
$ rpki-client -vvf rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft
File: 477D71607466F25C429BF0826B9301DA69A81C15.mft (raw, json)
Hash identifier: WTeFcAtY5lmTDGXh7ZB+XiTRijYSFjli/4Zk79Qu6cU=
Subject key identifier: B0:B8:19:78:55:46:7C:2A:AA:41:ED:6B:3C:E7:78:E2:83:FB:94:A7
Authority key identifier: 47:7D:71:60:74:66:F2:5C:42:9B:F0:82:6B:93:01:DA:69:A8:1C:15
Certificate issuer: /CN=477D71607466F25C429BF0826B9301DA69A81C15
Certificate serial: 31E89345E1A27B137D57A535D1A5945502A64594
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 17:27:15 +0000
Manifest this update: Tue 12 May 2026 17:22:15 +0000
Manifest next update: Wed 13 May 2026 17:59:15 +0000
Files and hashes: 1: 477D71607466F25C429BF0826B9301DA69A81C15.crl (hash: cjPB/TACpF/77mqcWLNHr8nCG5yG9AQjwJzFoF2JYgQ=)
2: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: L92at1VBLISZXeLgKyaGu6oCdPY8yBu9x3vzonWkuxM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.crl
rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e8:93:45:e1:a2:7b:13:7d:57:a5:35:d1:a5:94:55:02:a6:45:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477D71607466F25C429BF0826B9301DA69A81C15
Validity
Not Before: May 12 17:22:15 2026 GMT
Not After : May 13 17:59:15 2026 GMT
Subject: CN=B0B8197855467C2AAA41ED6B3CE778E283FB94A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fc:31:ff:2b:4f:50:3a:61:56:02:96:b0:9c:
6b:45:24:59:40:b7:9b:20:f1:94:32:20:8a:db:38:
3f:fc:cd:a3:a9:66:93:c0:50:1a:f1:2a:b1:ea:af:
cb:49:76:a5:7b:a9:57:3e:b3:39:37:be:7d:1c:23:
72:a0:c5:e5:7e:3f:32:09:61:22:04:87:88:4b:75:
35:4e:3f:82:dd:36:a2:31:20:9c:8d:5b:db:f4:49:
58:be:a5:d0:80:d6:e3:93:c2:c8:dc:f4:d5:4f:5c:
9a:0d:4d:09:fa:dc:cd:ac:53:3e:83:f2:2e:ea:4e:
ea:02:b5:6a:de:05:d0:66:6e:ef:9c:67:18:f7:95:
3c:81:2e:bc:16:54:d5:29:23:99:3f:22:fb:78:5f:
c1:7d:04:6a:aa:d6:bb:29:10:9b:fc:78:3b:96:d9:
2b:3b:6c:79:93:f6:b7:49:61:08:36:c4:4d:74:fb:
58:56:ef:b9:9e:12:30:ad:65:ee:db:c7:6e:e2:2a:
4f:ad:ac:68:04:24:7d:e5:98:c3:36:2e:42:c2:ee:
a1:0f:ad:7e:62:55:3e:f9:4a:82:c5:66:7b:3d:2c:
2b:41:ce:8e:5c:fb:b7:26:30:99:d7:b1:2d:c9:42:
fb:de:d8:4b:10:3a:f3:ba:8f:de:77:80:be:ed:a9:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B8:19:78:55:46:7C:2A:AA:41:ED:6B:3C:E7:78:E2:83:FB:94:A7
X509v3 Authority Key Identifier:
keyid:47:7D:71:60:74:66:F2:5C:42:9B:F0:82:6B:93:01:DA:69:A8:1C:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/477D71607466F25C429BF0826B9301DA69A81C15.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/477D71607466F25C429BF0826B9301DA69A81C15.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c1:fc:28:64:d0:75:18:c9:83:72:e2:98:69:7b:43:32:44:
