
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft
File: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft (raw, json)
Hash identifier: r4vxAE2/sBg6IhikfKpGnZo2z5s+Xg8deLwl6l3u/zI=
Subject key identifier: 08:89:61:D8:B6:F7:6C:72:E5:09:EF:2A:6E:AE:09:F5:EF:64:F7:F6
Authority key identifier: 4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5
Certificate issuer: /CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5
Certificate serial: 5942DE6AD2CF50099E09D7269B8CB4C370638305
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 02:27:19 +0000
Manifest this update: Fri 24 Jul 2026 02:22:19 +0000
Manifest next update: Sat 25 Jul 2026 05:51:19 +0000
Files and hashes: 1: 3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (hash: wL6gjmzCFjkZlG1aqyBw0D/I6Abo7eZzV1pr7Z6kz7k=)
2: 4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl (hash: bB2QdqHEU7AKK6srkKgTXzXnsMOGqjq+8WEHaw9QTM8=)
3: 3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (hash: eAc+mnltXFWM2Zo7C5pCUJCKXwlG3JzkV70vxAzWX04=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl
rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 05:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:42:de:6a:d2:cf:50:09:9e:09:d7:26:9b:8c:b4:c3:70:63:83:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A3A606883B12271619C7CB49DFCD359F0F3E6F5
Validity
Not Before: Jul 24 02:22:19 2026 GMT
Not After : Jul 25 05:51:19 2026 GMT
Subject: CN=088961D8B6F76C72E509EF2A6EAE09F5EF64F7F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:8a:dd:9e:7f:e1:70:99:1f:85:f6:33:9d:
d8:4c:d1:46:cd:f4:b6:8b:36:e2:27:44:ae:75:07:
a8:ac:3b:4e:e3:aa:de:a1:ef:ac:21:a6:ae:0d:47:
ef:4e:11:e0:1f:ff:10:a3:ea:91:11:31:1c:5b:c3:
b2:34:e0:70:d3:52:ba:56:5f:b9:93:f5:0f:84:04:
3a:33:06:54:40:20:eb:ce:da:da:3f:e4:02:2f:ad:
58:e5:d8:92:c7:72:7c:2f:c8:80:ac:c8:99:ca:a4:
e6:01:f5:fa:cc:39:62:ad:64:dd:ff:ca:ba:38:c2:
ed:f1:ef:c3:0b:69:a0:71:ea:81:8b:b3:59:85:9e:
7b:9e:a4:9e:e4:db:01:62:94:cd:43:4f:a6:c2:29:
e9:85:ac:97:31:70:e9:38:3a:96:69:42:86:1b:39:
93:f1:cc:32:05:e2:ad:75:0d:a8:6b:8f:be:12:cf:
ae:bb:09:16:fd:30:25:d1:d3:c6:69:1c:05:24:ea:
4d:f1:0f:30:98:1c:4c:f3:f8:10:03:ec:f6:e7:c7:
c6:3f:72:6e:be:df:55:d7:65:78:87:6b:5d:01:bb:
ec:2e:52:99:76:df:a8:8b:b5:98:9d:1c:ef:57:2d:
22:a7:df:dc:22:bb:89:5c:95:63:91:da:75:fd:a7:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:89:61:D8:B6:F7:6C:72:E5:09:EF:2A:6E:AE:09:F5:EF:64:F7:F6
X509v3 Authority Key Identifier:
keyid:4A:3A:60:68:83:B1:22:71:61:9C:7C:B4:9D:FC:D3:59:F0:F3:E6:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/4A3A606883B12271619C7CB49DFCD359F0F3E6F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:21:49:cd:3a:90:91:2c:3c:ee:f7:64:7a:cf:fe:9e:b1:37:
2f:2a:33:30:e6:7e:04:10:59:05:43:05:c8:6f:5f:6e:b4:79:
ec:81:5e:64:6e:94:53:bf:e3:e8:df:e2:c9:31:1b:7d:dc:2d:
9d:8c:a0:d8:4f:3c:72:6b:09:17:a1:2e:d7:21:2c:22:fc:b9:
dd:23:04:66:aa:0c:35:ae:d9:0d:8a:25:e4:2f:57:82:45:e4:
c5:43:f3:70:58:c2:98:9e:f7:4b:8b:81:3c:b0:39:f1:ad:05:
4d:81:09:58:59:db:85:11:26:20:b2:49:8f:82:1c:60:b2:29:
42:33:23:da:6f:60:5e:5c:1b:f5:fa:95:3a:2e:81:ea:dd:80:
de:ca:9a:f6:0e:c2:27:ce:9d:2b:e7:b7:db:61:22:ca:2a:80:
2d:7a:83:44:4f:29:3a:ba:6f:0a:d1:49:73:9d:e4:85:33:05:
d2:a9:6d:d7:75:92:ea:cb:ad:d1:45:ae:37:8e:a4:34:90:0c:
bf:ba:76:ff:9e:d9:f2:9f:37:82:12:9b:3a:46:29:b8:7c:d1:
29:19:f1:cf:65:e8:74:80:34:be:8a:33:d9:d5:0b:06:d4:73:
53:0e:bd:e7:25:7b:86:fe:97:4f:92:99:fd:13:b2:06:06:60:
cc:95:4d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:29 2026 by rpki-client