
$ rpki-client -vvf rpki-rsync.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.mft
File: 4ABC460A78EDA78ED417C215E15289F1FCDD13CB.mft (raw, json)
Hash identifier: 0+wKhPcHzpzwKap3FTtWBEpYKrc0orDlGmR20xc4V3w=
Subject key identifier: 8E:E3:19:2F:C7:38:D9:C0:9C:76:38:19:5D:88:1A:16:A9:A6:9E:61
Authority key identifier: 4A:BC:46:0A:78:ED:A7:8E:D4:17:C2:15:E1:52:89:F1:FC:DD:13:CB
Certificate issuer: /CN=4ABC460A78EDA78ED417C215E15289F1FCDD13CB
Certificate serial: 44D4701A37296BEABA8FBDC866F1FAAF40702BC7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 23:22:15 +0000
Manifest this update: Tue 12 May 2026 23:17:15 +0000
Manifest next update: Thu 14 May 2026 02:29:15 +0000
Files and hashes: 1: 4ABC460A78EDA78ED417C215E15289F1FCDD13CB.crl (hash: pRz+OlkYFz0FjA/KGvdv1CPOAIr3p8W/SRe5cYMGlNo=)
2: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: uRzCkmERAHpbeHxBuObTU8ftA4JdncgZgcIleBtINs4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.crl
rsync://rpki-rsync.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:d4:70:1a:37:29:6b:ea:ba:8f:bd:c8:66:f1:fa:af:40:70:2b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ABC460A78EDA78ED417C215E15289F1FCDD13CB
Validity
Not Before: May 12 23:17:15 2026 GMT
Not After : May 14 02:29:15 2026 GMT
Subject: CN=8EE3192FC738D9C09C7638195D881A16A9A69E61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:02:5d:89:c9:c1:a2:4b:e4:ae:bd:80:8c:
af:92:72:8d:d9:3d:24:e5:9a:f4:84:be:9a:6b:93:
1e:38:d6:22:af:03:2a:5c:9e:52:a4:ea:c4:a8:95:
bd:ed:cd:53:69:20:c7:ad:63:74:25:d0:96:ff:7c:
7a:a0:99:f5:7d:28:67:35:8d:ac:5d:db:ac:d1:94:
86:a1:45:a2:b4:c9:22:a1:2c:80:2f:5d:1c:b5:e5:
d3:ac:64:01:ce:7c:ee:b9:bf:0f:f5:17:08:2a:e9:
a7:71:dc:b4:d6:67:53:de:88:ce:70:34:44:f7:53:
1a:0b:68:e9:45:b6:cf:c2:13:71:7a:c6:60:f7:62:
f0:dd:95:df:fb:6f:ca:81:ad:1a:d0:30:eb:7b:e8:
1d:e0:f5:d5:91:56:a7:ec:c6:97:f3:75:df:e4:fa:
a8:e8:e5:a5:14:5c:64:cc:88:24:5d:52:9f:82:0a:
b2:fb:d0:82:da:f8:06:39:fb:f0:48:58:03:e3:fc:
8a:c2:71:1c:61:11:60:60:48:6c:e7:5c:d1:37:2f:
ee:9c:c3:25:3c:0c:93:86:c4:98:d5:e1:fa:77:7b:
4d:d9:d8:e7:63:a3:e6:f6:c8:79:f7:b7:44:43:d7:
26:c2:29:86:89:89:e2:47:bf:d3:73:d2:0a:62:71:
50:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E3:19:2F:C7:38:D9:C0:9C:76:38:19:5D:88:1A:16:A9:A6:9E:61
X509v3 Authority Key Identifier:
keyid:4A:BC:46:0A:78:ED:A7:8E:D4:17:C2:15:E1:52:89:F1:FC:DD:13:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/4ABC460A78EDA78ED417C215E15289F1FCDD13CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a6:bb:09:b8:9d:08:23:cb:dd:b2:15:8a:2f:e0:dd:1a:18:
57:12:0e:4c:64:3c:6d:41:c5:b4:45:21:a2:d9:b9:67:e8:fe:
e1:b8:15:05:1b:a7:80:8c:36:f9:18:ef:47:16:69:44:bf:98:
00:b4:2e:0f:d8:df:97:17:9c:ec:8a:54:80:c6:ce:13:bd:06:
aa:c5:ff:eb:be:d4:0d:a6:52:55:19:e4:7a:1e:2d:75:81:9c:
79:26:6e:dc:c8:57:2a:d8:38:85:09:24:ad:57:f6:7b:85:59:
f7:3f:4e:ff:1e:e6:1b:83:bd:44:86:14:f8:1b:5e:13:50:e5:
2a:6b:4d:e2:be:51:81:fa:a0:4d:b3:0b:13:5d:5b:35:14:53:
8a:c4:80:43:2a:7f:b2:7f:46:91:7a:dd:4d:91:b9:6b:ea:5b:
67:cf:f5:57:61:73:34:04:57:3e:07:6e:ac:de:74:70:92:f8:
d2:9b:70:97:c3:2e:d3:97:8a:c9:03:c3:2d:f2:40:a1:25:ff:
ca:6e:83:bc:14:76:0c:b6:ba:76:0d:27:80:6f:95:74:2f:e4:
52:38:f1:c3:2a:2b:13:ed:c6:0e:46:17:d8:71:1a:1c:00:ef:
e7:ab:8f:eb:2d:a3:af:49:77:27:44:59:94:36:b1:42:be:b5:
87:e5:39:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:25 2026 by rpki-client