
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
File: 4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft (raw, json)
Hash identifier: aL5tN2uZPjwytDiclFbb+nJETP9CANTDzHyn0OHIoYI=
Subject key identifier: 1B:44:51:6B:7F:DB:E4:84:3B:9E:7E:38:A2:7B:D8:EF:9A:AC:85:71
Authority key identifier: 4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A
Certificate issuer: /CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A
Certificate serial: 39F1F63E86F4F7D7CF0943787B4306C9866095C8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 22:23:45 +0000
Manifest this update: Wed 23 Sep 2026 22:18:45 +0000
Manifest next update: Fri 25 Sep 2026 00:12:45 +0000
Files and hashes: 1: 3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa (hash: Tkh0+XsPVTypniidThAuJHBFvt6qbkv8XEWtO3EZhzc=)
2: 4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl (hash: YDxBw/lYQoWDcMhGX/nPbIqnYkWV0aTqwLVcbTBYrzA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl
rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 00:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:f1:f6:3e:86:f4:f7:d7:cf:09:43:78:7b:43:06:c9:86:60:95:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A
Validity
Not Before: Sep 23 22:18:45 2026 GMT
Not After : Sep 25 00:12:45 2026 GMT
Subject: CN=1B44516B7FDBE4843B9E7E38A27BD8EF9AAC8571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:da:65:8d:13:79:53:99:bb:c5:02:5a:85:c5:
9d:fe:ee:36:3a:a3:49:d2:e9:90:4d:92:a3:68:1c:
66:ff:58:44:0a:e0:a2:30:59:6b:77:67:c2:dc:8c:
3f:55:5e:0d:9d:ab:2d:1b:0c:a9:d9:19:a5:8a:d0:
82:51:9d:04:14:60:97:cb:55:19:65:9c:fb:b9:d9:
07:43:08:a8:97:69:41:c3:11:cc:7c:a3:3e:7f:41:
6b:c7:2c:81:4c:23:ab:9f:16:78:d5:b3:a2:fd:a6:
57:94:a5:89:40:0d:6f:30:dd:e1:64:a5:37:3f:e2:
2f:1a:6b:f8:ec:13:24:21:49:f8:b9:6b:a4:f4:9c:
0c:9c:f5:3d:bc:fd:4a:5d:42:c9:8d:37:cf:cc:64:
86:4d:ca:f9:3b:0d:51:c0:65:bd:5c:b6:9d:9b:fc:
a1:c7:2d:f3:18:e3:c3:16:d0:d1:60:9f:04:dc:ff:
69:e6:7f:be:35:e6:e1:26:f2:35:23:30:da:2d:ce:
05:85:e2:1b:d8:06:88:05:cf:ab:22:31:06:4c:6d:
50:eb:07:57:ec:e5:b7:73:58:f9:69:ef:79:b7:e6:
a2:f6:f3:c4:00:9f:9a:14:42:7f:d9:5f:b9:ce:2c:
b8:01:51:3a:90:97:41:f0:35:f4:e2:e9:8b:a0:99:
54:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:44:51:6B:7F:DB:E4:84:3B:9E:7E:38:A2:7B:D8:EF:9A:AC:85:71
X509v3 Authority Key Identifier:
keyid:4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5f:24:64:1d:4c:0e:95:97:fe:f9:25:b6:82:33:d8:4b:f7:
a9:4e:fe:77:99:55:27:30:10:5a:f3:69:1b:cb:17:50:2d:82:
30:34:db:67:d1:40:9d:88:ee:ea:3d:9d:41:b1:d6:7f:d1:93:
46:2e:24:c5:05:e4:ac:53:b7:5e:be:ae:0a:68:a2:ce:f6:85:
77:b6:a8:ac:61:4a:70:9c:e3:8a:9a:c2:c2:10:4f:ad:f8:bb:
9e:f9:93:29:23:75:2d:6c:8b:bf:93:d4:f8:4f:79:13:43:e7:
68:8e:43:d5:33:5a:34:ef:e2:c5:cb:10:d9:f6:2a:e9:0e:56:
fd:6d:c6:0c:f3:ef:a5:8b:1a:ed:31:c6:6f:13:d2:6d:1a:73:
c8:a3:1c:86:32:34:7f:43:29:2b:96:05:5b:4b:87:c4:c7:2f:
81:75:f8:cc:a9:76:ee:17:08:2e:26:d5:ea:30:63:18:2c:5e:
cd:ff:99:4b:38:ed:42:69:7f:77:0a:d9:d5:23:42:16:91:53:
8f:fa:a4:8b:a9:12:3e:c6:9d:fd:fa:bc:fb:23:4d:54:ad:92:
e8:2d:02:ed:db:7e:bb:48:10:1d:11:80:09:15:86:1e:c8:46:
e4:2d:ed:0d:bc:39:d8:07:70:3c:d9:8c:4d:77:e6:7d:2a:5a:
12:a5:bd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:04:35 2026 by rpki-client