
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft
File: 494BBF61A7ADCFAD78873BA2370358D4C942405D.mft (raw, json)
Hash identifier: VPHnHUxTFzMxnmVobMkO3aKfKzzRZEgqdq8gSlUvAJ4=
Subject key identifier: 45:9C:1C:DD:11:1C:9E:9D:AD:40:DE:8E:CC:6A:73:0B:D0:27:10:5D
Authority key identifier: 49:4B:BF:61:A7:AD:CF:AD:78:87:3B:A2:37:03:58:D4:C9:42:40:5D
Certificate issuer: /CN=494BBF61A7ADCFAD78873BA2370358D4C942405D
Certificate serial: 60D7AE49A0B7BE88F56FA75842BF38B47CCFE2D4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft
Manifest number: C3
Signing time: Thu 24 Sep 2026 08:51:40 +0000
Manifest this update: Thu 24 Sep 2026 08:46:40 +0000
Manifest next update: Fri 25 Sep 2026 12:39:40 +0000
Files and hashes: 1: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: Ckq81tABd9P/ltS1UN2BW7llZjF9ry0atyKHbIk0sEg=)
2: 494BBF61A7ADCFAD78873BA2370358D4C942405D.crl (hash: rtGNorhLfr7uWN3zme1CE+WrxFzp3Sfvwz3UhAUdHHM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.crl
rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d7:ae:49:a0:b7:be:88:f5:6f:a7:58:42:bf:38:b4:7c:cf:e2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494BBF61A7ADCFAD78873BA2370358D4C942405D
Validity
Not Before: Sep 24 08:46:40 2026 GMT
Not After : Sep 25 12:39:40 2026 GMT
Subject: CN=459C1CDD111C9E9DAD40DE8ECC6A730BD027105D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:94:91:54:01:27:35:29:58:25:49:a4:49:
33:3d:54:c3:ba:90:c6:ce:96:31:91:66:d2:27:46:
49:4e:07:bd:1b:3b:17:f7:e4:ac:b2:73:2c:d1:35:
11:14:95:11:0a:96:4f:cf:d0:29:f9:60:3e:81:92:
11:d4:0d:57:05:ee:8b:b0:d1:1f:9d:16:e9:d5:c1:
b7:2f:f6:80:85:8e:d9:d8:5c:d9:a1:e8:10:20:a9:
13:da:63:01:25:9a:e9:77:2b:e9:f3:2b:10:cd:03:
d8:7a:f5:e4:ce:47:44:76:51:27:1a:83:aa:64:13:
c4:05:4d:48:ca:cb:31:7b:50:da:3d:d6:cc:69:b0:
df:99:ac:db:aa:41:64:a9:ec:79:58:cf:ec:e7:17:
ac:af:2a:5c:f1:e3:e1:0b:65:03:05:9e:0b:84:3b:
92:af:78:01:b7:65:82:2b:48:04:07:61:a6:08:7a:
77:fb:64:f5:ec:75:5e:9b:b3:9c:c4:1d:0b:7e:26:
fe:b1:03:05:8e:ff:e5:41:83:09:06:8c:9c:e8:99:
45:ef:1d:5f:08:8a:ac:05:55:d2:17:d8:83:51:98:
9f:5c:e4:4f:a8:45:fc:1c:d5:83:e4:93:e6:91:62:
d5:74:de:f7:b0:a5:5f:83:e9:1c:da:2e:e6:92:72:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9C:1C:DD:11:1C:9E:9D:AD:40:DE:8E:CC:6A:73:0B:D0:27:10:5D
X509v3 Authority Key Identifier:
keyid:49:4B:BF:61:A7:AD:CF:AD:78:87:3B:A2:37:03:58:D4:C9:42:40:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/494BBF61A7ADCFAD78873BA2370358D4C942405D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/494BBF61A7ADCFAD78873BA2370358D4C942405D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5e:2a:78:84:2c:32:7b:12:61:14:b8:aa:79:9a:9b:01:df:
f8:ad:81:34:bf:30:ab:37:de:ac:4c:e8:16:d1:13:ed:4e:80:
e0:9b:d6:80:47:3b:56:21:83:25:a3:fc:ee:57:ee:ad:11:36:
23:89:0e:60:d4:f1:6f:a3:e7:63:44:b2:7b:03:ae:d1:df:b7:
b6:de:ee:14:1b:07:f0:01:e0:8d:36:11:86:0f:7b:8d:0d:9a:
6c:0d:83:62:f2:f2:54:a7:f8:9f:d3:ea:c4:84:bf:82:59:da:
9b:6f:86:8d:90:64:bf:78:8d:4c:4c:64:a2:75:b2:98:a5:52:
b2:7d:ac:8b:ce:6a:e5:14:34:e6:e5:c7:96:a8:b5:a4:15:64:
c7:da:ad:d5:c5:a6:bc:49:06:9e:c8:2d:43:25:82:a3:d8:18:
eb:99:5c:fb:cc:47:20:d5:3f:dd:8d:6e:59:3b:3c:59:b8:53:
f6:e2:a2:7c:04:9d:48:fe:4a:cd:ff:b7:8e:6c:2a:a4:0a:54:
56:45:07:dc:2b:43:6e:3c:62:ed:fc:56:62:c3:b8:d9:cf:26:
41:10:ed:44:4f:70:94:20:4c:42:10:6a:32:b8:a4:7c:3a:18:
d5:7a:4f:2d:5f:9f:84:85:e9:b3:93:73:31:4f:97:e4:f3:92:
3d:42:ff:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:45:00 2026 by rpki-client