
$ rpki-client -vvf rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
File: 484F335D7E0307C0F7FF120F455566A5DD73933A.mft (raw, json)
Hash identifier: NxTJY8tzKqmdXXU0QmEybTs2zPKtTxbvUUVLNGAFevw=
Subject key identifier: 0D:E1:F7:84:39:5B:75:95:34:31:50:70:3B:FD:E6:F3:C8:8D:D4:E0
Authority key identifier: 48:4F:33:5D:7E:03:07:C0:F7:FF:12:0F:45:55:66:A5:DD:73:93:3A
Certificate issuer: /CN=484F335D7E0307C0F7FF120F455566A5DD73933A
Certificate serial: 18888DC22B1D0B627E0F22963987064CE77BE821
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 04:14:43 +0000
Manifest this update: Fri 24 Jul 2026 04:09:43 +0000
Manifest next update: Sat 25 Jul 2026 04:50:43 +0000
Files and hashes: 1: 484F335D7E0307C0F7FF120F455566A5DD73933A.crl (hash: mXjIvtrwpFhMuI9bzWWHHIMnuypeAJeJTT3cJYsLFMo=)
2: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: ESQviQfyCrkTtBnJrmVbWeQokiDKSwPNHmI0uyVl6TM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.crl
rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:88:8d:c2:2b:1d:0b:62:7e:0f:22:96:39:87:06:4c:e7:7b:e8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484F335D7E0307C0F7FF120F455566A5DD73933A
Validity
Not Before: Jul 24 04:09:43 2026 GMT
Not After : Jul 25 04:50:43 2026 GMT
Subject: CN=0DE1F784395B7595343150703BFDE6F3C88DD4E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1c:55:24:3f:8e:86:1d:d8:82:a9:4f:77:e4:
1d:a0:a8:34:f3:7c:5e:55:01:39:c6:d1:e3:e6:b0:
e7:31:c8:37:eb:62:be:67:e4:2a:2d:b9:22:e2:60:
8f:1d:a0:30:31:6d:c3:9e:40:82:6d:d1:90:2d:d0:
8a:01:37:62:9a:9b:08:2c:21:14:a3:65:db:56:98:
98:ae:f5:7d:10:5d:7e:7d:ad:d2:5a:fa:f2:f0:60:
3c:d5:28:b6:21:77:5e:ce:0a:33:17:21:8b:57:05:
96:ec:52:37:bd:29:73:e7:c5:2c:69:25:73:10:c0:
68:f4:96:20:d5:47:00:13:98:da:d6:9e:6e:9a:a9:
77:4f:bb:07:5e:7f:f6:31:76:f6:6b:f7:d2:cd:cd:
65:f0:bd:6b:f5:f2:32:52:03:93:a6:48:a0:e5:29:
cb:f6:ed:fd:9a:31:c2:25:34:c5:d5:2b:f6:99:d6:
17:59:ef:8b:5b:26:ab:88:64:b3:7d:03:da:cd:6c:
04:1c:8d:c6:c7:7d:1f:e7:eb:29:6a:4e:05:17:34:
c8:3c:84:38:d5:30:f6:fd:17:02:56:79:8d:04:19:
f9:c7:1d:a9:89:e7:60:0a:fd:ec:af:57:a5:87:2b:
ff:b9:15:1b:f1:23:20:2c:0d:53:14:5c:c0:35:8d:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E1:F7:84:39:5B:75:95:34:31:50:70:3B:FD:E6:F3:C8:8D:D4:E0
X509v3 Authority Key Identifier:
keyid:48:4F:33:5D:7E:03:07:C0:F7:FF:12:0F:45:55:66:A5:DD:73:93:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:18:28:fc:80:c9:8c:6b:d9:74:80:0e:b0:c3:0f:1b:cd:71:
30:5f:40:27:d4:76:75:76:c0:de:8f:89:41:9c:25:86:e0:7f:
a4:80:e4:e6:c9:ac:be:54:d1:db:9a:8d:0c:51:8c:6e:8e:70:
64:a5:72:ad:7c:89:99:e0:93:bf:c4:4f:62:61:d7:c7:47:fe:
ee:81:d7:cb:9f:e3:95:c6:c0:f3:e8:b7:2f:d4:4d:07:4c:a8:
1c:f7:ec:53:dd:3e:98:ed:4c:9b:d6:5c:76:4f:91:a7:cf:f5:
b7:9f:3a:78:95:35:78:97:d2:43:c9:a3:98:4a:86:c9:11:2b:
db:dc:0e:70:62:1d:ac:8a:f1:53:a9:f0:6f:62:28:2a:71:da:
47:34:b1:c1:8d:f4:21:a1:bd:9b:74:3f:b1:84:65:29:6c:f0:
79:da:c8:76:9e:82:db:9d:28:55:d2:69:b2:1a:6a:a8:38:f2:
a2:9a:57:6f:4b:f4:57:d7:b9:b4:ba:03:c2:2a:c6:5d:dd:48:
79:93:97:cd:33:d7:8e:9f:a5:05:6a:7c:64:72:e4:bf:62:b4:
05:62:0a:04:4c:8c:c6:f9:8f:0d:aa:eb:d4:87:22:55:39:36:
36:52:88:f6:ab:db:84:7d:c1:e0:0d:3f:1f:e8:67:70:78:45:
56:29:f9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:37 2026 by rpki-client