
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
File: A479BE8A2AB736997799C5EDD19DCC1E14080951.mft (raw, json)
Hash identifier: UTbmeYUZgxm3aklceUCO6SJ127gkjuUDiPXASqBtcCE=
Subject key identifier: 29:F6:34:9B:FD:20:BA:18:37:11:3A:18:24:E1:C2:51:FD:17:C3:91
Authority key identifier: A4:79:BE:8A:2A:B7:36:99:77:99:C5:ED:D1:9D:CC:1E:14:08:09:51
Certificate issuer: /CN=A479BE8A2AB736997799C5EDD19DCC1E14080951
Certificate serial: 5630D65714FC5300AE4543C4629AFF3456375C82
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
Manifest number: BF
Signing time: Wed 23 Sep 2026 02:49:37 +0000
Manifest this update: Wed 23 Sep 2026 02:44:37 +0000
Manifest next update: Thu 24 Sep 2026 06:42:37 +0000
Files and hashes: 1: A479BE8A2AB736997799C5EDD19DCC1E14080951.crl (hash: XsSLvuAyB9r/sYu5Fre2CnhE4zCHZ2BlXz6I5rzTOV4=)
2: 3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa (hash: JhxXluduCB+TXKw1xbSPk6SI13kYg9YOWrV+vNWa+co=)
3: 3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa (hash: x5ipZlEC8pQiu8/sOKh5VKkOUz8rWzbz+F73T1RcjPM=)
4: 3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa (hash: OwuNAyMCdQqzVBOVJzr7kPThUt6VdOd9CvAXA9Sod0M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.crl
rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 06:42:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:30:d6:57:14:fc:53:00:ae:45:43:c4:62:9a:ff:34:56:37:5c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A479BE8A2AB736997799C5EDD19DCC1E14080951
Validity
Not Before: Sep 23 02:44:37 2026 GMT
Not After : Sep 24 06:42:37 2026 GMT
Subject: CN=29F6349BFD20BA1837113A1824E1C251FD17C391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:e0:66:53:e5:6f:fb:4c:d8:4c:94:49:36:
4f:96:23:de:8e:c4:6f:78:16:f9:9a:c4:c4:59:5f:
39:7b:fa:75:c5:10:56:dc:6e:68:70:32:c2:be:ad:
7f:e0:9c:00:17:3b:bd:10:17:2f:c3:e2:c2:26:8f:
21:a5:56:96:3a:8d:bb:23:65:7d:d8:87:55:c5:72:
89:20:ed:7c:1a:b7:5d:20:5b:fe:7b:ba:ad:99:e5:
42:da:8b:e6:84:3d:ae:5d:ba:60:80:cf:9c:41:81:
78:86:86:ac:19:e7:0d:56:20:f0:e0:88:f0:4d:fb:
9f:11:b0:de:ee:d8:65:7f:08:00:28:42:85:b5:05:
0c:90:9e:32:4a:5f:b5:bf:1a:ae:80:2e:27:9b:72:
fd:56:14:e0:f1:9a:e2:6d:2b:41:3d:43:57:a8:5f:
16:1c:bc:f0:9f:db:ef:19:a0:ac:3f:eb:3f:9f:ff:
be:7f:6e:de:3e:a9:6a:31:4c:e7:e8:43:a3:94:bb:
23:08:54:20:e1:4f:0a:eb:39:fa:f9:d2:33:84:f6:
28:1f:96:fe:5a:4d:c5:65:5b:ec:f3:3e:f2:59:7d:
b8:f6:aa:09:fb:2e:61:fe:a5:e2:1e:6f:e6:2f:4e:
8a:52:fd:51:dc:4c:30:0c:76:fd:99:a1:ce:a1:77:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F6:34:9B:FD:20:BA:18:37:11:3A:18:24:E1:C2:51:FD:17:C3:91
X509v3 Authority Key Identifier:
keyid:A4:79:BE:8A:2A:B7:36:99:77:99:C5:ED:D1:9D:CC:1E:14:08:09:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A479BE8A2AB736997799C5EDD19DCC1E14080951.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/A479BE8A2AB736997799C5EDD19DCC1E14080951.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:da:79:6c:bc:35:90:47:87:68:20:1b:f4:d1:81:29:94:35:
cf:b2:c5:ae:d0:e0:14:c3:f7:01:6b:59:2a:60:74:86:b7:90:
e1:58:1a:7d:58:bf:86:d8:81:e2:7d:bc:20:20:ad:e4:d9:02:
ea:a0:3d:0c:d7:7b:64:42:87:d3:ab:26:c8:ff:78:38:45:ea:
d7:b5:67:5b:a4:95:a1:ff:71:fb:82:58:ee:84:bd:d2:53:f7:
96:e5:e0:8c:17:7d:0c:4c:87:27:e4:f9:47:d3:72:42:84:64:
9b:7f:24:fb:e5:fc:96:9b:ff:70:87:d1:8d:1c:69:10:c1:16:
97:09:a6:52:7f:da:7c:5f:10:73:7d:30:b6:d8:3c:f9:8b:38:
70:f1:0d:41:1e:d8:e8:0f:7e:86:02:4d:6f:90:9f:15:da:11:
a3:63:d6:ba:78:7a:6e:e1:1a:21:e6:58:93:99:81:ad:5b:8e:
22:de:e5:73:9b:78:6c:30:36:e4:79:ec:55:b5:3f:a5:62:b1:
90:05:e4:81:90:15:7c:9f:d6:34:49:73:c6:8d:05:98:96:b2:
7e:d3:8d:2a:7d:7a:9f:0e:c9:38:2d:e8:59:cc:2c:49:90:2e:
83:ef:ee:65:ea:bb:b0:b6:97:fa:2c:55:6a:ee:13:65:48:eb:
1c:bd:41:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:48:37 2026 by rpki-client