
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
File: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft (raw, json)
Hash identifier: 7mvJHlJ19Pe9s4IV8F9AI/cB/XBPyoD8Uq2UJTWG4eE=
Subject key identifier: 9A:DB:46:92:CF:83:80:E6:2A:8E:96:2C:1A:00:42:6A:48:1B:4C:1B
Authority key identifier: 4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2
Certificate issuer: /CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2
Certificate serial: 4EA453BBF8A1BEEC094E5FFC34675CA76496CA53
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:09:49 +0000
Manifest this update: Tue 12 May 2026 19:04:49 +0000
Manifest next update: Wed 13 May 2026 22:14:49 +0000
Files and hashes: 1: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: ry2+KDu888rhvRXyvEVBH/F8IFRWnEG2799s3X5mVKA=)
2: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl (hash: Gewn3sODISw6TBqJG0LB2DISOpUxOrM27PcMRhqJ6BY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl
rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:a4:53:bb:f8:a1:be:ec:09:4e:5f:fc:34:67:5c:a7:64:96:ca:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2
Validity
Not Before: May 12 19:04:49 2026 GMT
Not After : May 13 22:14:49 2026 GMT
Subject: CN=9ADB4692CF8380E62A8E962C1A00426A481B4C1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:03:1a:84:4c:39:c5:3c:f3:53:d2:f8:d6:a7:
25:40:50:5f:61:02:23:4e:7d:38:4e:f4:9e:58:24:
79:96:21:1d:88:58:9d:77:4c:5c:b2:f7:ce:4a:c5:
1b:89:95:24:6c:2e:54:78:f1:79:a2:d4:3b:23:f9:
3e:8f:8b:1d:3a:e2:d9:be:ee:cd:b2:ff:cc:4e:4f:
f0:a6:da:f8:b2:50:bd:d9:bb:cf:95:7c:c0:61:b2:
c6:00:7c:4d:92:cf:61:49:d3:68:b5:47:08:23:93:
59:f2:53:c2:b4:e8:47:79:91:7b:2a:f4:b1:bd:77:
10:48:a1:80:0e:7c:43:31:21:99:83:62:f5:8d:53:
f7:39:e2:20:9f:03:6f:60:2c:55:dd:65:e8:d7:c8:
41:a8:da:11:e7:43:be:f4:00:8e:be:65:89:8b:a1:
d6:7b:be:91:59:9b:ce:94:16:fa:0c:f3:23:71:56:
f4:4c:a6:b0:62:d2:4a:e9:20:03:3b:88:f2:af:31:
f9:e4:be:be:13:c0:b4:75:58:b1:a5:31:a7:fe:8c:
05:6d:6d:95:e7:c6:c8:11:38:7e:90:ac:f8:3e:6d:
b8:f6:67:e0:40:da:38:e5:ae:38:73:a1:86:f5:35:
22:5c:11:11:00:5c:c7:b6:9d:09:ea:d8:dd:61:66:
63:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DB:46:92:CF:83:80:E6:2A:8E:96:2C:1A:00:42:6A:48:1B:4C:1B
X509v3 Authority Key Identifier:
keyid:4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:5f:74:07:87:41:df:c7:b7:4d:31:d2:cf:80:8e:8d:24:b3:
7b:fe:4c:c3:ca:9b:bf:3f:30:d4:b3:ad:ed:d7:d3:9a:5b:34:
e5:5d:6e:08:52:e3:58:d9:5a:d2:c6:e1:5e:ff:85:5b:e4:31:
52:14:cd:f9:16:4e:13:05:58:1e:90:fc:d4:6b:6b:67:95:a6:
20:8b:1a:20:5a:b7:4f:4d:0a:7b:92:b5:58:3c:81:9a:d4:46:
2f:37:97:87:20:b3:82:1b:13:fa:ae:b8:9b:94:1b:5f:af:6e:
9d:c7:c1:a5:86:3d:b6:7c:2f:e2:da:75:72:2f:fb:3f:03:0b:
b4:72:66:7f:f7:a5:fa:22:94:26:bc:b2:7a:96:19:a0:88:c9:
2e:91:c5:55:c7:7e:78:33:36:e4:36:a5:36:c1:07:49:0d:81:
79:30:31:4b:f3:8c:17:85:2f:93:90:b7:b8:38:24:69:7b:ff:
66:00:4d:b5:3d:f5:ba:a2:59:93:ec:63:01:48:64:50:3a:be:
44:c1:cf:71:b5:44:02:06:2e:a3:96:d1:2c:94:88:cc:67:ba:
f3:fc:4a:87:db:e7:ce:e4:b5:e3:e4:71:85:97:38:bc:de:95:
02:2a:93:53:5b:e0:5b:65:4d:1c:b0:89:cb:a0:f7:4e:1a:0b:
a7:cf:a6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:25 2026 by rpki-client