
$ rpki-client -vvf rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
File: 48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft (raw, json)
Hash identifier: +osw063xbW8hT8DUIF7PQoAvVAB2F6SRJnrtkHVw2zw=
Subject key identifier: C7:85:93:88:EF:FF:59:B8:DB:3C:CD:CD:66:9E:B9:B4:A6:72:71:E9
Authority key identifier: 48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07
Certificate issuer: /CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707
Certificate serial: 338382E21076E7BD12E434C71DCBF8E9DB615BB0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 22:32:25 +0000
Manifest this update: Thu 23 Jul 2026 22:27:25 +0000
Manifest next update: Fri 24 Jul 2026 22:39:25 +0000
Files and hashes: 1: 3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa (hash: EqctnmAo57Bc5SskCeon4d80kj/Meg9dikNNmLRW6f0=)
2: 48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl (hash: MXXBWQzwrzvmK1UbwdepI4l+4cJMQ2DSaFeumT+bOVg=)
3: 3131342e3134312e35372e302f32342d3234203d3e20313339393937.roa (hash: esSysVtUva8+Yocw0kAhWf9PJYZT8IbRg2/i3Lll6kI=)
4: 3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa (hash: 2h40cYj+FZipSkN57utalp9BoUtVPQ6jY2aP7JdgYkw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl
rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:83:82:e2:10:76:e7:bd:12:e4:34:c7:1d:cb:f8:e9:db:61:5b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707
Validity
Not Before: Jul 23 22:27:25 2026 GMT
Not After : Jul 24 22:39:25 2026 GMT
Subject: CN=C7859388EFFF59B8DB3CCDCD669EB9B4A67271E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:06:07:55:a4:10:da:41:d9:cb:d7:24:a2:
af:da:e0:94:88:63:f9:01:24:b2:66:0d:55:2e:53:
fd:71:c1:40:f1:31:20:27:06:d9:8c:c7:89:f2:10:
5f:a2:5a:e2:af:76:90:41:ab:a3:ac:b8:32:a2:92:
46:30:48:72:f1:bb:e5:f8:0a:ec:06:97:c0:3e:97:
7c:58:90:33:f7:de:34:07:65:f7:8d:cd:13:4e:25:
1c:19:d7:ee:f5:17:ff:6e:b4:ba:b9:5a:cd:7e:2a:
51:5d:1c:ed:72:ae:87:23:4e:2e:c0:86:4b:20:01:
2c:bc:48:b3:dc:89:37:fe:a2:1b:69:2b:c5:ca:ce:
29:4a:a7:43:f1:2c:df:ba:ae:ac:d5:30:11:01:13:
9e:92:8f:e6:2e:fe:43:fe:0b:6d:fe:56:88:f7:2f:
82:f0:2f:ee:f1:c7:62:5b:52:d9:23:3f:6e:9b:0f:
59:83:a2:b3:5b:9c:ba:23:26:57:ff:68:ef:61:4c:
45:04:9f:dd:97:57:d9:0c:b6:b0:53:6a:42:c0:b6:
d1:98:09:4c:4b:7c:d7:47:7e:2b:54:94:c5:e7:ac:
fa:12:94:02:15:24:64:f3:94:24:0e:81:a8:05:fd:
5e:56:55:92:ba:4e:6b:f2:61:46:31:62:6b:0c:7a:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:85:93:88:EF:FF:59:B8:DB:3C:CD:CD:66:9E:B9:B4:A6:72:71:E9
X509v3 Authority Key Identifier:
keyid:48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:24:ca:a6:23:57:f5:53:26:2f:14:71:7d:89:a7:98:2d:07:
55:50:a8:fc:d8:04:ab:8c:3a:6d:bf:69:d6:33:8b:e4:77:e5:
22:0b:f6:fa:33:c5:8a:03:55:3a:38:d4:13:15:9c:de:48:49:
16:9a:de:92:34:3e:3b:69:cf:80:bf:2c:29:78:48:cb:d4:22:
4f:ae:f3:34:c2:45:9f:d8:ac:f3:4a:36:d8:e0:d0:37:8c:ed:
9f:6a:d0:42:8e:89:99:d0:28:f2:ec:8b:75:70:d1:d0:e4:13:
f2:1a:bf:f6:2a:79:15:90:70:d0:30:1c:47:8f:28:ea:cc:94:
e8:08:81:96:62:f8:d0:30:c7:26:42:8b:4b:d3:bb:10:73:51:
0b:e5:12:03:e1:24:f7:3d:84:58:eb:ad:93:5c:db:84:25:2e:
f3:66:77:d6:46:31:e2:05:87:17:ca:44:e0:69:ef:fa:59:e9:
2b:65:50:eb:de:dc:26:97:94:7c:49:3b:c3:d5:cb:da:4e:fc:
0a:cc:54:31:bf:fb:13:75:07:4b:49:41:0e:3a:ae:6a:f4:86:
60:ca:4f:08:53:de:e2:39:17:6c:cf:b7:1b:9d:61:bf:f1:32:
06:a6:1f:8a:8e:83:03:42:e3:b5:f7:e6:15:d0:8c:27:dd:6e:
3a:a3:87:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:56 2026 by rpki-client