
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
File: 94036675301DBECEA598F27C69DCB2391E3C2886.mft (raw, json)
Hash identifier: 1MpvFR2UV4QNMnttZbPFT0ETjkZ5/zXXj1YmaPbY+Do=
Subject key identifier: 1D:B7:F8:34:41:F6:C4:B2:35:76:D9:F6:8A:AE:68:A9:75:25:77:FF
Authority key identifier: 94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86
Certificate issuer: /CN=94036675301DBECEA598F27C69DCB2391E3C2886
Certificate serial: 4B58556BF7BD202AD16077C07E7E2BD02B4420A4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
Manifest number: C4
Signing time: Fri 25 Sep 2026 03:14:17 +0000
Manifest this update: Fri 25 Sep 2026 03:09:17 +0000
Manifest next update: Sat 26 Sep 2026 04:42:17 +0000
Files and hashes: 1: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: Ll1O0jrLBRiezZCuRZRt8vBzf1LiXokuLQkKXN01bA8=)
2: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: 63RFUP20PHT95cd0UVwx1h2yICgt0oulTqYaR5p2Hfk=)
3: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: /165UFjNpwWW+EZFcjl+71+ujJPspyfJC04aoRjZsKo=)
4: 94036675301DBECEA598F27C69DCB2391E3C2886.crl (hash: EePVmb63IS4GQWoRcdcXbFjX5Prp5f0bzuqHrmfTEw8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl
rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 04:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:58:55:6b:f7:bd:20:2a:d1:60:77:c0:7e:7e:2b:d0:2b:44:20:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94036675301DBECEA598F27C69DCB2391E3C2886
Validity
Not Before: Sep 25 03:09:17 2026 GMT
Not After : Sep 26 04:42:17 2026 GMT
Subject: CN=1DB7F83441F6C4B23576D9F68AAE68A9752577FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:45:48:2c:49:f9:a4:3e:83:32:3f:0a:76:
96:0a:5e:90:52:cb:a9:0c:64:bb:6d:76:95:88:02:
b5:8b:07:5e:dc:0e:33:d6:3a:53:99:a4:9d:d9:72:
f3:c2:49:c1:6a:e6:cd:ba:fc:80:7e:db:ef:5b:c9:
20:fc:de:55:6f:09:56:74:94:92:2f:b6:4b:74:d8:
59:d0:55:bb:17:c2:54:5f:64:66:93:8d:2d:03:42:
90:f5:f1:01:0b:69:a1:3e:b3:4e:37:dd:9e:ad:17:
3b:2e:a3:53:68:9a:af:fe:58:9a:92:9d:6d:3c:8f:
78:88:00:ee:cd:d5:fc:16:d4:3a:f4:2e:38:5f:a3:
62:47:bd:e4:97:10:e9:27:b8:c2:78:16:de:a6:9d:
93:0e:57:4e:6e:ce:f8:66:60:84:6d:26:37:87:73:
1b:15:0e:1e:07:b4:fe:88:f1:ce:c5:39:a3:58:48:
99:7f:a3:e8:eb:a2:ff:55:5e:7b:eb:52:bc:47:c7:
73:8f:6f:00:aa:87:04:92:3c:a0:ad:73:20:d9:11:
60:d3:e7:89:a6:19:5b:81:f4:4e:66:bf:0b:6e:86:
df:ed:c4:75:b1:69:45:52:f5:ea:ce:0d:03:1b:ea:
59:b4:7b:59:9a:ea:5a:7a:85:3c:c0:9f:97:f9:d7:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B7:F8:34:41:F6:C4:B2:35:76:D9:F6:8A:AE:68:A9:75:25:77:FF
X509v3 Authority Key Identifier:
keyid:94:03:66:75:30:1D:BE:CE:A5:98:F2:7C:69:DC:B2:39:1E:3C:28:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94036675301DBECEA598F27C69DCB2391E3C2886.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/94036675301DBECEA598F27C69DCB2391E3C2886.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f3:96:ac:5e:99:3a:ee:43:44:82:04:6d:d3:c0:37:f0:05:
ee:24:b7:83:bf:e9:93:ce:15:ce:f9:17:a8:5c:44:4c:e4:47:
5f:cb:0a:86:07:72:c3:f5:6c:ab:c9:d4:8e:4b:a7:30:bc:bc:
4a:8a:01:5f:ac:7a:db:5e:27:23:5a:f5:1b:98:9e:a1:28:85:
aa:7e:0d:d2:e1:d7:5b:52:c6:bd:d4:35:40:7a:5e:03:f8:b4:
57:5f:76:81:8e:23:4a:c4:99:e2:c4:1d:17:05:04:82:38:cd:
e0:71:b5:7c:83:0e:3a:de:c5:6d:62:7d:55:2d:ac:da:a4:f6:
5c:23:f2:c4:f8:be:bc:2f:3f:e9:c1:56:b3:66:e9:04:49:0b:
f8:7d:83:41:f4:8c:eb:ad:1d:8d:3c:e5:96:40:90:99:47:3f:
77:91:8d:02:d0:09:60:4a:c7:7b:85:da:9a:dc:c1:dc:15:e7:
de:e4:76:a7:e1:f2:f4:8f:6b:f5:58:00:e2:1c:05:80:29:7d:
03:2c:d6:f8:60:a1:4a:94:80:85:96:8b:b8:63:f4:e5:7b:17:
bd:08:94:bc:b1:a5:fa:de:c8:8f:ad:88:69:b9:ba:50:53:f3:
66:64:5c:fd:e2:62:b3:da:af:a9:a6:2c:36:c7:8b:04:b8:16:
88:70:90:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:21:03 2026 by rpki-client