
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
File: 484F335D7E0307C0F7FF120F455566A5DD73933A.mft (raw, json)
Hash identifier: q5TCRZsMBILjBgXTMXtgC4GUPNv0Sch2PdvZeT55YbE=
Subject key identifier: 1A:84:97:7C:F9:28:C8:40:22:74:CC:CB:04:3D:79:20:B9:0B:2A:7B
Authority key identifier: 48:4F:33:5D:7E:03:07:C0:F7:FF:12:0F:45:55:66:A5:DD:73:93:3A
Certificate issuer: /CN=484F335D7E0307C0F7FF120F455566A5DD73933A
Certificate serial: 66A8CF101AB80E29BFD4D886B471637DADDF79B3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
Manifest number: C4
Signing time: Thu 24 Sep 2026 21:01:34 +0000
Manifest this update: Thu 24 Sep 2026 20:56:34 +0000
Manifest next update: Fri 25 Sep 2026 22:44:34 +0000
Files and hashes: 1: 484F335D7E0307C0F7FF120F455566A5DD73933A.crl (hash: xEieVsnp4UAhBh6BKMnfZKmqrHN0mMtm5256yt60H0s=)
2: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: ESQviQfyCrkTtBnJrmVbWeQokiDKSwPNHmI0uyVl6TM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.crl
rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 22:44:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a8:cf:10:1a:b8:0e:29:bf:d4:d8:86:b4:71:63:7d:ad:df:79:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484F335D7E0307C0F7FF120F455566A5DD73933A
Validity
Not Before: Sep 24 20:56:34 2026 GMT
Not After : Sep 25 22:44:34 2026 GMT
Subject: CN=1A84977CF928C8402274CCCB043D7920B90B2A7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:66:f3:c8:0f:23:9f:cf:ed:1b:f4:1c:53:
d7:5c:4b:8a:0b:ba:89:90:04:49:35:c4:73:6e:45:
06:cf:61:bf:64:86:77:b6:dd:72:c7:76:fb:3f:7c:
58:96:ba:1b:96:68:bc:99:9c:d3:4b:72:c9:d6:83:
7f:d7:a2:99:72:ea:cd:d4:00:1d:3b:e4:10:2b:0f:
cd:87:e8:d2:eb:91:eb:1a:73:64:73:0e:ee:7d:76:
ff:7c:5d:4f:0a:5c:b8:4a:ef:c6:27:59:5f:cc:3c:
4d:42:d3:0e:d0:48:1d:18:16:8e:b3:3b:9e:33:ff:
a3:ed:85:1b:3a:95:50:a4:33:98:a9:85:bd:21:ce:
6f:e3:fd:36:ee:c4:5a:06:52:1c:a1:cc:33:b1:da:
3b:a4:73:c4:64:87:e1:af:b1:6f:5b:52:be:a4:ac:
71:78:d4:32:8f:7f:c2:1d:54:51:ee:91:7e:a9:00:
4b:79:c6:fe:20:dc:3f:31:34:15:b5:3e:ac:f0:ed:
56:8b:89:8b:f9:5d:42:55:2c:d7:d3:8a:de:f1:9b:
cc:7d:fa:3b:f8:46:30:7e:f0:37:51:3e:5c:1e:53:
3a:42:f5:c3:76:5c:a6:bd:43:86:23:98:b2:eb:ca:
27:ee:ec:e0:d3:1a:62:3d:bb:ea:5f:06:e1:39:0f:
b9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:84:97:7C:F9:28:C8:40:22:74:CC:CB:04:3D:79:20:B9:0B:2A:7B
X509v3 Authority Key Identifier:
keyid:48:4F:33:5D:7E:03:07:C0:F7:FF:12:0F:45:55:66:A5:DD:73:93:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:85:08:48:8f:07:16:bb:cf:7e:3a:64:4b:4a:ef:89:30:c1:
07:68:6f:89:b4:9e:81:e6:3e:4f:81:20:38:db:89:f5:0d:db:
95:43:ff:3d:67:14:df:dd:45:ab:8a:cd:a4:19:ae:4d:ce:00:
68:1b:9d:92:25:e8:75:fd:2b:a7:8d:11:48:a5:2c:ac:8c:bb:
36:a5:a1:75:af:78:0f:9b:28:8a:f8:e5:35:b8:d0:81:97:d0:
52:df:55:5e:23:b4:9c:a2:56:32:a4:ed:0e:d0:59:13:1b:95:
b1:d1:8f:11:41:f8:76:b8:c0:06:1e:f3:1a:12:3e:99:77:2b:
e0:84:62:f7:6f:85:cc:cd:fc:1e:e3:93:54:e8:13:21:4e:f5:
c4:1e:5f:fb:5c:9c:93:ec:c8:de:3e:1a:e5:34:6d:8f:72:62:
46:42:45:8b:2b:cf:21:91:96:21:e3:da:07:8b:db:e5:09:45:
b4:ad:c5:40:5b:15:14:e6:31:44:4d:a9:74:b7:f2:38:3a:e6:
ae:d1:1a:fb:6a:f5:63:70:e9:f8:86:2b:67:b1:8c:ed:c6:5b:
a5:ad:96:39:0e:0f:14:20:95:95:c4:1e:69:95:3b:f7:b1:36:
61:d7:4a:18:c0:ce:41:ee:11:da:69:fc:55:14:63:54:8c:a2:
ae:2d:58:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:57:30 2026 by rpki-client