
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft
File: 4BD77983D98742985400276FF0F5959696EA7807.mft (raw, json)
Hash identifier: sLkgXJxwQGkx4ZQu2evi3PYS/XK8zIr6ZgXSSUTGAhA=
Subject key identifier: 62:DE:8C:10:73:4E:29:F1:5D:A3:01:69:5B:2F:9F:AE:95:6A:FA:0D
Authority key identifier: 4B:D7:79:83:D9:87:42:98:54:00:27:6F:F0:F5:95:96:96:EA:78:07
Certificate issuer: /CN=4BD77983D98742985400276FF0F5959696EA7807
Certificate serial: 2692F699DF8ADBA585392D9D373E80C696C36E63
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 02:54:16 +0000
Manifest this update: Thu 24 Sep 2026 02:49:16 +0000
Manifest next update: Fri 25 Sep 2026 05:46:16 +0000
Files and hashes: 1: 3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa (hash: 2ktJ+LGrBdyxqO+5Ni21bj0NM08xpyYMFhaaSWYusJY=)
2: 4BD77983D98742985400276FF0F5959696EA7807.crl (hash: kf443CKlTLfxF7T0uvbYTQxFAS2HZDSwBeuf2DQm1Us=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.crl
rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 05:46:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:92:f6:99:df:8a:db:a5:85:39:2d:9d:37:3e:80:c6:96:c3:6e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BD77983D98742985400276FF0F5959696EA7807
Validity
Not Before: Sep 24 02:49:16 2026 GMT
Not After : Sep 25 05:46:16 2026 GMT
Subject: CN=62DE8C10734E29F15DA301695B2F9FAE956AFA0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:96:d8:df:49:19:bf:80:35:2d:b9:07:0f:
80:08:ba:54:c1:52:d2:05:3d:d2:5d:71:68:7b:3d:
e2:eb:77:17:07:8b:df:24:4a:a6:39:53:f8:bb:7b:
ff:75:d1:9d:de:35:bc:dc:08:a0:e1:a9:31:f7:77:
51:90:a3:d9:3c:34:07:7b:a4:4e:fa:80:f1:e3:c7:
13:10:42:32:23:06:79:f8:72:af:38:f5:0c:68:73:
f6:e1:9e:52:93:37:2e:75:cf:b2:e7:3f:d5:81:bf:
47:24:e1:9b:dd:e5:d3:cb:f5:d0:09:09:a9:a0:6a:
64:82:d5:e0:be:d6:df:eb:93:cd:5a:e9:d3:41:d9:
31:33:58:ba:57:85:62:8e:60:c7:fa:66:f5:31:ad:
93:db:d5:d6:29:b0:d6:e6:1a:e4:22:43:5b:7c:a7:
01:7d:e2:1d:50:45:29:a9:bd:81:67:0e:8b:6f:af:
e1:45:26:de:2d:06:e8:a0:03:02:6b:48:42:5d:cc:
a4:7f:ee:c7:74:37:90:e0:71:90:bc:87:31:a1:f0:
1a:5d:16:85:4c:06:23:a7:cc:34:64:c3:d8:68:bb:
b7:1a:06:61:95:fa:15:da:30:0c:4e:f7:a6:7e:3b:
15:18:04:62:e7:d4:1d:d1:0f:0d:42:63:ba:19:4f:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DE:8C:10:73:4E:29:F1:5D:A3:01:69:5B:2F:9F:AE:95:6A:FA:0D
X509v3 Authority Key Identifier:
keyid:4B:D7:79:83:D9:87:42:98:54:00:27:6F:F0:F5:95:96:96:EA:78:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BD77983D98742985400276FF0F5959696EA7807.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/4BD77983D98742985400276FF0F5959696EA7807.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:33:6c:a5:6d:cb:4c:76:7c:0e:01:4a:3a:de:5d:7f:2a:54:
24:1c:3d:4d:f5:10:56:b6:ed:1c:e8:a6:23:b4:a1:11:b7:5a:
07:8d:b4:c1:cd:e8:8c:f4:3e:b1:a0:67:8f:b3:dc:be:30:53:
3e:91:74:bf:de:57:0f:e5:a1:7e:38:cf:11:3e:07:76:68:bf:
83:dc:d8:53:be:e5:f8:d9:77:be:41:7f:08:92:14:18:08:7b:
cf:6e:50:ba:2c:33:60:79:c3:ad:22:bc:ee:29:9d:0b:93:b8:
28:a9:85:c6:6f:da:64:6c:2e:00:41:cf:23:01:c6:12:4a:13:
8f:a7:4a:f9:61:37:87:69:f1:1b:c9:f7:29:e1:60:2c:e4:bb:
5a:ef:e2:52:93:cc:15:87:d4:7d:3e:c3:73:d0:5c:92:f1:7d:
86:90:df:d1:10:04:74:4d:13:04:03:80:57:e4:0d:4b:0c:40:
3f:f5:3a:36:3f:03:0f:18:f2:ec:71:de:ff:6b:3f:a3:5c:c4:
52:0c:26:ab:2c:c4:6c:2f:3e:83:7f:88:52:29:34:2e:65:7d:
62:03:32:33:13:a1:98:27:32:fb:5d:63:ad:43:0b:7c:ba:72:
10:a8:b4:f2:1d:72:ca:38:f1:0e:f2:95:27:db:39:00:ca:90:
3e:2f:b2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:59:20 2026 by rpki-client