
$ rpki-client -vvf rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
File: 449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft (raw, json)
Hash identifier: 3GG1arqH36lPtgMKftFPjeKIGy8F1m1ucwDnE8kbn/8=
Subject key identifier: B5:F5:BC:9A:F1:BB:AB:AA:5C:1C:1E:78:86:5F:F4:F1:30:DE:D6:29
Authority key identifier: 44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B
Certificate issuer: /CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B
Certificate serial: 1161F3ECA90995C8760F546CDA5B100CC9D22C21
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 21:23:51 +0000
Manifest this update: Tue 12 May 2026 21:18:51 +0000
Manifest next update: Wed 13 May 2026 22:33:51 +0000
Files and hashes: 1: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: 4fUkU+nbH3X0YWVA/nyzT1vHqWQSMJDAjWYPAHB9Lcc=)
2: 449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl (hash: 6siPizMP64031+HogvWekTvrRhzk8gTarGF4ZsrAkeg=)
3: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: d+pQREUWb58vXjRmKWwC44imrF7e8FC0pHZi7c2qThU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl
rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:61:f3:ec:a9:09:95:c8:76:0f:54:6c:da:5b:10:0c:c9:d2:2c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B
Validity
Not Before: May 12 21:18:51 2026 GMT
Not After : May 13 22:33:51 2026 GMT
Subject: CN=B5F5BC9AF1BBABAA5C1C1E78865FF4F130DED629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:42:34:cf:07:31:8b:22:b6:2d:81:7c:cf:
7a:79:88:80:97:0c:14:00:2c:e4:bd:ac:fb:12:a0:
19:a2:33:39:8f:3d:9b:d4:06:f0:80:49:88:0b:73:
4a:7f:4c:96:3a:be:9c:1e:37:33:b7:b0:17:53:a5:
1e:80:f0:7f:3b:8b:ca:63:76:1d:64:6b:8b:c1:86:
4d:d2:4f:4e:9a:e9:cc:a0:49:86:86:b4:ef:f7:78:
37:d8:29:ab:3b:ab:b5:97:f8:8b:a6:94:ca:65:4b:
f3:ba:6e:08:78:03:ff:ed:92:59:91:9f:3a:7f:19:
ee:47:ad:6f:3d:6b:7b:96:1d:70:5e:71:28:14:65:
e7:49:47:7d:3f:ac:b5:0f:16:15:cc:42:e5:33:62:
31:ae:40:77:c1:2a:67:a5:b0:32:29:65:1c:6e:52:
62:6d:3e:84:c6:03:19:bd:14:16:3c:c5:23:8d:f1:
fa:ec:84:29:d2:53:5a:31:42:1e:28:b2:7e:3a:f9:
98:c3:1c:d3:f6:be:c8:b6:04:62:c4:d5:c2:de:59:
e0:d0:b7:1f:62:95:ed:5a:53:52:1d:e1:0b:56:19:
df:c5:31:f3:40:d3:3d:0d:b8:47:89:7e:94:68:1d:
6c:b7:e2:a0:3c:67:bd:91:c4:4a:c5:00:ef:a8:16:
be:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F5:BC:9A:F1:BB:AB:AA:5C:1C:1E:78:86:5F:F4:F1:30:DE:D6:29
X509v3 Authority Key Identifier:
keyid:44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:a2:49:6a:37:87:f3:97:69:5c:8b:70:9f:16:4a:2b:3a:f0:
e2:3d:44:af:b5:ed:9c:9d:35:3d:a0:00:29:18:51:85:11:8d:
00:ee:a3:b9:9a:9b:f4:9b:53:d1:98:c9:47:81:14:a8:bd:e2:
6f:48:30:b5:d7:57:6c:80:86:c5:e0:b3:76:bb:06:1d:24:28:
7f:df:5c:54:73:11:2d:86:b1:d6:1f:e2:cf:b7:6a:ad:75:f1:
95:d1:01:0c:6c:6f:b3:d1:f4:12:ad:3e:2b:23:9b:f8:44:e3:
97:38:3c:84:73:a1:d5:60:09:3b:fc:f2:13:47:f6:60:3c:d3:
88:8f:18:6d:12:b1:13:f7:3d:3a:2c:b9:24:4c:f4:94:3a:46:
7d:e4:cd:ad:4f:2a:84:6c:aa:f7:25:47:f4:54:f6:0a:32:d0:
ab:47:2d:fa:c1:18:84:f0:87:ec:ed:8d:55:16:db:1f:fc:af:
84:08:ba:dc:fd:9f:ba:f7:da:97:42:26:71:de:3c:4f:69:c2:
01:3c:ad:a8:c8:eb:4f:dd:51:28:9b:74:de:1e:be:e8:a7:50:
66:b3:bc:cf:e4:21:bb:61:da:7a:0e:02:a6:37:2a:e7:a2:44:
f9:b6:39:85:8f:c2:2c:07:a0:e7:da:2d:64:c1:df:d1:93:0f:
b1:14:77:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:35 2026 by rpki-client