f6:16:3c:00:64:a7:8d:6d:bb:69:0f:7b:b7:05:2c:64:d8:fa:
77:3f:a8:77:8a:34:a9:d0:f3:93:69:a0:38:bc:53:14:3d:a0:
be:80:58:fc:df:56:b5:db:15:f4:bc:da:96:43:d5:b6:6b:cc:
25:5f:cd:e5:ee:38:d1:16:8d:49:a4:df:09:86:05:d6:ab:0b:
93:a0:62:33:03:61:fd:cb:a1:2c:b3:04:c6:79:d4:e7:55:13:
79:cb:84:e1:32:11:c9:62:28:53:07:4e:72:94:8f:65:af:c4:
45:7f:d9:fe:f5:f9:cc:b2:fe:5f:08:74:6b:3e:ba:4c:00:0b:
9a:de:62:68:68:20:ac:bf:31:0b:cd:2b:70:2a:8f:28:89:16:
3a:54:c8:0a:bb:39:2b:51:5a:65:20:b0:fa:1d:94:0b:fb:5e:
24:7d:ed:b6:80:82:63:8c:30:e5:ba:66:ce:78:42:3d:37:da:
80:ea:1c:a9:a2:be:e7:0c:a4:75:73:be:1e:db:f3:b8:c8:98:
d4:79:68:d5:9f:db:d8:e1:60:3b:99:07:f2:73:62:f9:e4:37:
b2:13:7c:51:bf:5c:7d:60:d7:94:49:53:a7:12:04:4a:2d:de:
86:df:70:49
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMeiTReGiexN9V6U10aWUVQKmRZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc3RDcxNjA3NDY2RjI1QzQyOUJGMDgyNkI5MzAxREE2
OUE4MUMxNTAeFw0yNjA1MTIxNzIyMTVaFw0yNjA1MTMxNzU5MTVaMDMxMTAvBgNV
BAMTKEIwQjgxOTc4NTU0NjdDMkFBQTQxRUQ2QjNDRTc3OEUyODNGQjk0QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc/DH/K09QOmFWApawnGtFJFlA
t5sg8ZQyIIrbOD/8zaOpZpPAUBrxKrHqr8tJdqV7qVc+szk3vn0cI3KgxeV+PzIJ
YSIEh4hLdTVOP4LdNqIxIJyNW9v0SVi+pdCA1uOTwsjc9NVPXJoNTQn63M2sUz6D
8i7qTuoCtWreBdBmbu+cZxj3lTyBLrwWVNUpI5k/Ivt4X8F9BGqq1rspEJv8eDuW
2Ss7bHmT9rdJYQg2xE10+1hW77meEjCtZe7bx27iKk+trGgEJH3lmMM2LkLC7qEP
rX5iVT75SoLFZns9LCtBzo5c+7cmMJnXsS3JQvve2EsQOvO6j953gL7tqRihAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsLgZeFVGfCqqQe1rPOd44oP7lKcwHwYDVR0j
BBgwFoAUR31xYHRm8lxCm/CCa5MB2mmoHBUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWY1Y2ZiYTMtZTAxNy00ZThhLTlhYzUtZjJkMzA0MzE3MzY1LzAvNDc3RDcxNjA3
NDY2RjI1QzQyOUJGMDgyNkI5MzAxREE2OUE4MUMxNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80NzdENzE2MDc0NjZGMjVDNDI5QkYwODI2QjkzMDFEQTY5QTgx
QzE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh
YzUtZjJkMzA0MzE3MzY1LzAvNDc3RDcxNjA3NDY2RjI1QzQyOUJGMDgyNkI5MzAx
REE2OUE4MUMxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEXB/Chk0HUYyYNy4phpe0MyRPYWPABkp41t
u2kPe7cFLGTY+nc/qHeKNKnQ85NpoDi8UxQ9oL6AWPzfVrXbFfS82pZD1bZrzCVf
zeXuONEWjUmk3wmGBdarC5OgYjMDYf3LoSyzBMZ51OdVE3nLhOEyEcliKFMHTnKU
j2WvxEV/2f71+cyy/l8IdGs+ukwAC5reYmhoIKy/MQvNK3AqjyiJFjpUyAq7OStR
WmUgsPodlAv7XiR97baAgmOMMOW6Zs54Qj032oDqHKmivucMpHVzvh7b87jImNR5
aNWf29jhYDuZB/JzYvnkN7ITfFG/XH1g15RJU6cSBEot3obfcEk=
-----END CERTIFICATE-----
Generated at Tue May 12 22:32:55 2026 by rpki-client