
$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
File: 4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft (raw, json)
Hash identifier: MGF1+4QiQoNqQ1NWzEgk8T0RRNIuxD+YJhWLWI5K9aI=
Subject key identifier: 84:7B:53:C1:4C:82:93:EE:D4:50:D3:68:04:93:1D:3B:41:4A:BD:1E
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Certificate issuer: /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial: 4B8312FCC65263D112E38A8F3B6AF2D32BC7ECE0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 05:31:00 +0000
Manifest this update: Tue 12 May 2026 05:26:00 +0000
Manifest next update: Wed 13 May 2026 09:29:00 +0000
Files and hashes: 1: 3138322e31362e3234372e302f32342d3234203d3e20313337333633.roa (hash: sHCf6/6bjp9XcRHH6nzs2UXll2GEJ7OZ4UeG+P00Ecg=)
2: 34392e35302e352e302f32342d3234203d3e203436303234.roa (hash: nFS5QU5ou89IxZP8HncF3riJVrU1zaoieWQvhjr5m8c=)
3: 34332e3234392e3230382e302f32342d3234203d3e203435323938.roa (hash: tYKZ7K/JyXd3SueTboWMxQMrsrBoUSKxFJO40oBLUS8=)
4: 3130332e3234372e3234342e302f32342d3234203d3e203435323938.roa (hash: ToMLJ3pcLgQVHFpR+P36bsRhCIyYQUx5khc4qK2J9zQ=)
5: 34332e3234392e3231302e302f32342d3234203d3e203435323938.roa (hash: WaAmme1Nmnd0ifP+5SGsMDIQMobV3Vw0V4wgbEWB2uE=)
6: 323430353a3730303a3a2f33322d3332203d3e2039323531.roa (hash: nX8ArP2zu0QlOO7gowBxT6S+iz6GNAp5g9TpT5HDhVk=)
7: 3138322e31362e3234332e302f32342d3234203d3e203435323938.roa (hash: OBod0UG9BWwZ1iv+JzwXGOxP9iZ+dCpCkcAaoXO+Arg=)
8: 3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa (hash: qPi2DbwlpnARz52vfaoi9ZsG5VNI3Ocl35NJsifT55A=)
9: 3138322e31362e3234372e302f32342d3234203d3e203435323938.roa (hash: nEcmrJ1+oUkdBklEdHAIM0tkvQ+X9aNcGAzu8lnKYJw=)
10: 3130332e3234372e3234352e302f32342d3234203d3e203435323938.roa (hash: fn56Qj6vEThCZw4ZYsC5L2JfFLStIIceEiglEiwrmiw=)
11: 3230322e34332e37332e302f32342d3234203d3e203435323938.roa (hash: tVfRZp6f+AWfshFsgerAOwxwSTX5duGY0+gwqpeM1Nw=)
12: 3230322e34332e37322e302f32342d3234203d3e203435323938.roa (hash: C+WZEP5EJdoW5MzIg59OBi6Rygyt+/g8wsJNOBEEwbk=)
13: 3130332e3235332e3130362e302f32342d3234203d3e2039323531.roa (hash: 2oAylNBJ4zuj1Ef+Gz6gFAlUmkrG4+gv4KVtTeu2j88=)
14: 34332e3234392e3231312e302f32342d3234203d3e203435323938.roa (hash: dI4U8mJvEBf9UNAhV9zqVwxzHCXI77Ff764ltwQ4rhs=)
15: 3230332e3230392e3139302e302f32342d3234203d3e203435323938.roa (hash: U1j1PVh1jjYl1ffk3i0kVbtGHOAWKo6Yh88QRntkuLM=)
