
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
File: 4156BE0E036363A596E1CBC310489AB801DFF941.mft (raw, json)
Hash identifier: +UKJQEG4bWbsxxIYfG+M7mgNYk+IwqGZPhv6GFbRpBg=
Subject key identifier: D8:8B:58:A1:F8:65:5D:1E:D0:80:56:A1:25:AE:4F:31:13:79:D5:81
Authority key identifier: 41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41
Certificate issuer: /CN=4156BE0E036363A596E1CBC310489AB801DFF941
Certificate serial: 55AD11E86972C8916A938520179485777B0E2FFE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
Manifest number: C2
Signing time: Fri 25 Sep 2026 04:46:21 +0000
Manifest this update: Fri 25 Sep 2026 04:41:21 +0000
Manifest next update: Sat 26 Sep 2026 06:56:21 +0000
Files and hashes: 1: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: rSHHS2SVXYFIsnKnswkfD0W9wcSIKHSwcE57Ly7QYSU=)
2: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: 6peX0JDNzT6rMcQu54Lce5kAols1rJU3rJxRvgulacM=)
3: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: BnEjvX1TV7mzZcLsswA7EKyiNtfAnyBE1cK3RYLFuSA=)
4: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fBaq5SB6brHrX1BQRg7cuUdo6I/tHMTxRcN1nuTWvWU=)
5: 4156BE0E036363A596E1CBC310489AB801DFF941.crl (hash: X3CLg6DNpgXDaqqOBH66Mt7eK7wyYRSy6iMnCbdniWw=)
6: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: 80LRBswxlIwyMdrBKKN8zHcPB67XbaBw69GuBUvFeh0=)
7: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: HaFV5pJV86ftGAnPRTRMjv8zuoil0malPe+dc/Qoh5c=)
8: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: 1Jti76r9T9UKwdcEcYvsPgmo/iaRRGG2B+UGXQ8BTSc=)
9: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: HmJs2PjyM55f07/63Txr+Z06mPwICEzHB4ScF1m3HOs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl
rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 06:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ad:11:e8:69:72:c8:91:6a:93:85:20:17:94:85:77:7b:0e:2f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4156BE0E036363A596E1CBC310489AB801DFF941
Validity
Not Before: Sep 25 04:41:21 2026 GMT
Not After : Sep 26 06:56:21 2026 GMT
Subject: CN=D88B58A1F8655D1ED08056A125AE4F311379D581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:e4:0d:99:1c:e5:51:72:84:9e:be:c7:02:
88:81:c0:c9:97:28:08:aa:23:eb:85:42:82:db:37:
ff:c1:63:2a:6d:93:55:eb:84:2d:63:9c:7c:7c:72:
d9:63:24:e3:10:20:cc:ae:db:bf:82:ba:0d:ef:20:
4e:4a:1a:39:5b:91:b2:a0:26:67:1f:4c:ac:d0:fd:
68:82:36:07:27:31:ce:04:a2:98:64:f0:c7:db:51:
5c:fc:e4:45:7b:21:fd:a7:63:19:33:1c:6f:bc:fa:
e3:25:06:6d:60:b5:73:b5:61:89:8f:c1:51:11:5c:
25:fe:7d:20:fc:c2:94:62:c8:db:31:3d:97:d7:09:
3f:60:7d:95:29:2e:e2:5d:58:bf:9b:34:16:2b:47:
b3:09:4e:c3:9f:9d:9e:ef:86:48:5c:71:f5:e2:b1:
80:eb:a0:80:0b:61:93:d2:c4:2a:67:30:d6:ad:33:
4f:df:dd:0c:f0:a7:8f:d1:88:ff:5d:7e:20:37:da:
66:ff:e1:f4:59:3f:88:c8:c1:d7:6f:b9:9b:08:52:
