
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft
File: 49F46115365EBDF5886E7F2CF139E606717666E0.mft (raw, json)
Hash identifier: Yqx8gKxWgVus5Q4q42dn1udO/d3DfVzIX6eq/gp2Z9A=
Subject key identifier: F9:C6:09:74:B2:60:D5:1E:60:DC:DA:9B:5F:B3:73:64:7F:C6:BD:BF
Authority key identifier: 49:F4:61:15:36:5E:BD:F5:88:6E:7F:2C:F1:39:E6:06:71:76:66:E0
Certificate issuer: /CN=49F46115365EBDF5886E7F2CF139E606717666E0
Certificate serial: 764BAC96098297A31374ABFDD10EEF169356097E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 10:16:57 +0000
Manifest this update: Fri 24 Jul 2026 10:11:57 +0000
Manifest next update: Sat 25 Jul 2026 11:23:57 +0000
Files and hashes: 1: 3130332e3136322e302e302f32342d3234203d3e20313431363334.roa (hash: shIk0vp+51TO0gQD+rZf7i9F4/QvmPZ8BnhQXbq9Zj8=)
2: 3130332e3136322e302e302f32332d3233203d3e20313431363334.roa (hash: /WJInhgSCHask4I5VFsuoFBnkjbFAmOBsJyj+3cOySg=)
3: 49F46115365EBDF5886E7F2CF139E606717666E0.crl (hash: aVc8ox1HJvITh0FsxbWNrlQ/40u3OGVayfvZqRJBFJ4=)
4: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (hash: OGTDZ4C85+sk0i3Bo0o5Tb8rraHPH4OeiZ0vyZPql84=)
5: 3130332e3136322e312e302f32342d3234203d3e20313431363334.roa (hash: fP8potPrA/fz7UKmgPpWsbOpb4DAv/qcdg5GmnTFDgc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.crl
rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:4b:ac:96:09:82:97:a3:13:74:ab:fd:d1:0e:ef:16:93:56:09:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49F46115365EBDF5886E7F2CF139E606717666E0
Validity
Not Before: Jul 24 10:11:57 2026 GMT
Not After : Jul 25 11:23:57 2026 GMT
Subject: CN=F9C60974B260D51E60DCDA9B5FB373647FC6BDBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0b:b3:15:6f:1f:37:ad:92:b4:f9:90:ff:13:
9d:dd:ee:f9:6a:e5:b5:f6:74:53:34:37:dc:6a:33:
ab:f5:93:8e:3f:63:90:d5:38:0d:e8:fd:7b:ee:44:
d6:04:c8:96:2f:47:27:fc:98:19:5a:c8:ca:f0:a4:
1d:6c:16:b8:5e:9d:34:42:13:79:2a:59:39:e5:15:
f8:20:9b:d8:b7:73:7f:d6:96:e8:c8:18:88:72:a5:
51:26:89:2a:14:ca:95:d8:82:2d:bd:cb:91:3e:6d:
c6:33:a6:d7:c4:b3:d1:e9:30:e6:76:96:30:2b:d4:
a6:ab:32:44:ac:53:ff:5c:97:45:8a:b2:ef:84:e5:
4c:b1:59:30:46:65:30:33:76:e5:24:f2:20:97:46:
fc:00:e8:b3:d4:a3:e2:2d:f2:68:9f:a0:8e:8e:b3:
ce:60:73:aa:8d:a2:3d:fc:5e:ad:7e:ee:85:9b:fe:
bf:80:0b:b8:37:62:0f:3b:4b:dd:a6:0f:42:cc:6a:
e6:52:23:c5:42:1e:71:b8:13:28:5f:3b:ed:cd:29:
58:ff:04:2c:9e:a5:7e:40:69:a1:e3:4e:11:62:a8:
73:36:27:0b:0b:f5:46:cd:0d:7f:5e:d4:46:36:e3:
8c:5a:5e:3d:f0:bf:e8:ae:d4:cb:8d:87:41:fa:d5:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C6:09:74:B2:60:D5:1E:60:DC:DA:9B:5F:B3:73:64:7F:C6:BD:BF
X509v3 Authority Key Identifier:
keyid:49:F4:61:15:36:5E:BD:F5:88:6E:7F:2C:F1:39:E6:06:71:76:66:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/49F46115365EBDF5886E7F2CF139E606717666E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/49F46115365EBDF5886E7F2CF139E606717666E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0b:2f:f6:cf:cd:6d:a5:f4:b6:8c:bc:28:6c:8f:bf:65:cd:
3a:fc:cf:39:db:ac:8d:18:b9:bf:96:9a:e4:4d:a7:e0:39:2f:
b6:a1:0d:86:4a:18:0c:9f:ee:6a:9e:07:8e:c6:b6:80:ba:2e:
3e:52:8f:c8:a2:c2:9f:5a:2d:87:44:eb:37:bd:02:84:57:00:
62:0a:b7:a9:94:15:2e:b3:49:52:15:d5:ec:3f:03:85:79:78:
bc:46:b7:df:d3:32:d6:2e:a9:4c:df:d6:32:00:0f:7c:68:66:
71:10:f7:d3:a4:1c:17:9e:c2:97:6c:c4:c4:7b:da:bf:7c:71:
f1:88:4d:c8:b9:6e:c1:b0:09:56:53:51:16:de:76:5f:4f:c0:
57:7f:95:c0:d7:b4:42:59:33:d9:3d:2d:99:a2:0f:9c:09:79:
13:e4:5e:75:79:9b:23:93:a0:05:7e:28:a5:f5:72:b1:23:ba:
66:02:a5:f5:a9:0d:90:43:f6:bd:a3:45:c8:1d:b7:b4:b7:d2:
ff:1b:10:41:3a:39:04:d6:4f:9b:11:af:58:29:a1:03:fa:45:
c9:7f:6f:d5:f0:29:01:bd:d6:21:fc:dd:27:4c:28:44:a4:d8:
88:c1:12:76:91:0d:9b:5b:64:44:b1:38:32:ec:60:ae:d3:e6:
fb:8c:ab:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:35 2026 by rpki-client