
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft
File: 1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft (raw, json)
Hash identifier: 7ElSt2a8SN1uQV2m0MzJkY6iJwSPnW5zyWesHW9KttM=
Subject key identifier: FF:B5:0F:F0:F2:0C:A2:69:5E:95:22:1F:71:7A:46:0A:D2:F6:20:A0
Authority key identifier: 14:83:AD:C9:7A:CA:45:EE:C6:AB:EC:76:11:9F:13:21:C6:7E:4E:1A
Certificate issuer: /CN=1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A
Certificate serial: 1F4C2CB491B5A863DE5E15C17F04057EECD010FA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 04:29:56 +0000
Manifest this update: Fri 24 Jul 2026 04:24:56 +0000
Manifest next update: Sat 25 Jul 2026 06:15:56 +0000
Files and hashes: 1: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: oSOhD0LEwgsK8NYbK3kqSQGLarwok4BQsdg7QvLPPyk=)
2: 1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl (hash: qaBX/JewgeymS8zRz3l9/tIKJBX6z4bgCmJypZwF35M=)
3: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: GsH7B+XyAawDhvDqUFn24fkcJE7vhqfxiJ0QGis3RmA=)
4: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: A1UPMpA/Hruv5HF5ZTfkwinBjJ7pR0VpCWP5yD8H86U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl
rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 06:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:4c:2c:b4:91:b5:a8:63:de:5e:15:c1:7f:04:05:7e:ec:d0:10:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A
Validity
Not Before: Jul 24 04:24:56 2026 GMT
Not After : Jul 25 06:15:56 2026 GMT
Subject: CN=FFB50FF0F20CA2695E95221F717A460AD2F620A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9c:8c:47:58:1e:76:c6:2c:d1:7f:2e:d9:d6:
46:b3:05:9b:da:40:c0:71:e5:56:78:82:70:c1:b7:
a0:11:c7:b5:03:ee:7e:05:76:bb:96:29:a5:87:e1:
a4:ac:5f:ab:14:64:6f:bc:64:d9:d3:16:0d:00:57:
ec:29:5b:c9:82:39:63:77:2f:53:bb:d6:07:10:ff:
d0:6f:b6:e4:19:ed:c3:76:de:c9:15:42:84:17:a1:
56:74:ce:d5:c7:71:0d:2c:da:69:92:78:1f:7b:f2:
98:bf:cb:b0:77:4a:c3:33:41:bf:b1:5b:9f:73:db:
73:6f:b5:83:58:81:a9:27:06:a5:bc:1d:9a:e8:c0:
a3:9f:d4:72:a0:45:a0:0d:e5:40:14:ce:df:47:ca:
67:34:d5:17:ae:8a:ab:1f:7a:83:9d:0f:50:dd:45:
37:ad:fc:93:ba:8d:7b:92:05:98:c9:25:66:6a:f8:
7b:b9:d5:86:9c:64:9d:c0:92:53:6c:4b:a5:0a:4d:
c0:fe:c2:85:ec:76:96:7e:7b:80:3d:30:4c:65:fc:
21:47:5c:99:d3:1b:bd:74:21:89:ee:89:3e:85:e1:
a3:16:15:f5:f3:e6:18:ea:0e:4e:03:2f:4e:89:7b:
c7:e4:05:4a:6b:8b:21:10:13:f1:52:11:75:ab:57:
c8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B5:0F:F0:F2:0C:A2:69:5E:95:22:1F:71:7A:46:0A:D2:F6:20:A0
X509v3 Authority Key Identifier:
keyid:14:83:AD:C9:7A:CA:45:EE:C6:AB:EC:76:11:9F:13:21:C6:7E:4E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:87:7c:75:04:d2:d2:a2:8c:f5:d5:df:35:dc:b4:75:13:52:
a6:53:57:c1:65:19:93:d4:1c:f1:4c:26:02:ab:ad:1c:42:af:
ea:45:cd:48:1a:43:fb:52:31:7c:76:81:43:c5:4e:a2:68:55:
bb:56:31:80:91:f2:83:0a:6b:36:49:a2:21:3f:34:3d:fe:12:
37:bf:ad:75:2f:ad:85:15:09:51:bc:e7:8e:92:08:e9:1c:f9:
e4:48:65:35:98:24:21:89:eb:9c:c9:01:7e:95:37:93:c9:a6:
94:3a:0e:b0:f1:95:29:85:43:53:43:eb:db:35:7d:32:72:3d:
df:8a:3f:fd:ee:04:a4:84:48:b6:23:e3:e1:b4:4d:29:a2:dc:
75:84:3a:1a:a9:72:a6:7a:fc:2e:4c:40:b8:20:20:44:e1:aa:
4c:83:75:39:3e:67:23:c7:c4:03:07:01:62:6c:04:2d:c2:27:
e2:81:f9:b8:7f:3d:1a:c7:13:a0:20:95:da:3e:f0:cd:43:16:
4d:e8:be:1c:58:28:5c:59:54:fd:1c:39:27:21:dd:68:3a:a5:
aa:15:87:6d:e7:2e:95:11:d2:38:c8:c8:a9:68:fb:cc:c9:72:
da:71:cf:87:37:75:cc:d6:34:de:de:f5:b6:3b:6e:b1:69:b0:
8a:73:14:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:08 2026 by rpki-client