16: 3138322e31362e3234312e302f32342d3234203d3e203435323938.roa (hash: idljZ16M3swfkw4ovP9vpomtzJGJyjtN2z7RpR/To2E=)
17: 34332e3234392e3230392e302f32342d3234203d3e203435323938.roa (hash: Oh9cxi5p6iQswDt1z3HcVSgsz/hpYoB1rM1HgaAvh+M=)
18: 34392e35302e342e302f32342d3234203d3e203436303234.roa (hash: KmVkU+NHeC47+NIKrld7ds+KmPkEEWIZRrJ1q2l1KVs=)
19: 3230322e34332e37352e302f32342d3234203d3e203435333233.roa (hash: Gg7oCIffQeSaKkTZ8c65C3ylgm66RwB/yXYxjbZpOFk=)
20: 3138322e31362e3235332e302f32342d3234203d3e203435323938.roa (hash: xMCzhZXjrOL3669yhdVMqzyw9D3fTyoKujYEAQ69ihI=)
21: 3138322e31362e3234342e302f32342d3234203d3e203435323938.roa (hash: gP3ZhFVlw9AgP9k7JopFzyvNyG8a+Rh2uCR8fNFbNa0=)
22: 3138322e31362e3234362e302f32342d3234203d3e203435323938.roa (hash: h027S+S3zFM9gdD33utskibF8WJSgp05uqTMjEwnPj0=)
23: 3230322e34332e37352e302f32342d3234203d3e203435323938.roa (hash: qjaeT/lH6o0NKAX2ymHlChwcp5ZbxTwAapf5Zrh8P8Y=)
24: 3230322e34332e37342e302f32342d3234203d3e203435323938.roa (hash: PPUc42SvgK+Q6yaLY9FrEmjvu0915Evdge1eJ95vgF8=)
25: 3138322e31362e3234302e302f32342d3234203d3e203435323938.roa (hash: 8kK02x+4oAUO2jIOqZef2dlPoLdWKjT8aEZyA3ebyuw=)
26: 3138322e31362e3235352e302f32342d3234203d3e203435323938.roa (hash: 4PCG++N4KI1Fuk7fSLE0vGedHC2jwhgsQAS4GRc/wqE=)
27: 3130332e3235332e3130372e302f32342d3234203d3e203435333233.roa (hash: kw6C0shgcGyW5CfQtBNKYqy6llCxE09GRkdKfw2oDRM=)
28: 3138322e31362e3235312e302f32342d3234203d3e203435323938.roa (hash: rG+3/AUgMuT5mBtD9u7gMwRnUjOC/ScA0hmfdJai5q4=)
29: 3138322e31362e3235322e302f32342d3234203d3e203435323938.roa (hash: fUdflrmm4iCO18D7LwfA5F4NMT7oRBE3k2Si1lSxaeo=)
30: 4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl (hash: Akt1ujTyAm9RpzBGyb3MSQLJN+mlj68K6kJeofSDLpI=)
31: 3138322e31362e3235302e302f32342d3234203d3e203435323938.roa (hash: BX5x0hlhS1Yj084G0VLwoi6SMfggJUs0y5a1EZ1SgeQ=)
32: 3138322e31362e3234322e302f32342d3234203d3e203435323938.roa (hash: 8eAQrRtdXyK8oP6aNweJbj8d8AXfZC4WPZ8SeOlU40I=)
33: 3138322e31362e3234382e302f32342d3234203d3e203435323938.roa (hash: jo7X56+QZIN9BVnlsXjTC5BGLYwSYVfuxVle6fnb4ak=)
34: 3138322e31362e3234392e302f32342d3234203d3e203435323938.roa (hash: jVSlw7mhuZ3vxYknRaik0CpIjfafvJ7NQ7hP1n78XdA=)
35: 34392e35302e342e302f32332d3233203d3e203436303234.roa (hash: XE8RFX5JmU1fw92tpzdxihcqj1rOCmQY9wos4rjIuEI=)
