
$ rpki-client -vvf rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft
File: 477D71607466F25C429BF0826B9301DA69A81C15.mft (raw, json)
Hash identifier: m3bB38lnjZ0+ISHniuMOVUD69hIOwMYRthgfYUpqm6Y=
Subject key identifier: 83:21:45:C1:94:74:38:80:37:35:FE:2C:D7:37:71:9B:DF:5F:96:85
Authority key identifier: 47:7D:71:60:74:66:F2:5C:42:9B:F0:82:6B:93:01:DA:69:A8:1C:15
Certificate issuer: /CN=477D71607466F25C429BF0826B9301DA69A81C15
Certificate serial: 6776F47172FF96EDD2BBF78E620530EE75CEA8E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 23:13:12 +0000
Manifest this update: Thu 23 Jul 2026 23:08:12 +0000
Manifest next update: Sat 25 Jul 2026 02:30:12 +0000
Files and hashes: 1: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: L92at1VBLISZXeLgKyaGu6oCdPY8yBu9x3vzonWkuxM=)
2: 477D71607466F25C429BF0826B9301DA69A81C15.crl (hash: jTro+uBJvoC6iiqFjxjd/okmYm/PfZWnO17+ApDOoBI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.crl
rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:76:f4:71:72:ff:96:ed:d2:bb:f7:8e:62:05:30:ee:75:ce:a8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477D71607466F25C429BF0826B9301DA69A81C15
Validity
Not Before: Jul 23 23:08:12 2026 GMT
Not After : Jul 25 02:30:12 2026 GMT
Subject: CN=832145C1947438803735FE2CD737719BDF5F9685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:07:35:c8:b6:8a:bf:89:63:82:f5:db:01:
44:20:db:07:99:24:e0:c1:b5:94:b2:d0:6e:ca:9f:
da:f0:99:66:86:69:37:ef:c3:e6:41:36:b0:ba:9e:
56:4b:da:93:08:49:85:40:10:ff:2e:ca:cf:14:75:
60:c0:64:8c:0c:6d:52:54:cd:e0:ef:bf:8b:95:cd:
3c:bb:27:64:fb:8f:ff:90:7e:64:96:c8:8e:f3:00:
1e:47:c8:8a:2a:a8:ac:1e:83:1d:43:ab:81:fc:e6:
74:6d:56:0c:91:ce:7e:23:d3:05:9b:f9:8b:e3:0f:
a8:94:c2:41:5a:4b:75:ee:dd:44:ee:a7:df:0c:05:
ff:89:10:7b:a1:70:e8:8f:37:eb:98:31:1c:4a:d7:
c0:dc:9d:a6:b2:f5:ca:d1:6b:22:09:76:ae:54:60:
8d:3b:32:43:fa:36:9c:48:29:e0:d9:ca:c1:1a:52:
2b:28:d7:5d:b4:c8:30:d3:07:91:86:aa:5a:1a:49:
ed:46:a9:7f:4a:3b:38:e7:31:c4:68:cd:38:bc:1d:
98:65:63:7d:40:92:fc:83:cc:e1:f8:d5:61:be:4c:
86:fc:6c:d6:0b:e6:ee:f0:fb:68:bd:95:9b:c0:1a:
60:14:97:0b:f9:99:31:d1:e4:79:fb:b5:7c:4c:84:
7e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:21:45:C1:94:74:38:80:37:35:FE:2C:D7:37:71:9B:DF:5F:96:85
X509v3 Authority Key Identifier:
keyid:47:7D:71:60:74:66:F2:5C:42:9B:F0:82:6B:93:01:DA:69:A8:1C:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e9:99:07:64:96:55:ab:b3:83:7e:43:a2:c6:48:9e:73:27:
