
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft
File: 476A27F6557241F0C8B13CD6474412B065E838A1.mft (raw, json)
Hash identifier: 9bbE6zySsuLCh5a6H/CI4TyscjsVJD520zxzmkqJkxw=
Subject key identifier: E1:DD:89:75:68:D8:6A:C5:6B:24:95:80:CF:50:70:11:DD:15:E0:B3
Authority key identifier: 47:6A:27:F6:55:72:41:F0:C8:B1:3C:D6:47:44:12:B0:65:E8:38:A1
Certificate issuer: /CN=476A27F6557241F0C8B13CD6474412B065E838A1
Certificate serial: 545F5D91915BFDFBD998BB1ABB9F85B27FFC2527
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 19:18:46 +0000
Manifest this update: Thu 23 Jul 2026 19:13:46 +0000
Manifest next update: Fri 24 Jul 2026 22:03:46 +0000
Files and hashes: 1: 3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (hash: OYr7fPU7LqGA/4X0nRg4WLnhKqVCaQ39UeYK0Ag4/eg=)
2: 476A27F6557241F0C8B13CD6474412B065E838A1.crl (hash: HR6jlTANCV601ojkLlmG2l325QJBE7lq5NCIpjETs0E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.crl
rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:5f:5d:91:91:5b:fd:fb:d9:98:bb:1a:bb:9f:85:b2:7f:fc:25:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476A27F6557241F0C8B13CD6474412B065E838A1
Validity
Not Before: Jul 23 19:13:46 2026 GMT
Not After : Jul 24 22:03:46 2026 GMT
Subject: CN=E1DD897568D86AC56B249580CF507011DD15E0B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:27:b4:30:08:c1:25:cf:09:5a:2b:28:9d:
48:36:b1:75:f9:82:e0:8e:40:dc:e5:db:4d:57:a5:
cc:b3:1d:d0:7c:e6:a6:b0:f5:1c:be:cd:51:3a:93:
3b:e2:cd:ab:b3:64:d9:22:2a:90:bc:23:ee:08:e7:
52:9e:3f:de:70:b0:25:2f:52:61:86:6a:7f:89:94:
ed:f3:0f:82:6c:b9:72:31:49:39:ef:b1:60:b9:bf:
b9:4b:72:23:1a:b5:f7:30:bb:14:82:4a:ed:c3:f2:
8a:7c:ce:e3:ea:2c:6b:f3:87:d9:32:5b:92:3c:d5:
cf:f6:0d:9c:f7:4f:f5:32:37:d3:9e:28:0a:80:fb:
5e:10:cc:f9:44:d8:56:7b:b3:00:c6:cb:ca:92:0e:
5c:8b:bf:70:bb:e8:00:5b:84:d5:63:c7:fa:d5:5a:
37:8b:83:16:73:5e:7e:40:10:ee:d1:d4:70:3f:f0:
eb:fc:c7:c5:de:b3:d4:3c:bd:c6:21:2a:61:e8:7f:
a3:e1:b8:b4:6f:26:63:f4:f1:09:3b:f2:b3:88:7b:
4a:16:bd:0c:e2:85:6d:d3:2a:c8:db:38:7e:f4:fb:
1e:c1:56:81:b6:99:f1:86:d9:e3:a1:b4:0e:08:af:
1d:3a:09:24:11:ad:9b:26:0a:f1:5e:ee:85:4e:ee:
8d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DD:89:75:68:D8:6A:C5:6B:24:95:80:CF:50:70:11:DD:15:E0:B3
X509v3 Authority Key Identifier:
keyid:47:6A:27:F6:55:72:41:F0:C8:B1:3C:D6:47:44:12:B0:65:E8:38:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a1:91:1e:a1:29:2c:c4:df:ab:9e:b3:f4:3a:b4:ac:45:73:
dc:7a:97:21:bc:58:cf:39:24:0f:66:a8:7f:0f:0a:52:c3:07:
be:8d:f5:60:99:99:94:ae:9c:ee:12:0b:00:04:bb:3b:e8:ed:
c3:0a:26:14:f1:6d:d7:e7:a2:66:f4:14:6d:01:c5:3b:f8:72:
86:78:a6:ec:e5:a4:3f:a2:67:bb:22:c1:e5:35:cd:49:af:78:
2c:c2:6b:6a:fd:78:d5:82:52:33:9a:56:3f:de:96:b3:7c:f3:
cd:63:09:9b:62:50:ee:12:04:fe:cd:fc:8f:0d:0f:4b:5e:65:
19:c9:1b:45:4c:0f:a1:9e:ab:eb:32:c4:5c:08:da:41:d3:48:
59:3b:6a:34:38:1d:46:e3:9d:d9:22:b6:3e:31:7e:09:cd:42:
c4:2d:c9:53:21:c0:8b:9a:35:12:09:6c:6b:6d:d9:31:58:45:
ab:23:79:d9:46:8b:d0:67:26:3f:7c:98:c8:b0:fb:87:46:0f:
a4:4f:fa:eb:9a:8e:27:42:21:b7:88:81:d5:70:f6:e1:ad:19:
4f:61:c4:91:6d:b4:a8:51:9b:d1:2d:ba:87:33:1b:fa:1b:1c:
f0:d5:67:b2:6a:ed:6e:82:dd:80:b0:5f:64:4a:73:7f:04:2f:
ec:29:7b:ef
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVF9dkZFb/fvZmLsau5+Fsn/8JScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2QTI3RjY1NTcyNDFGMEM4QjEzQ0Q2NDc0NDEyQjA2
NUU4MzhBMTAeFw0yNjA3MjMxOTEzNDZaFw0yNjA3MjQyMjAzNDZaMDMxMTAvBgNV
BAMTKEUxREQ4OTc1NjhEODZBQzU2QjI0OTU4MENGNTA3MDExREQxNUUwQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tye0MAjBJc8JWisonUg2sXX5
guCOQNzl201XpcyzHdB85qaw9Ry+zVE6kzvizauzZNkiKpC8I+4I51KeP95wsCUv
UmGGan+JlO3zD4JsuXIxSTnvsWC5v7lLciMatfcwuxSCSu3D8op8zuPqLGvzh9ky
W5I81c/2DZz3T/UyN9OeKAqA+14QzPlE2FZ7swDGy8qSDlyLv3C76ABbhNVjx/rV
WjeLgxZzXn5AEO7R1HA/8Ov8x8Xes9Q8vcYhKmHof6PhuLRvJmP08Qk78rOIe0oW
vQzihW3TKsjbOH70+x7BVoG2mfGG2eOhtA4Irx06CSQRrZsmCvFe7oVO7o2fAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4d2JdWjYasVrJJWAz1BwEd0V4LMwHwYDVR0j
BBgwFoAUR2on9lVyQfDIsTzWR0QSsGXoOKEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGVkMjhkZTgtMzBhMS00OTMyLWI1MzktMjIzOGJhNzU5MzBhLzAvNDc2QTI3RjY1
NTcyNDFGMEM4QjEzQ0Q2NDc0NDEyQjA2NUU4MzhBMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80NzZBMjdGNjU1NzI0MUYwQzhCMTNDRDY0NzQ0MTJCMDY1RTgz
OEExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGVkMjhkZTgtMzBhMS00OTMyLWI1
MzktMjIzOGJhNzU5MzBhLzAvNDc2QTI3RjY1NTcyNDFGMEM4QjEzQ0Q2NDc0NDEy
QjA2NUU4MzhBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACqhkR6hKSzE36ues/Q6tKxFc9x6lyG8WM85
JA9mqH8PClLDB76N9WCZmZSunO4SCwAEuzvo7cMKJhTxbdfnomb0FG0BxTv4coZ4
puzlpD+iZ7siweU1zUmveCzCa2r9eNWCUjOaVj/elrN8881jCZtiUO4SBP7N/I8N
D0teZRnJG0VMD6Geq+syxFwI2kHTSFk7ajQ4HUbjndkitj4xfgnNQsQtyVMhwIua
NRIJbGtt2TFYRasjedlGi9BnJj98mMiw+4dGD6RP+uuajidCIbeIgdVw9uGtGU9h
xJFttKhRm9EtuoczG/obHPDVZ7Jq7W6C3YCwX2RKc38EL+wpe+8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:49:57 2026 by rpki-client