
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
File: 4D98C36AE414DE2AFABA625C601188337044CEB5.mft (raw, json)
Hash identifier: MCZ9kYHYljvxNk3zNzNnci5mFG1EvFBYOAvS44bZbZ0=
Subject key identifier: 1D:A8:2F:54:19:1C:5B:09:1E:59:40:EB:64:25:E2:0A:60:73:2F:AB
Authority key identifier: 4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5
Certificate issuer: /CN=4D98C36AE414DE2AFABA625C601188337044CEB5
Certificate serial: 2E831C33F5070DA80DCC6187CD26474EEEDDBF01
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 03:07:05 +0000
Manifest this update: Tue 12 May 2026 03:02:05 +0000
Manifest next update: Wed 13 May 2026 05:39:05 +0000
Files and hashes: 1: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: 6bUEU/g2qE4eAxx1xLeHn2NWPyG7RA0NRzuQx5ize0g=)
2: 4D98C36AE414DE2AFABA625C601188337044CEB5.crl (hash: XXwBNMazw8mHQr7KOOU5KBRrZo2XBqcnKRoG2LfAaxk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl
rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 05:39:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:83:1c:33:f5:07:0d:a8:0d:cc:61:87:cd:26:47:4e:ee:dd:bf:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D98C36AE414DE2AFABA625C601188337044CEB5
Validity
Not Before: May 12 03:02:05 2026 GMT
Not After : May 13 05:39:05 2026 GMT
Subject: CN=1DA82F54191C5B091E5940EB6425E20A60732FAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:b7:4f:c0:17:5a:f3:07:7a:85:02:1c:53:
10:60:4e:c3:ca:2a:f4:b6:a1:c4:a8:67:05:97:67:
6e:0e:5f:19:8a:86:8d:f7:b5:0b:74:9b:cf:83:75:
ff:66:68:5b:42:e1:97:82:fc:ba:c8:e5:c1:d4:05:
a9:a8:f1:27:c0:b9:f5:a9:06:84:f0:7d:6f:1f:6e:
73:87:6c:4c:c8:fd:08:02:6d:99:27:f0:ad:ad:34:
df:54:b6:17:91:95:63:7f:9c:77:ba:c3:10:d8:ec:
a8:8c:13:e9:12:98:3b:ec:cd:63:29:9d:20:f6:6f:
64:0b:f3:a2:02:49:86:36:3e:ea:92:6e:06:52:dc:
86:21:a0:2d:ae:3b:9d:a8:33:be:cc:0c:1a:9c:b5:
60:91:6a:15:36:08:69:15:e0:2a:cf:ca:bf:4e:61:
03:29:a9:55:a0:be:79:ba:16:1c:00:bd:e8:7d:ea:
1c:21:92:09:7d:60:a7:93:81:84:42:fb:d4:1c:40:
28:a3:00:2a:e5:c7:a2:a4:f1:10:01:81:64:22:13:
7e:c5:d1:3a:6d:18:99:c5:c4:ef:d1:5d:44:f0:f3:
54:0a:62:fd:03:65:08:ea:30:e7:d0:41:77:9d:ac:
f2:c2:5b:e3:ae:79:7c:11:3c:26:31:c6:f2:74:9f:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A8:2F:54:19:1C:5B:09:1E:59:40:EB:64:25:E2:0A:60:73:2F:AB
X509v3 Authority Key Identifier:
keyid:4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e2:5c:6c:7d:66:f1:96:f7:7a:a8:21:b1:9b:64:aa:33:ee:
4f:03:5e:f6:f8:ee:ae:43:08:c3:60:b2:15:f9:07:93:28:56:
cc:c4:b4:ea:9b:e2:e0:22:5d:59:53:8e:82:a0:9c:6e:8d:64:
8f:e5:a6:1b:a5:06:72:30:55:0d:43:25:91:e8:f6:24:2e:9e:
05:28:8d:01:60:fc:a1:37:1b:f5:49:40:51:a7:e7:d8:07:f2:
2f:68:da:4c:86:24:b6:6f:e4:ee:c1:b3:2f:67:51:22:75:8a:
fb:34:e7:88:8b:7b:79:1f:97:00:cc:16:ab:e8:07:0a:f8:21:
e4:8f:ba:11:e7:21:ab:4f:d3:5e:f6:3b:76:48:33:20:34:96:
38:ba:d1:dd:dd:18:92:92:4e:36:62:68:15:fe:3c:2e:be:07:
5c:bd:b2:a8:a8:0f:c1:c0:0c:2d:8c:6b:50:b9:d0:9f:eb:5f:
4b:d8:1e:7c:21:17:ca:d9:73:48:44:33:db:54:46:f9:22:23:
e5:ba:0d:be:32:e6:de:98:18:0a:ae:01:07:4a:01:47:cc:94:
f1:1c:90:df:11:f8:75:c5:63:ef:8d:a9:32:66:fc:05:ae:95:
fa:c7:1b:73:4e:7a:61:79:28:35:69:49:ad:5a:68:28:6f:6b:
af:c7:54:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:47:16 2026 by rpki-client