c8:d2:d9:19:65:f0:28:ee:3f:10:a2:0e:a6:9e:51:ba:3b:78:
de:84:2a:e4:11:c9:63:3f:6c:8d:db:19:e9:61:fc:f9:f2:a3:
45:30:08:45:a9:73:a5:53:0c:30:fc:83:b0:1a:62:49:0d:a3:
47:90:57:07:c4:58:17:66:97:6b:06:bf:95:5b:6d:f6:14:bd:
16:43:33:1d:1b:5f:f6:e6:ac:c9:49:5f:3c:34:04:29:ec:1d:
14:f1:40:2f:ee:28:69:db:21:4b:72:43:8c:59:dc:b8:c1:43:
08:48:8f:4e:86:00:82:d5:2e:20:dc:b4:87:4b:45:79:d7:b3:
fc:f1:a9:cc:b6:6b:bd:a2:3c:62:a7:69:91:eb:c9:d6:47:d6:
05:05:d4:54:5a:d6:41:cb:bc:27:42:d1:3a:ac:6d:bc:4d:27:
db:11:03:ac:30:99:ae:fd:eb:f0:b5:9e:ad:a3:d6:da:6a:3b:
25:4c:a1:c7:d5:71:54:9b:9a:b9:65:74:a8:ae:eb:b7:07:fc:
98:9e:82:bc:62:dd:70:98:52:d5:18:2a:b3:98:e7:e8:66:b4:
b4:be:4d:84:15:f6:f7:9f:d6:89:04:70:d8:cf:d9:e1:b0:de:
94:87:03:86
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ3b0cXL/lu3Su/eOYgUw7nXOqOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc3RDcxNjA3NDY2RjI1QzQyOUJGMDgyNkI5MzAxREE2
OUE4MUMxNTAeFw0yNjA3MjMyMzA4MTJaFw0yNjA3MjUwMjMwMTJaMDMxMTAvBgNV
BAMTKDgzMjE0NUMxOTQ3NDM4ODAzNzM1RkUyQ0Q3Mzc3MTlCREY1Rjk2ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC89gc1yLaKv4ljgvXbAUQg2weZ
JODBtZSy0G7Kn9rwmWaGaTfvw+ZBNrC6nlZL2pMISYVAEP8uys8UdWDAZIwMbVJU
zeDvv4uVzTy7J2T7j/+QfmSWyI7zAB5HyIoqqKwegx1Dq4H85nRtVgyRzn4j0wWb
+YvjD6iUwkFaS3Xu3UTup98MBf+JEHuhcOiPN+uYMRxK18Dcnaay9crRayIJdq5U
YI07MkP6NpxIKeDZysEaUiso1120yDDTB5GGqloaSe1GqX9KOzjnMcRozTi8HZhl
Y31AkvyDzOH41WG+TIb8bNYL5u7w+2i9lZvAGmAUlwv5mTHR5Hn7tXxMhH7nAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgyFFwZR0OIA3Nf4s1zdxm99floUwHwYDVR0j
BBgwFoAUR31xYHRm8lxCm/CCa5MB2mmoHBUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWY1Y2ZiYTMtZTAxNy00ZThhLTlhYzUtZjJkMzA0MzE3MzY1LzAvNDc3RDcxNjA3
NDY2RjI1QzQyOUJGMDgyNkI5MzAxREE2OUE4MUMxNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80NzdENzE2MDc0NjZGMjVDNDI5QkYwODI2QjkzMDFEQTY5QTgx
QzE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh
YzUtZjJkMzA0MzE3MzY1LzAvNDc3RDcxNjA3NDY2RjI1QzQyOUJGMDgyNkI5MzAx
REE2OUE4MUMxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ/pmQdkllWrs4N+Q6LGSJ5zJ8jS2Rll8Cju
PxCiDqaeUbo7eN6EKuQRyWM/bI3bGelh/Pnyo0UwCEWpc6VTDDD8g7AaYkkNo0eQ
VwfEWBdml2sGv5VbbfYUvRZDMx0bX/bmrMlJXzw0BCnsHRTxQC/uKGnbIUtyQ4xZ
3LjBQwhIj06GAILVLiDctIdLRXnXs/zxqcy2a72iPGKnaZHrydZH1gUF1FRa1kHL
vCdC0TqsbbxNJ9sRA6wwma796/C1nq2j1tpqOyVMocfVcVSbmrlldKiu67cH/Jie
grxi3XCYUtUYKrOY5+hmtLS+TYQV9vef1okEcNjP2eGw3pSHA4Y=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:37 2026 by rpki-client