
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
File: 4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft (raw, json)
Hash identifier: U3eLFAEIvPi+bdVcIr0hdrzZhrDHGXefWIJyaIO41Ho=
Subject key identifier: 59:01:07:0C:3B:75:DF:D3:79:C9:A2:EB:FD:AC:22:E7:34:00:A6:88
Authority key identifier: 4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A
Certificate issuer: /CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A
Certificate serial: 13956C31FE2D53A415F527D62E223E947C09A412
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
Manifest number: 0106
Signing time: Sat 14 Nov 2026 14:58:08 +0000
Manifest this update: Sat 14 Nov 2026 14:53:08 +0000
Manifest next update: Sun 15 Nov 2026 15:38:08 +0000
Files and hashes: 1: 3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa (hash: Tkh0+XsPVTypniidThAuJHBFvt6qbkv8XEWtO3EZhzc=)
2: 4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl (hash: QJy7j7uQGblBI+yaI4dgdBVUQanLojzBTwuXtzo9oWQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl
rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 15:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:95:6c:31:fe:2d:53:a4:15:f5:27:d6:2e:22:3e:94:7c:09:a4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A
Validity
Not Before: Nov 14 14:53:08 2026 GMT
Not After : Nov 15 15:38:08 2026 GMT
Subject: CN=5901070C3B75DFD379C9A2EBFDAC22E73400A688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:65:3f:56:fb:79:e5:f5:0e:ac:de:9a:db:
4c:26:8e:ba:f5:67:8a:08:50:2a:c7:ff:ee:0c:44:
39:c6:c3:9c:6a:16:d4:b2:4b:10:71:9f:33:bc:7f:
f1:c6:4c:61:af:83:3a:9a:1b:3d:38:0c:f8:67:2e:
20:a1:ef:0a:4e:fe:af:28:5a:ba:28:35:30:48:1e:
77:92:85:ed:e9:03:4b:f9:ef:17:27:df:10:6f:ef:
ed:36:e6:f5:13:8e:63:8b:9c:2e:09:34:44:d7:a8:
54:98:39:30:91:38:71:f5:ce:35:9a:aa:5e:f0:ce:
26:1b:f3:a6:04:3f:0d:b5:45:44:fb:57:ff:7f:ac:
1e:59:1b:45:e2:b2:f4:09:bc:84:5b:c2:7d:d8:6b:
4f:d9:fe:10:f2:49:cf:45:ac:51:37:2a:14:81:08:
40:ed:3f:44:bc:db:4a:1d:19:b6:57:4c:47:da:9d:
54:3b:1f:e1:61:6b:25:2f:bb:81:22:a1:d2:0c:dd:
76:62:83:9c:b6:eb:22:f4:90:20:bc:1c:cd:cb:34:
32:ad:51:91:03:d1:30:09:35:2e:35:c9:f4:db:ac:
cf:f3:c5:c2:77:71:af:a0:4a:ec:c1:16:19:a3:27:
a3:ad:0c:8f:60:e7:31:51:dd:fd:23:7b:ba:51:1c:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:01:07:0C:3B:75:DF:D3:79:C9:A2:EB:FD:AC:22:E7:34:00:A6:88
X509v3 Authority Key Identifier:
keyid:4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e8:55:71:61:3c:d0:1d:d9:c7:52:72:a2:1d:aa:aa:c4:b6:
fc:da:13:9c:8a:3a:16:9f:30:fe:53:3a:c7:ac:7d:91:08:c7:
ba:66:82:92:87:26:d8:3b:33:99:1e:9f:13:0b:33:86:dc:d7:
f9:2f:dd:73:f3:ae:26:27:4a:91:77:fb:40:e7:18:e0:b2:ba:
d3:07:c0:90:29:1d:5d:77:9e:1d:6a:59:5a:76:4f:d4:08:b6:
79:cf:75:14:29:a0:2a:15:ad:9b:8c:d7:6c:1a:6b:bf:1b:ac:
dd:28:2d:ce:5a:d6:c8:aa:49:26:03:76:cb:e3:25:10:b5:36:
6c:95:d4:7e:5f:e0:3e:33:ed:cd:2b:3e:ce:e3:86:df:7d:9f:
d1:39:7a:35:e6:ea:c9:2b:c9:29:02:76:31:04:61:61:28:cd:
e3:7c:22:3b:7a:30:e1:34:45:a4:03:f5:37:46:ae:2b:5d:cc:
35:a3:ad:3e:89:36:7f:15:50:67:88:72:58:c9:62:a5:d2:32:
12:5b:91:3c:bb:64:2f:72:c0:69:2b:89:26:b4:23:00:2e:ab:
65:6e:fc:a3:8d:9e:68:92:2a:a0:0b:3d:43:29:42:20:78:92:
86:76:ce:82:10:33:d5:38:f5:a2:32:d4:d8:be:8e:63:ed:e1:
57:c1:bb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:24:52 2026 by rpki-client