
$ rpki-client -vvf rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
File: A479BE8A2AB736997799C5EDD19DCC1E14080951.mft (raw, json)
Hash identifier: yhDKSTzC6JDKPPU0Y2yvEWqUysDmOBlU+pF/EKQ2y1E=
Subject key identifier: 88:BC:85:5A:6B:C6:E1:77:AE:79:22:D9:B8:52:0F:D3:EE:00:50:85
Authority key identifier: A4:79:BE:8A:2A:B7:36:99:77:99:C5:ED:D1:9D:CC:1E:14:08:09:51
Certificate issuer: /CN=A479BE8A2AB736997799C5EDD19DCC1E14080951
Certificate serial: 3AA5A5080A21C26EE3B9FEBB1FD4AF55C18B8118
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 11:37:16 +0000
Manifest this update: Tue 12 May 2026 11:32:16 +0000
Manifest next update: Wed 13 May 2026 12:00:16 +0000
Files and hashes: 1: 3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa (hash: OwuNAyMCdQqzVBOVJzr7kPThUt6VdOd9CvAXA9Sod0M=)
2: A479BE8A2AB736997799C5EDD19DCC1E14080951.crl (hash: q9n3jvh1SfXnaPzhTClXMigp61BbuGgRGzBanr30Ygs=)
3: 3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa (hash: JhxXluduCB+TXKw1xbSPk6SI13kYg9YOWrV+vNWa+co=)
4: 3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa (hash: x5ipZlEC8pQiu8/sOKh5VKkOUz8rWzbz+F73T1RcjPM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.crl
rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a5:a5:08:0a:21:c2:6e:e3:b9:fe:bb:1f:d4:af:55:c1:8b:81:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A479BE8A2AB736997799C5EDD19DCC1E14080951
Validity
Not Before: May 12 11:32:16 2026 GMT
Not After : May 13 12:00:16 2026 GMT
Subject: CN=88BC855A6BC6E177AE7922D9B8520FD3EE005085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:9a:55:f9:ed:f6:83:7c:59:c0:8a:05:29:
3d:6b:28:9e:3e:1b:43:7a:2d:0c:76:8e:c4:fa:cc:
71:31:b4:0f:69:d0:fe:8a:3e:8c:3f:4b:15:26:36:
64:cc:0b:c1:63:56:be:14:53:35:1d:d5:12:03:52:
46:4f:87:b1:7b:d4:5f:48:4c:bd:e7:67:35:89:53:
10:c2:9c:8b:d6:cb:67:3b:07:7b:01:4b:f9:db:40:
1c:7a:08:56:67:f7:68:e8:ab:b1:0c:ce:b4:95:49:
58:74:a1:99:2a:05:4e:e8:94:f1:50:f8:a7:95:88:
ba:b2:c5:e5:8d:1a:73:16:7e:66:bb:05:61:dc:bf:
7b:8e:3b:99:dd:d8:ec:0d:07:ce:cb:b4:2e:f7:9d:
4b:58:31:f5:07:ec:42:23:7d:eb:8d:a2:86:99:b7:
d9:ee:4d:3a:15:a4:0c:f4:f4:49:10:b7:b6:e2:48:
a3:16:36:b8:6c:b2:e3:7b:d1:d3:04:3f:cf:bb:0b:
79:47:4b:ee:fb:9d:1c:ca:37:74:fe:1c:60:26:19:
89:ca:d0:87:7d:fb:06:70:b5:43:b0:04:28:9a:59:
ca:b0:10:52:08:cc:ab:56:41:fc:79:71:ee:c3:20:
79:f1:09:30:e1:49:09:33:69:c7:46:4c:f8:41:8d:
ff:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BC:85:5A:6B:C6:E1:77:AE:79:22:D9:B8:52:0F:D3:EE:00:50:85
X509v3 Authority Key Identifier:
keyid:A4:79:BE:8A:2A:B7:36:99:77:99:C5:ED:D1:9D:CC:1E:14:08:09:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bc:8b:48:f7:b8:cd:26:e0:70:60:02:58:b6:7c:85:7b:41:
3b:b1:2a:77:36:d2:04:d4:89:0b:a9:83:d6:6a:e8:ea:7c:36:
95:1d:0b:64:e5:3f:90:45:36:d3:0c:a8:1c:96:9e:5c:c6:3b:
81:ec:fa:7b:1a:60:9f:af:2a:77:de:51:2f:55:98:b0:e7:62:
58:7e:bf:6e:bd:6b:62:fb:0d:2a:f2:e0:30:03:eb:a5:35:b8:
f9:e7:f8:23:4d:a7:2e:ed:a8:4e:d5:f4:4e:92:b6:5e:60:66:
ac:8f:45:69:41:c8:e4:1f:7d:fa:3c:cc:85:5a:9a:ab:d7:67:
dd:f8:05:97:82:ba:5e:5a:b8:7b:4d:5f:4f:b7:30:ac:20:a5:
e5:92:60:65:38:78:10:2e:c0:a8:13:14:35:81:30:41:03:2b:
db:59:52:2d:6f:64:c0:d7:5a:c1:6e:ac:d3:10:f9:f6:61:48:
da:8c:cb:9a:0b:4d:34:1e:bb:bd:5d:97:40:ca:81:59:2d:85:
ea:0c:62:de:d2:d4:71:d1:13:c8:46:fd:68:0c:6c:42:6e:44:
0a:83:bb:67:70:13:8c:12:89:42:d6:79:cb:33:dd:e8:08:a4:
17:e3:6c:88:c1:da:a2:b7:5a:a2:8d:28:23:25:99:b9:f8:25:
88:7d:af:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:21:07 2026 by rpki-client