
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
File: 449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft (raw, json)
Hash identifier: Z5UvJkeXgnUKXqfCvmrNqZaEXNN0RHACZzadKeooDNQ=
Subject key identifier: 1F:51:66:AC:9B:75:52:D9:3B:A9:69:D5:E8:4D:E0:FD:C4:1B:93:96
Authority key identifier: 44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B
Certificate issuer: /CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B
Certificate serial: 23955E450B05D325997F1D8EC40793D74F53BB64
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
Manifest number: 0107
Signing time: Sun 15 Nov 2026 00:24:43 +0000
Manifest this update: Sun 15 Nov 2026 00:19:43 +0000
Manifest next update: Mon 16 Nov 2026 03:42:43 +0000
Files and hashes: 1: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: 4fUkU+nbH3X0YWVA/nyzT1vHqWQSMJDAjWYPAHB9Lcc=)
2: 449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl (hash: 8jfrAd1q7+SzPhElOl+J/tUrv8IdXH6RRZtuYzZh9U0=)
3: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: d+pQREUWb58vXjRmKWwC44imrF7e8FC0pHZi7c2qThU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl
rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 03:42:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:95:5e:45:0b:05:d3:25:99:7f:1d:8e:c4:07:93:d7:4f:53:bb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B
Validity
Not Before: Nov 15 00:19:43 2026 GMT
Not After : Nov 16 03:42:43 2026 GMT
Subject: CN=1F5166AC9B7552D93BA969D5E84DE0FDC41B9396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:30:7e:ad:c2:83:41:16:af:15:08:a7:3e:2a:
02:43:b5:78:fd:3a:89:d5:c8:6c:3a:57:4f:da:11:
74:46:db:f3:c6:81:c4:dd:c1:b7:91:01:9c:9d:38:
7f:fa:2b:fe:4b:dc:e9:d0:55:d2:16:7c:9d:3d:ed:
01:64:03:3f:3b:37:41:fc:29:17:3b:bd:93:ba:5d:
cc:f4:4a:41:8e:b0:60:b0:7c:2f:bc:07:24:0d:4a:
b0:a3:af:8b:25:13:84:6d:73:81:f2:03:18:f3:c7:
44:35:b8:23:27:91:a6:2e:2e:89:21:6b:bc:aa:42:
a0:1c:63:c4:b5:6e:87:65:42:0b:f0:18:18:aa:57:
73:d9:a3:9e:5c:04:27:60:a3:c5:c0:90:84:39:f1:
e1:ab:49:80:bb:4b:4d:df:63:cd:b8:00:8c:7e:de:
2a:bf:35:57:cc:f9:4b:8c:2e:85:be:5f:a2:0d:9a:
12:9d:a7:61:49:05:7c:92:84:5f:27:42:50:a3:16:
e0:55:ca:ee:58:cd:c4:ec:4e:be:43:55:fe:1e:2c:
58:67:5e:82:32:11:7d:95:da:ad:79:4e:4a:b6:bd:
55:16:a2:c7:47:d0:69:e8:72:17:66:3a:0f:a1:e4:
93:03:57:5f:2e:9c:ce:75:63:5e:36:5c:ee:ba:a3:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:51:66:AC:9B:75:52:D9:3B:A9:69:D5:E8:4D:E0:FD:C4:1B:93:96
X509v3 Authority Key Identifier:
keyid:44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a4:33:8a:b4:dc:fa:a4:16:0d:f1:48:5d:de:aa:75:3e:cd:
cc:f9:49:13:c7:ed:54:8a:2c:32:92:60:99:19:48:d1:d5:ac:
2d:99:86:43:ba:c1:3e:a7:be:d0:43:bb:bb:ab:95:79:3b:3b:
f4:87:f4:e8:8c:52:a2:ef:1c:b0:9b:59:6a:55:ca:f1:8b:e4:
ab:dd:cf:f6:f4:6d:b2:92:40:e0:c0:16:ee:f3:b5:32:b7:7f:
1b:b3:d5:24:ea:54:be:3b:ee:be:0f:26:d8:cf:1a:41:73:fb:
c7:63:73:3c:56:0b:db:59:33:e2:27:cc:e4:7e:49:2e:fd:75:
75:ff:8d:0e:a9:66:af:49:df:e8:9e:57:34:4b:c3:20:8f:5b:
af:6f:f7:3c:2f:ff:4e:84:ad:c3:c0:f6:94:87:40:05:1b:f3:
f0:50:72:b0:f0:3d:1b:11:73:fa:fa:30:e9:32:c7:09:cb:cf:
3b:42:aa:de:d5:19:1e:b9:3d:cf:90:5f:de:12:b8:5b:6f:b5:
61:2c:68:97:53:a7:bf:dc:95:83:37:bf:1b:78:00:c8:83:f4:
11:16:2f:7f:59:5c:ef:0e:6d:a6:07:8a:82:c2:41:f8:92:a8:
71:cd:6f:21:0a:f4:60:a4:61:ff:15:cf:19:2a:f9:2c:81:75:
c5:58:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:30:15 2026 by rpki-client