
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft
File: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft (raw, json)
Hash identifier: CgPz3hdeFU9op/8Dck4iwOoyR0uK5eA97v2rwJI7l74=
Subject key identifier: E0:85:33:D5:B7:B4:A0:B2:DF:2E:53:B3:14:64:BF:E0:CF:D3:E6:B6
Authority key identifier: 4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3
Certificate issuer: /CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3
Certificate serial: 3B8499DC49D3988765E4DE644E3EA05328681DAB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 22:32:19 +0000
Manifest this update: Thu 23 Jul 2026 22:27:19 +0000
Manifest next update: Sat 25 Jul 2026 01:05:19 +0000
Files and hashes: 1: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: PWQir4scae8YfD6/q+bk0ejgh+XhSzNVifyQAj+tAMA=)
2: 4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl (hash: T5BhNWoEJGV0jkokpiHk45VrZbl2ISjrPve6VzEL5z0=)
3: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: Dk9FmD1Gd6LwGA6mFHwlSjHioZF8VJSA0K7I5b1rqPY=)
4: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: +WxXMuFbrHKDjWOS8r0LmF3/UaAmCxzNKESEznXTLHE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl
rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:84:99:dc:49:d3:98:87:65:e4:de:64:4e:3e:a0:53:28:68:1d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D008AD4761BC72E3ADFA8B4677A44076DA890B3
Validity
Not Before: Jul 23 22:27:19 2026 GMT
Not After : Jul 25 01:05:19 2026 GMT
Subject: CN=E08533D5B7B4A0B2DF2E53B31464BFE0CFD3E6B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4b:42:34:8c:c2:83:14:33:4d:9d:7d:00:cc:
13:62:e4:7a:62:8e:34:8a:18:78:f4:47:6f:0c:94:
18:f9:6e:1b:50:e4:68:25:0c:5e:ee:eb:49:72:68:
52:00:6c:8c:33:78:4f:0d:46:9c:02:fd:f6:a5:92:
63:4e:cd:c5:a8:85:bf:a7:ad:f6:c4:60:de:9f:c4:
2a:57:11:f5:d3:ec:7d:03:a3:3b:af:27:af:d4:5e:
d3:83:60:7b:26:ac:fb:bc:25:fd:07:fa:7a:13:6f:
6d:41:39:99:dc:7f:40:f1:fb:4d:e9:07:92:36:ec:
8b:6e:b1:3b:14:39:8c:89:e6:3e:ab:98:65:c4:33:
c2:bf:08:db:fc:1f:31:10:9b:8d:48:e3:69:f5:e7:
a6:7f:e4:ce:10:b9:fa:cf:f1:ae:d0:09:c1:b5:de:
bc:c9:c1:20:87:69:4c:2c:42:05:5d:88:fe:fb:e4:
d0:bc:f0:9f:90:0d:02:52:12:6d:87:ca:7b:07:84:
b2:31:05:74:bc:43:07:89:0f:f8:8f:66:9e:86:bc:
2f:84:22:0b:25:7b:10:73:74:4e:31:5b:7f:b2:b0:
86:9b:5b:35:2f:b8:25:60:ef:34:48:7f:d4:3f:69:
01:0c:f3:9f:84:9b:1d:99:1c:16:9c:b7:7f:91:21:
92:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:85:33:D5:B7:B4:A0:B2:DF:2E:53:B3:14:64:BF:E0:CF:D3:E6:B6
X509v3 Authority Key Identifier:
keyid:4D:00:8A:D4:76:1B:C7:2E:3A:DF:A8:B4:67:7A:44:07:6D:A8:90:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/4D008AD4761BC72E3ADFA8B4677A44076DA890B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:06:02:72:98:20:41:22:01:dd:bd:35:75:c1:58:0b:97:fa:
3a:2d:8c:5f:65:57:15:5e:29:e7:00:eb:95:21:ed:54:f1:cd:
ab:6c:35:47:a2:2b:2f:ff:49:30:48:28:aa:e1:d6:3c:3a:15:
6b:21:9a:6a:f6:d2:fa:13:7e:f8:2e:11:3a:4a:38:f2:67:be:
8a:1d:50:f6:65:c2:ce:43:af:07:b8:46:4a:dc:47:49:3a:91:
30:dd:77:88:48:44:73:0a:3b:31:98:d0:96:55:18:88:dc:7b:
95:65:d3:52:04:5b:cb:63:0b:35:b8:8a:f4:b5:50:fd:38:bd:
f3:4d:f1:51:7b:f1:a3:04:6a:e4:0b:0d:a7:70:13:52:7b:1f:
6e:86:66:1f:31:09:42:1a:f0:0e:de:92:70:80:2c:c2:a7:3d:
11:a8:a2:0e:6f:22:bc:52:fc:70:fa:5f:c9:70:58:43:0f:ab:
86:81:63:90:88:48:1b:13:97:f3:e6:a5:63:c8:28:30:c2:37:
57:01:23:50:02:54:e8:7b:ed:f1:70:2c:68:e9:52:5a:d4:18:
54:16:1c:4c:91:46:c1:88:c5:b3:6a:a9:29:12:1d:92:0f:93:
b3:31:ed:28:95:96:e8:39:9c:ce:a2:4a:d3:c5:bc:c9:72:5a:
c4:a8:a0:ea
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUO4SZ3EnTmIdl5N5kTj6gUyhoHaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2
REE4OTBCMzAeFw0yNjA3MjMyMjI3MTlaFw0yNjA3MjUwMTA1MTlaMDMxMTAvBgNV
BAMTKEUwODUzM0Q1QjdCNEEwQjJERjJFNTNCMzE0NjRCRkUwQ0ZEM0U2QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPS0I0jMKDFDNNnX0AzBNi5Hpi
jjSKGHj0R28MlBj5bhtQ5GglDF7u60lyaFIAbIwzeE8NRpwC/falkmNOzcWohb+n
rfbEYN6fxCpXEfXT7H0DozuvJ6/UXtODYHsmrPu8Jf0H+noTb21BOZncf0Dx+03p
B5I27ItusTsUOYyJ5j6rmGXEM8K/CNv8HzEQm41I42n156Z/5M4QufrP8a7QCcG1
3rzJwSCHaUwsQgVdiP775NC88J+QDQJSEm2HynsHhLIxBXS8QweJD/iPZp6GvC+E
IgslexBzdE4xW3+ysIabWzUvuCVg7zRIf9Q/aQEM85+Emx2ZHBact3+RIZIZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4IUz1be0oLLfLlOzFGS/4M/T5rYwHwYDVR0j
BBgwFoAUTQCK1HYbxy4636i0Z3pEB22okLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTIyOWNhNTAtZTk1Yy00NWJiLTljMzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3
NjFCQzcyRTNBREZBOEI0Njc3QTQ0MDc2REE4OTBCMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80RDAwOEFENDc2MUJDNzJFM0FERkE4QjQ2NzdBNDQwNzZEQTg5
MEIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj
MzAtNjNlMTJhZjdhNWUxLzAvNEQwMDhBRDQ3NjFCQzcyRTNBREZBOEI0Njc3QTQ0
MDc2REE4OTBCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEwGAnKYIEEiAd29NXXBWAuX+jotjF9lVxVe
KecA65Uh7VTxzatsNUeiKy//STBIKKrh1jw6FWshmmr20voTfvguETpKOPJnvood
UPZlws5Drwe4RkrcR0k6kTDdd4hIRHMKOzGY0JZVGIjce5Vl01IEW8tjCzW4ivS1
UP04vfNN8VF78aMEauQLDadwE1J7H26GZh8xCUIa8A7eknCALMKnPRGoog5vIrxS
/HD6X8lwWEMPq4aBY5CISBsTl/PmpWPIKDDCN1cBI1ACVOh77fFwLGjpUlrUGFQW
HEyRRsGIxbNqqSkSHZIPk7Mx7SiVlug5nM6iStPFvMlyWsSooOo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:44:54 2026 by rpki-client