
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
File: 4D98C36AE414DE2AFABA625C601188337044CEB5.mft (raw, json)
Hash identifier: zJilDOgCZa4kMZxt3SB4QMYUHut+FeOv0WEPwww2Abs=
Subject key identifier: FB:F7:18:68:FC:8C:3E:BF:94:10:59:5B:2C:95:83:36:02:16:24:F5
Authority key identifier: 4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5
Certificate issuer: /CN=4D98C36AE414DE2AFABA625C601188337044CEB5
Certificate serial: 467BD57228B82CD0A3947309D5AF56BD5858694F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 06:52:49 +0000
Manifest this update: Fri 24 Jul 2026 06:47:49 +0000
Manifest next update: Sat 25 Jul 2026 07:45:49 +0000
Files and hashes: 1: 4D98C36AE414DE2AFABA625C601188337044CEB5.crl (hash: y94Nm3frVOXJRl4iL2uOZ3CYJOYkDW2/eATsUyGWJjo=)
2: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: 6bUEU/g2qE4eAxx1xLeHn2NWPyG7RA0NRzuQx5ize0g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl
rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:7b:d5:72:28:b8:2c:d0:a3:94:73:09:d5:af:56:bd:58:58:69:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D98C36AE414DE2AFABA625C601188337044CEB5
Validity
Not Before: Jul 24 06:47:49 2026 GMT
Not After : Jul 25 07:45:49 2026 GMT
Subject: CN=FBF71868FC8C3EBF9410595B2C958336021624F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:1c:a5:6f:62:21:22:b2:14:4c:bb:28:b2:
d8:82:5d:37:e3:95:78:fc:47:1e:81:5b:41:e3:6d:
e5:a4:20:3b:90:d4:48:b1:3e:cc:98:2e:58:de:fd:
26:6b:71:f9:95:94:49:2f:12:7a:b8:62:ec:96:74:
57:49:08:59:d9:e5:ed:c3:5d:33:20:6c:1c:93:b7:
2e:03:4c:f5:17:1f:d9:58:7f:15:8b:e4:0e:80:68:
80:29:b6:e8:6b:d2:73:4e:5a:a7:a0:4a:fc:bb:c6:
6e:18:be:4b:13:ba:fe:4a:02:a2:02:3d:47:76:12:
82:1a:00:4f:90:e9:5d:6b:84:6a:57:6d:0c:48:3a:
22:86:33:62:f6:66:71:f0:e1:24:2b:88:e4:2d:ed:
dc:44:86:26:a7:de:cb:f2:78:88:4e:90:52:e8:9d:
e2:2d:23:ca:fe:ca:77:2a:06:ea:21:13:77:5b:93:
ca:af:a4:d3:57:eb:d6:09:d0:97:d8:fa:96:7f:14:
62:7a:6c:8c:b8:cf:20:e0:2e:54:ae:ff:a6:ce:c3:
1d:06:4c:6c:00:60:15:63:ff:c9:fb:ba:4b:68:fa:
dd:99:b7:0b:43:84:26:8f:64:f1:42:0d:f9:41:70:
36:d6:9b:b4:2b:53:9e:88:67:33:23:9f:c3:8e:f6:
17:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F7:18:68:FC:8C:3E:BF:94:10:59:5B:2C:95:83:36:02:16:24:F5
X509v3 Authority Key Identifier:
keyid:4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a5:31:af:58:6b:2c:af:76:7f:4c:77:01:29:49:6e:6b:88:
5e:65:64:88:24:62:bd:41:23:af:41:32:57:2b:2d:55:99:35:
d5:50:82:ab:c5:22:25:87:63:86:82:47:0c:eb:46:40:bc:11:
c7:79:98:41:98:2e:c4:97:4e:cd:b0:8a:b1:23:92:44:5e:d3:
87:af:7e:17:7d:65:f8:49:f5:a5:87:99:d3:bd:d3:e2:e2:3f:
66:c7:04:33:86:18:e1:ba:7c:d3:bc:18:e9:d8:65:62:56:74:
d6:b9:bf:6c:d2:27:7e:4c:7d:38:1c:42:13:63:a2:b4:57:ee:
89:82:37:04:e8:97:a7:4e:7b:ac:61:3f:19:ce:e0:f2:90:aa:
92:fc:0e:3f:a9:be:f4:88:51:9a:4b:07:fd:a4:ac:1d:dc:d5:
55:21:04:96:6c:62:92:bc:58:5e:01:62:8c:38:9b:c2:86:67:
84:e7:51:a4:21:32:46:5a:11:17:a6:d1:99:f4:3d:5a:71:4e:
b1:b9:4f:d1:50:18:58:78:33:86:5b:b4:ea:a2:6c:b0:ea:11:
92:e6:a7:09:18:3c:6c:d6:2f:22:79:98:b0:5b:fe:26:84:ac:
c6:c4:d0:2a:6f:f5:0d:9a:40:9e:3e:56:76:8d:66:ef:1e:88:
fb:48:cb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:53:43 2026 by rpki-client