
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft
File: 1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft (raw, json)
Hash identifier: SX0UUEngPBUGJrk9Ver+YiDm5Kwv73WoGsNUU+BNB7g=
Subject key identifier: 7F:48:75:11:95:2B:C8:19:10:F8:47:0A:89:51:B6:8D:6C:03:02:84
Authority key identifier: 14:83:AD:C9:7A:CA:45:EE:C6:AB:EC:76:11:9F:13:21:C6:7E:4E:1A
Certificate issuer: /CN=1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A
Certificate serial: 33C4A7A1C2312174DA0EC1B3F8BADDD2F23ABB02
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft
Manifest number: C6
Signing time: Wed 23 Sep 2026 04:02:29 +0000
Manifest this update: Wed 23 Sep 2026 03:57:29 +0000
Manifest next update: Thu 24 Sep 2026 06:58:29 +0000
Files and hashes: 1: 3130332e3138362e39302e302f32332d3233203d3e20313534323137.roa (hash: rgywsINzbVz7ZlQmqQUAOTUhfUluT0fl5xYs0+HAjXQ=)
2: 1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl (hash: 6++ReNbKMU1gTCG8PpEunTdxUiAOwvx+tnTwcR0h++s=)
3: 3130332e3138362e39312e302f32342d3234203d3e20313534323137.roa (hash: in24u07VazKYRNUfv6MLrnj92FvAMx7IUV0O7/Qh+/I=)
4: 3130332e3138362e39302e302f32342d3234203d3e20313534323137.roa (hash: SF6wFvB92++pgvhJiz3ViTnExdueiHmwDxFQcyeOg9g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl
rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 06:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c4:a7:a1:c2:31:21:74:da:0e:c1:b3:f8:ba:dd:d2:f2:3a:bb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A
Validity
Not Before: Sep 23 03:57:29 2026 GMT
Not After : Sep 24 06:58:29 2026 GMT
Subject: CN=7F487511952BC81910F8470A8951B68D6C030284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0d:ee:5f:b9:c5:77:8e:cc:75:c7:21:02:bb:
dc:07:5b:f4:1d:c4:00:6b:6e:29:91:9d:a2:9b:f2:
6d:3e:f4:b2:48:8a:e6:8e:04:ce:37:e7:fe:4e:1a:
84:9c:ec:8d:bc:98:88:ca:9a:9a:e3:90:22:94:3a:
24:29:2c:16:2e:f7:75:29:cd:80:ca:3f:94:9b:4e:
3a:5d:76:7c:7b:52:91:45:10:3a:34:ca:95:54:c5:
07:65:1f:1e:d3:cb:2e:6a:53:e2:4a:2d:8b:cc:5a:
2b:9b:2c:97:eb:71:79:94:06:fc:ce:d2:cb:eb:bf:
e5:27:97:c5:41:87:39:38:99:f1:e3:4a:05:5b:9f:
73:c1:11:2f:b4:f6:2a:a6:6d:60:61:10:29:1d:b0:
1a:4f:63:b3:4e:40:25:05:09:a1:1f:84:ae:86:e1:
ae:db:cf:3c:98:e0:2c:47:49:d4:e2:18:62:d9:fb:
d8:aa:14:6d:b1:73:c6:1a:be:43:ee:52:19:1b:3a:
9e:64:a6:9f:dd:8b:bc:c2:ba:6e:15:5f:63:3a:cc:
d8:50:2e:52:c0:97:8c:55:1d:02:2a:d2:48:08:09:
93:e8:fe:74:88:71:96:ab:9f:68:40:f1:eb:cb:6e:
89:67:15:7f:17:b4:00:21:87:3c:d2:e1:2a:25:36:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:48:75:11:95:2B:C8:19:10:F8:47:0A:89:51:B6:8D:6C:03:02:84
X509v3 Authority Key Identifier:
keyid:14:83:AD:C9:7A:CA:45:EE:C6:AB:EC:76:11:9F:13:21:C6:7E:4E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:65:1b:b6:35:cc:67:80:e2:96:a6:60:6a:2d:dd:1c:3d:84:
f0:7e:ba:59:5c:d0:97:d5:86:c2:3f:7e:85:4c:34:8a:be:b5:
17:04:d2:af:7e:d7:04:27:39:24:2c:a2:27:b1:ab:9b:5d:85:
2e:c8:61:72:f0:95:a9:69:b7:75:6e:50:e1:b0:7c:02:bc:75:
54:78:75:df:8c:19:8d:e7:0d:99:45:84:af:41:73:65:5b:df:
3b:9b:5a:f9:f5:88:0a:0e:f6:2a:3b:c3:da:29:87:8c:c0:6b:
ee:72:67:65:ce:3a:8a:71:ee:5e:af:42:c4:0d:ba:2d:21:3a:
d8:f0:ee:f3:0e:8f:13:52:57:2f:02:ba:d6:6f:1e:1b:07:b7:
a2:93:4a:40:29:02:85:fc:1a:ba:e6:38:10:af:e2:86:cc:93:
7e:0f:5d:5e:d1:95:26:86:4c:07:b8:20:14:31:1e:cd:c4:66:
ea:70:dd:3b:7a:81:f0:48:4f:79:27:7c:5a:cd:2a:87:ea:84:
c3:90:4f:23:8e:a3:3c:45:b4:46:b3:5a:f6:f1:84:6b:e1:87:
c2:eb:09:b4:1f:d4:80:79:b8:d1:70:01:ad:a2:f0:bd:ef:da:
7c:e8:95:4b:6c:e9:69:b1:03:8e:89:26:85:62:e1:fe:ee:ce:
6c:d7:83:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:16:14 2026 by rpki-client