMzYzQUIzMDZFNTNGMUUyQ0Q5MzlFRkQ4QzhBMTAy
MzM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGViZjYzZWQtZDQ1MC00NzdlLWIz
MWItYWY5MmIxNzI2ZDJlLzAvNDQ1RkUwRjM2M0FCMzA2RTUzRjFFMkNEOTM5RUZE
OEM4QTEwMjMzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE+kJ40cyIJKzk15YXlMyxuNVnUxyRyKu1Bu
JRLhG/o7/Mn/aJwkYbw/lFxAUwxAMymVNmSHU0mfvPVmTJnwl0Z4kaPVUKl1AAW6
FlUEIC/4SQpJRGkg5rCw8O8McjGakHGZmyw7OXq9PGC1x1vJeqEbhQwUAbgmfhLr
jsNCTHia0+mTOAN6PLxbCaz11xCChNEGQ/xFrjUFDmD9RQJG4YCm5KzIYqRoVUD+
qTO0UG7vzy9lszpe6x2nnY/mof7Y5Is/DnefVLNPlFCeYIy0rfgBz6VJp46vxlh2
xf+lbj2at8WcLsRiXM6kcLNxKGhKNl+CO/X//yefKiKp9oGJNQk=
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:26 2026 by rpki-client