8a:fd:a6:46:e2:49:ea:d4:0a:e5:21:63:04:bf:67:
11:58:57:9e:b8:02:d6:bc:e4:e7:d8:f3:1c:37:08:
13:8c:51:38:af:22:33:30:81:13:0d:00:14:8f:3d:
da:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8B:58:A1:F8:65:5D:1E:D0:80:56:A1:25:AE:4F:31:13:79:D5:81
X509v3 Authority Key Identifier:
keyid:41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3b:cd:ec:30:67:50:96:19:17:89:56:f3:aa:79:ee:d3:e4:
aa:93:b3:e6:ed:1e:ad:22:e8:71:20:6a:93:c4:d2:57:36:14:
a2:bf:44:86:c7:af:b5:79:56:92:c0:ce:eb:22:11:50:67:2b:
ea:f8:45:a5:76:ad:79:8c:e5:46:13:71:1a:80:08:ef:3d:18:
be:68:53:b2:aa:9f:a5:81:e4:cb:42:93:65:57:bc:3d:93:43:
b2:8a:f9:07:fc:43:80:3e:19:25:be:b3:e8:dc:a3:e3:4b:77:
dd:06:99:9f:99:f5:e1:86:f3:54:f9:07:41:18:54:24:38:ba:
f4:f5:d5:1f:b3:d5:c3:72:d0:c4:f9:2d:f1:d8:70:35:e2:c4:
ee:49:94:6d:94:e4:50:b5:39:ad:fb:32:d5:88:0d:3d:41:63:
86:51:53:3e:86:f3:f8:57:0e:9b:bd:d3:47:f6:9b:0f:65:03:
4d:2a:94:eb:33:72:32:26:63:be:e6:fe:c8:f6:96:80:ac:a2:
30:55:40:30:9c:7e:9e:a8:ee:64:7d:5b:bd:db:79:2c:a3:8b:
31:1d:55:0b:80:12:3e:6a:b2:9d:13:53:16:3e:50:35:c0:b6:
10:5e:a7:8b:cd:3d:a6:0f:22:e4:0e:b2:72:3a:e7:a2:83:56:
4f:ae:49:8e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVa0R6GlyyJFqk4UgF5SFd3sOL/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1NkJFMEUwMzYzNjNBNTk2RTFDQkMzMTA0ODlBQjgw
MURGRjk0MTAeFw0yNjA5MjUwNDQxMjFaFw0yNjA5MjYwNjU2MjFaMDMxMTAvBgNV
BAMTKEQ4OEI1OEExRjg2NTVEMUVEMDgwNTZBMTI1QUU0RjMxMTM3OUQ1ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ceQNmRzlUXKEnr7HAoiBwMmX
KAiqI+uFQoLbN//BYyptk1XrhC1jnHx8ctljJOMQIMyu27+Cug3vIE5KGjlbkbKg
JmcfTKzQ/WiCNgcnMc4Eophk8MfbUVz85EV7If2nYxkzHG+8+uMlBm1gtXO1YYmP
wVERXCX+fSD8wpRiyNsxPZfXCT9gfZUpLuJdWL+bNBYrR7MJTsOfnZ7vhkhccfXi
sYDroIALYZPSxCpnMNatM0/f3Qzwp4/RiP9dfiA32mb/4fRZP4jIwddvuZsIUor9
pkbiSerUCuUhYwS/ZxFYV564Ata85OfY8xw3CBOMUTivIjMwgRMNABSPPdoVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2ItYofhlXR7QgFahJa5PMRN51YEwHwYDVR0j
BBgwFoAUQVa+DgNjY6WW4cvDEEiauAHf+UEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODA3NThmMTUtNWRlOC00ODdkLTk5NDUtYzNlYTIwN2U0NGFkLzAvNDE1NkJFMEUw
MzYzNjNBNTk2RTFDQkMzMTA0ODlBQjgwMURGRjk0MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MTU2QkUwRTAzNjM2M0E1OTZFMUNCQzMxMDQ4OUFCODAxREZG
OTQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5
NDUtYzNlYTIwN2U0NGFkLzAvNDE1NkJFMEUwMzYzNjNBNTk2RTFDQkMzMTA0ODlB
QjgwMURGRjk0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAF87zewwZ1CWGReJVvOqee7T5KqTs+btHq0i
6HEgapPE0lc2FKK/RIbHr7V5VpLAzusiEVBnK+r4RaV2rXmM5UYTcRqACO89GL5o
U7Kqn6WB5MtCk2VXvD2TQ7KK+Qf8Q4A+GSW+s+jco+NLd90GmZ+Z9eGG81T5B0EY
VCQ4uvT11R+z1cNy0MT5LfHYcDXixO5JlG2U5FC1Oa37MtWIDT1BY4ZRUz6G8/hX
Dpu900f2mw9lA00qlOszcjImY77m/sj2loCsojBVQDCcfp6o7mR9W73beSyjizEd
VQuAEj5qsp0TUxY+UDXAthBep4vNPaYPIuQOsnI656KDVk+uSY4=
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:33:35 2026 by rpki-client