
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
File: 449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft (raw, json)
Hash identifier: hbWGua+vwrIDkLjdbbs9o6e9xTBtuezwuM52v2Lx0S4=
Subject key identifier: 9C:25:28:A4:42:E5:B1:00:26:D4:09:48:F4:A2:8D:9B:F1:A1:FF:23
Authority key identifier: 44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B
Certificate issuer: /CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B
Certificate serial: 07E8B103C0E7329AC25F54EE187720F2740453A2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 03:20:06 +0000
Manifest this update: Wed 23 Sep 2026 03:15:06 +0000
Manifest next update: Thu 24 Sep 2026 06:31:06 +0000
Files and hashes: 1: 449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl (hash: Y1mwrsPZQCFdTV1ho4AENzs1Gs19ueHOY+cuSoEGNdo=)
2: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (hash: d+pQREUWb58vXjRmKWwC44imrF7e8FC0pHZi7c2qThU=)
3: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (hash: 4fUkU+nbH3X0YWVA/nyzT1vHqWQSMJDAjWYPAHB9Lcc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl
rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 06:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:e8:b1:03:c0:e7:32:9a:c2:5f:54:ee:18:77:20:f2:74:04:53:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B
Validity
Not Before: Sep 23 03:15:06 2026 GMT
Not After : Sep 24 06:31:06 2026 GMT
Subject: CN=9C2528A442E5B10026D40948F4A28D9BF1A1FF23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:d8:56:58:65:5c:f5:78:53:39:a3:f9:dc:
05:e8:42:58:75:f5:0b:d2:3a:fa:2f:cd:56:78:5f:
9f:29:cf:e7:78:6b:1a:8c:de:32:87:04:5d:1f:02:
1b:a2:ea:df:d3:c4:a0:b9:21:9e:55:1d:3c:7d:c3:
ba:a6:b7:da:85:d7:d8:bb:42:35:58:d5:57:d3:3e:
ea:94:32:a5:ed:03:bc:82:26:e9:fb:35:49:2e:10:
39:9b:f8:f5:85:0d:d1:1f:b8:c3:33:27:3e:cd:e3:
fe:8e:18:bd:1a:2c:80:ac:72:60:1c:b1:3e:4f:61:
4d:64:7d:69:de:db:55:50:69:bb:d2:f4:11:dd:5e:
b6:39:b7:7a:2a:c3:6d:6a:de:03:41:d4:f5:58:3b:
b9:1c:36:fe:99:2f:03:e3:46:fb:4c:34:39:39:64:
89:cf:7e:e9:e0:04:2c:8d:7f:b7:44:68:cc:44:7d:
c8:b2:71:13:3b:dc:8b:c7:a1:f2:fb:38:67:16:0b:
14:e9:18:fd:4a:90:9d:2b:a4:b7:b4:83:fd:21:a9:
a6:d0:0c:7f:75:b0:bd:59:a6:19:31:84:58:20:ba:
9c:47:15:dd:85:f0:a1:3b:ba:ee:af:b8:e8:8e:21:
ef:ff:1e:34:16:7c:fe:5c:f0:43:67:b6:4f:90:83:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:25:28:A4:42:E5:B1:00:26:D4:09:48:F4:A2:8D:9B:F1:A1:FF:23
X509v3 Authority Key Identifier:
keyid:44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:17:e5:76:5d:8e:06:30:c5:e1:da:91:5b:47:53:40:62:ff:
0f:01:a9:f2:32:b9:e2:be:40:13:34:5f:f6:67:63:bf:2a:21:
78:20:a0:18:b6:34:45:1d:1c:4c:7a:a8:a5:4e:4e:a8:fb:a8:
da:ea:37:5b:bb:d7:6c:a4:6b:17:50:35:40:c6:3c:18:3c:bd:
34:90:23:f7:88:70:25:66:c7:52:50:b4:b9:ff:db:0b:e6:2a:
13:ce:07:e8:2b:3e:7d:7a:dd:00:16:0e:8a:17:3f:5b:64:76:
61:f5:c2:11:87:79:1e:90:ce:ff:0a:f7:61:6f:9e:44:74:27:
71:05:7a:b0:03:f5:84:31:52:2d:3a:05:94:ff:8e:f0:56:fa:
95:9f:a3:e4:ea:ac:46:64:89:5f:b5:0f:d4:33:3c:93:6c:af:
56:17:bf:02:14:56:88:dd:37:64:9d:45:17:54:92:06:f3:3e:
c3:1d:bd:5e:8c:e9:82:c1:1c:d6:43:1c:49:a4:bc:4c:be:e1:
55:de:4f:e2:25:f8:ab:a0:9c:6f:03:0e:91:53:a1:26:a3:89:
63:e6:df:5c:ad:56:1c:8a:0d:6d:c3:8a:f7:fb:0c:bb:25:e6:
09:86:e6:26:69:1d:b5:d2:11:ac:50:f7:11:44:0a:3a:76:c1:
99:00:33:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:34:25 2026 by rpki-client