
$ rpki-client -vvf rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
File: 4493CC2E574126EF2608CAE173DD92103E76A98C.mft (raw, json)
Hash identifier: FZC3QAOoj/IMPtzerOPTM7r75n9lrsXSaL6KJFgTc7E=
Subject key identifier: 22:5A:E4:57:41:95:75:12:0D:A8:E4:F7:57:BF:ED:24:60:BA:BD:5B
Authority key identifier: 44:93:CC:2E:57:41:26:EF:26:08:CA:E1:73:DD:92:10:3E:76:A9:8C
Certificate issuer: /CN=4493CC2E574126EF2608CAE173DD92103E76A98C
Certificate serial: 0386EE7F36B47E712B066E17D89E0C6A0AB93826
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 21:51:43 +0000
Manifest this update: Thu 23 Jul 2026 21:46:43 +0000
Manifest next update: Fri 24 Jul 2026 22:23:43 +0000
Files and hashes: 1: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (hash: M2aI0TJnAz0O76NPtC1fdB1sxAIiTB3vENA8aunOOWY=)
2: 4493CC2E574126EF2608CAE173DD92103E76A98C.crl (hash: tDx1Fx7XzEoBw6pzXV7Vm8S6bnOaI+slCnGuXVwsXyA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.crl
rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:86:ee:7f:36:b4:7e:71:2b:06:6e:17:d8:9e:0c:6a:0a:b9:38:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4493CC2E574126EF2608CAE173DD92103E76A98C
Validity
Not Before: Jul 23 21:46:43 2026 GMT
Not After : Jul 24 22:23:43 2026 GMT
Subject: CN=225AE457419575120DA8E4F757BFED2460BABD5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:22:cb:75:15:40:1d:4b:46:20:f9:c3:7b:
d5:b9:12:a4:53:0c:80:bf:51:b0:8c:50:7a:2e:da:
01:65:74:6d:b5:5d:40:d7:96:d7:83:77:13:7f:89:
24:37:d6:fa:d0:16:d2:60:3a:4b:d4:7a:4d:d7:db:
36:5a:1d:cf:fa:a5:93:18:de:f2:63:d4:da:fe:e0:
30:03:5d:aa:c8:b6:b1:97:c0:4e:bf:7e:9e:ca:db:
e9:fe:3b:2e:93:7c:17:75:1b:65:4e:bd:3a:3c:40:
7c:ad:de:51:e9:f8:14:9c:f5:21:4a:11:d2:6b:87:
cc:a9:44:75:84:52:09:af:70:a9:b9:74:75:a9:f7:
9d:de:6d:eb:26:33:15:04:77:41:2b:67:7a:77:71:
25:f1:a3:e9:88:e3:8b:c9:1a:3a:3d:94:0d:e3:53:
9c:58:be:96:1a:17:0f:c8:6c:4f:be:42:cc:58:90:
87:86:e1:7b:e3:43:30:c2:64:5e:ee:ba:f1:7a:99:
88:42:5e:ad:b0:4a:37:36:e8:10:0f:f5:ac:53:db:
c2:bb:0c:f1:d0:29:20:82:fc:e0:6c:f8:45:ff:41:
11:f0:ba:20:89:1a:14:a6:b6:c7:2b:df:0f:9e:01:
51:6d:3b:e9:03:28:7d:39:d0:3b:43:4b:f0:40:fa:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5A:E4:57:41:95:75:12:0D:A8:E4:F7:57:BF:ED:24:60:BA:BD:5B
X509v3 Authority Key Identifier:
keyid:44:93:CC:2E:57:41:26:EF:26:08:CA:E1:73:DD:92:10:3E:76:A9:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4493CC2E574126EF2608CAE173DD92103E76A98C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/4493CC2E574126EF2608CAE173DD92103E76A98C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b6:89:0e:50:3c:fe:c9:c0:72:2c:71:1e:da:2e:2b:0e:eb:
4e:c4:92:48:3e:06:76:24:50:9d:23:c9:2b:d0:ca:a0:e8:05:
f8:7d:d1:70:9d:4a:63:0f:15:79:95:28:9d:9e:f0:3a:4d:a0:
10:27:5a:dc:07:51:d6:53:eb:9f:5b:80:93:56:0c:c6:d2:4e:
16:74:61:23:3c:3b:c3:02:8b:b4:be:08:1d:61:de:75:db:60:
97:35:28:b5:1b:5d:6b:fe:bf:a0:02:c2:14:13:0a:94:84:6c:
4f:00:51:29:8b:9f:3f:98:c5:c8:22:ec:1f:cd:61:ee:82:3a:
85:78:ab:12:09:22:e4:45:eb:1c:c8:40:72:ae:07:5b:f7:e4:
9b:00:92:d1:40:ee:6c:44:30:18:8a:0b:38:7b:0b:62:c2:80:
96:02:c8:6d:26:b5:5b:01:ec:89:c2:ab:bf:15:e8:13:5c:73:
d7:ed:77:bd:b8:f7:02:ab:12:c2:fe:46:42:f2:67:a6:62:37:
d6:e3:de:b9:40:45:90:c3:db:31:5f:1a:1e:e1:9d:37:55:f0:
62:97:41:ba:2a:43:93:26:5c:f9:5b:17:4e:ac:3e:48:ab:76:
0f:d4:9b:47:dc:fe:f4:1b:cb:22:b2:04:a3:28:af:a8:9d:ab:
91:f0:1a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:48 2026 by rpki-client