36: 3138322e31362e3234352e302f32342d3234203d3e203435323938.roa (hash: 9jqVqswdfoYi5Fr6a2MA0BKAOqkDiLV6UnTeFWBKncE=)
37: 3138322e31362e3235342e302f32342d3234203d3e203435323938.roa (hash: +cANsw2+SD51Rdr8R3QfkiK5NFrztvlDBLBG+DhwSNw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:83:12:fc:c6:52:63:d1:12:e3:8a:8f:3b:6a:f2:d3:2b:c7:ec:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Validity
Not Before: May 12 05:26:00 2026 GMT
Not After : May 13 09:29:00 2026 GMT
Subject: CN=847B53C14C8293EED450D36804931D3B414ABD1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:e5:d3:2c:15:14:fa:a5:b1:99:67:02:c5:
48:bd:bd:b8:af:bd:83:33:0e:b2:e0:75:62:04:36:
6c:05:26:80:41:fb:87:de:23:9b:d9:2b:93:a7:b2:
89:5c:6e:89:81:ea:7e:83:fb:13:88:28:ac:92:50:
74:b1:92:66:44:56:73:dc:8b:53:49:08:1c:52:38:
b0:e9:cd:21:c4:53:f3:0a:04:e9:9b:f3:68:93:a2:
5a:b0:30:5f:f3:40:5e:5f:49:a6:4a:5f:f6:3c:bc:
e9:d1:1e:70:ce:5c:ba:fe:18:d1:6a:f5:4f:d0:db:
18:a4:67:96:12:87:8d:e2:64:c3:c4:e7:6a:ea:96:
26:24:a8:ab:56:96:2e:1d:92:27:2a:99:2b:c2:56:
16:96:98:b3:64:6b:6a:cc:62:fc:b2:78:da:80:65:
6f:98:c3:db:d4:bd:47:53:21:07:86:c6:2c:6b:39:
1b:c8:7b:e5:c7:a0:74:6e:37:59:29:02:b5:80:f7:
47:1a:a2:49:ee:f7:95:07:16:52:ad:3b:7c:a5:54:
cf:d1:a3:cd:50:c0:d0:84:60:73:ae:4d:8a:78:33:
71:50:3d:10:b7:f1:7e:1f:7a:52:77:bf:fc:29:00:
3e:c2:30:8a:c1:4c:91:20:28:28:9b:5e:40:ae:7c:
6a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7B:53:C1:4C:82:93:EE:D4:50:D3:68:04:93:1D:3B:41:4A:BD:1E
X509v3 Authority Key Identifier:
keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:de:31:6f:6e:ff:4b:ac:b9:23:61:62:35:d9:fd:6b:00:74:
0d:bf:92:5e:10:a8:64:af:a5:21:97:61:c3:2f:7f:20:cc:5c:
3e:55:91:42:15:bb:7d:78:27:c6:42:a7:53:5a:87:28:ef:c0:
9e:01:ff:a1:34:21:54:e7:32:0c:11:26:3d:a8:ed:ed:d7:36:
35:47:44:e5:49:bc:63:ce:84:d2:22:1a:17:e1:38:70:2f:90:
2c:87:69:93:7d:d5:15:c6:88:d6:d3:ad:03:53:31:45:8a:a5:
f1:c4:82:69:66:54:38:35:68:34:95:79:a1:0a:5b:9d:ff:05:
d8:5b:c8:c8:da:c6:54:1e:be:37:7f:41:be:47:5e:7c:55:73:
a6:c9:96:b6:bf:7f:fb:b2:e2:b9:8b:d0:d2:22:16:37:7a:ce:
a2:cb:cb:b4:05:0d:ec:5f:c2:cc:b2:e5:b1:d0:05:0f:81:53:
f4:d4:c8:54:3e:44:8d:e6:a1:f7:9c:31:1d:4a:10:40:b9:43:
97:f2:f2:e0:e8:dc:93:40:1e:78:c1:a9:7d:e6:3e:6f:f7:39:
03:6e:62:f3:18:a1:4b:d5:d6:39:dd:20:7d:13:11:bd:bb:cd:
54:ef:ba:ed:cd:0d:8b:73:73:39:89:b4:8d:65:f8:30:99:21:
29:fa:c3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:39 2026 by rpki-client