
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
File: 48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft (raw, json)
Hash identifier: r0q/sW8ladgh9PHlFgQE2ON09jXAk+RPu9LceyKwPAU=
Subject key identifier: 4A:B7:C1:CD:F6:49:CF:56:4F:55:E6:B8:B8:D0:C8:FD:3A:B4:6B:78
Authority key identifier: 48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07
Certificate issuer: /CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707
Certificate serial: 78121FF6C05A3D92A606D326A98319BFF5868373
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
Manifest number: C3
Signing time: Sat 26 Sep 2026 01:32:04 +0000
Manifest this update: Sat 26 Sep 2026 01:27:04 +0000
Manifest next update: Sun 27 Sep 2026 02:37:04 +0000
Files and hashes: 1: 3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa (hash: EqctnmAo57Bc5SskCeon4d80kj/Meg9dikNNmLRW6f0=)
2: 3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa (hash: 2h40cYj+FZipSkN57utalp9BoUtVPQ6jY2aP7JdgYkw=)
3: 3131342e3134312e35372e302f32342d3234203d3e20313339393937.roa (hash: esSysVtUva8+Yocw0kAhWf9PJYZT8IbRg2/i3Lll6kI=)
4: 48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl (hash: oJlyaxM25BuudQzUJCTr+3kGpyCFN/83nOWWP8QQyrc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl
rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:12:1f:f6:c0:5a:3d:92:a6:06:d3:26:a9:83:19:bf:f5:86:83:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707
Validity
Not Before: Sep 26 01:27:04 2026 GMT
Not After : Sep 27 02:37:04 2026 GMT
Subject: CN=4AB7C1CDF649CF564F55E6B8B8D0C8FD3AB46B78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:99:4b:09:00:c8:9e:56:75:4e:6b:8d:4c:
a0:88:83:ff:e2:52:a1:e7:1d:2b:27:97:f7:a1:3c:
68:62:b3:ab:df:8a:f1:b2:a5:fd:33:f5:d1:e0:1e:
c7:1f:52:86:54:14:0b:ac:33:e3:20:64:bc:ea:cf:
e8:f0:48:8c:76:e0:e8:4a:90:d5:ba:80:46:38:e4:
21:01:04:28:93:7c:4f:ec:e4:15:d2:ea:c2:91:fe:
b7:1e:77:35:2e:6e:6d:b9:8e:de:53:78:b4:7b:d1:
90:34:9f:a1:d2:60:da:29:88:44:1d:59:27:c4:02:
79:3a:fc:9c:91:31:03:b3:2e:ba:fc:72:f7:92:51:
99:12:bb:2d:27:6c:bd:9b:41:d6:61:22:c9:8d:e2:
5f:1e:5e:5c:40:dc:c6:64:fb:e7:aa:d7:24:90:ab:
01:09:b1:12:00:74:55:ba:65:69:f5:69:ba:c2:8d:
da:c7:21:77:7e:4c:80:04:fd:15:7f:13:1d:e2:6a:
0d:88:0e:8e:03:0b:9c:b2:82:e0:f9:0b:45:9e:a0:
c7:2c:73:c7:2b:73:f9:0d:69:89:46:c9:d5:49:0d:
4c:c9:c5:54:d3:5a:91:e7:dc:3f:79:2f:bc:11:19:
06:d9:f5:de:c3:5a:f0:12:0b:09:d5:13:8d:3b:a3:
e1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B7:C1:CD:F6:49:CF:56:4F:55:E6:B8:B8:D0:C8:FD:3A:B4:6B:78
X509v3 Authority Key Identifier:
keyid:48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1a:19:7b:38:ef:98:90:fc:35:ea:ad:87:67:97:55:a9:51:
91:3d:fe:6f:52:b4:49:41:3e:6c:6c:43:d4:16:83:e3:c6:64:
49:bf:a6:b5:2f:90:25:76:00:ec:0e:76:db:1a:77:e2:fd:08:
2c:ce:db:9f:7f:81:88:b3:8c:79:2e:33:78:fb:de:3b:56:82:
d6:e1:88:55:07:16:4f:16:98:58:6c:c4:6e:15:33:e2:a0:4d:
78:18:8a:47:48:05:7a:da:ce:a0:b7:09:85:5d:53:7e:9d:5d:
74:1e:5e:a6:58:d8:5a:76:c3:96:bf:1b:62:5f:9c:a7:02:f0:
e1:1e:d2:4a:f4:38:28:3c:78:68:60:ae:42:93:6c:0f:47:d4:
17:bf:1f:e5:97:df:57:66:38:e9:96:41:92:2c:24:2e:48:8e:
c9:4e:a0:95:c3:66:77:fe:1d:be:9a:e3:c1:4e:4f:3a:3a:d4:
d9:c6:43:83:4d:0e:44:7a:3b:64:49:56:8a:ec:82:fb:e8:28:
17:65:7a:c6:8b:28:15:6e:6c:42:cf:2a:79:b8:0d:33:61:9a:
44:f3:29:d1:6c:01:a9:82:fb:86:8f:56:b2:e6:69:b7:ef:72:
5b:9f:5f:40:2b:89:7d:25:b0:25:e1:64:20:d7:87:fd:f8:83:
78:97:6d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:02:57 2026 by rpki-client