
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft
File: 4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft (raw, json)
Hash identifier: kfRwk3q9iuXzcuhztUIL+awFlrvIcR6bdQBvOcnydTA=
Subject key identifier: 1C:C9:01:EA:B8:55:B2:33:FF:9B:37:B5:13:96:B3:81:6C:59:C5:42
Authority key identifier: 4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B
Certificate issuer: /CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B
Certificate serial: 30A6C621D1C44824442503C2C7A095D1FE136C1B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 09:26:29 +0000
Manifest this update: Thu 23 Jul 2026 09:21:29 +0000
Manifest next update: Fri 24 Jul 2026 11:24:29 +0000
Files and hashes: 1: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: uOrrnMFrPoXL03YICCzOHjByECp/J3X4Q9+yuwlgUIA=)
2: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: 3gsgdaMq9Jj1/PX8R0V/r0v44RenatE6Kq23gLzdu68=)
3: 4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl (hash: 360i+wMx4/HDtdZubYm7/k/qfLHa7jCYrzwYFgYnPuU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl
rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 11:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a6:c6:21:d1:c4:48:24:44:25:03:c2:c7:a0:95:d1:fe:13:6c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B
Validity
Not Before: Jul 23 09:21:29 2026 GMT
Not After : Jul 24 11:24:29 2026 GMT
Subject: CN=1CC901EAB855B233FF9B37B51396B3816C59C542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:e0:8d:cb:c2:58:33:26:71:ad:43:fa:f4:
45:60:23:72:38:78:dc:a7:8c:fc:cf:68:84:3a:d6:
69:98:41:4b:71:0f:e4:7a:56:5f:9f:f9:92:22:55:
fb:d3:66:6a:96:8b:ba:4b:da:f1:79:2d:12:fd:3f:
72:50:ad:07:b8:87:8f:c8:2b:05:93:f3:db:c6:b2:
7a:fe:0a:d6:55:bf:b4:35:0f:6f:9f:57:29:9b:19:
f2:8d:a2:13:f7:12:83:3a:39:3b:5a:a0:8c:f6:34:
eb:26:87:49:03:ff:d6:43:4c:2e:32:cb:45:fe:80:
a5:8b:5e:8b:e6:24:c2:1a:da:9b:37:a7:34:4c:f0:
1c:d8:a6:a4:84:32:81:d8:49:f5:26:13:ad:51:09:
89:8b:63:d0:4e:f3:6f:76:3d:ec:5e:95:9e:2c:bd:
b3:28:23:a4:5b:06:53:0c:8c:89:8f:07:38:f5:21:
d8:02:c8:bb:a3:17:1b:dc:8e:07:70:07:70:35:e0:
4e:1e:0e:ff:59:14:dc:10:1c:3f:98:1a:30:95:7c:
c7:43:df:67:b6:a7:de:13:82:b6:8e:4b:dd:ba:87:
cf:fd:67:be:0f:78:38:3a:1b:8c:a7:98:b0:ef:6f:
34:e0:be:02:33:f3:68:f8:de:52:17:c8:d2:56:f6:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C9:01:EA:B8:55:B2:33:FF:9B:37:B5:13:96:B3:81:6C:59:C5:42
X509v3 Authority Key Identifier:
keyid:4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bf:76:4d:7c:d9:f1:8c:31:6b:d9:c7:99:62:8c:d4:8b:ca:
c4:fa:cc:35:24:ff:e2:e7:5b:4a:7d:9d:23:28:af:e4:bf:ae:
fa:93:e7:9b:8f:de:c8:43:95:81:63:4f:76:f0:21:7f:f6:8f:
84:73:92:ca:ab:4a:c4:91:c5:f7:94:17:bb:b6:d6:c8:8a:d5:
75:34:e9:5e:55:1b:19:2b:a8:f4:d8:ea:1e:0a:7f:df:0e:1b:
e8:a4:13:08:9c:fc:6c:5c:e7:6a:f5:da:82:ef:57:d8:ba:18:
99:4d:41:84:89:c3:fe:4d:bd:45:e4:a4:d6:c1:3a:88:33:de:
75:cc:e1:12:d6:ea:4c:18:03:a2:cb:e2:34:ed:8a:1c:38:a3:
33:3b:f2:f3:c0:7b:e7:47:cc:7b:09:ae:13:f6:d2:df:04:ab:
aa:88:c6:83:5d:e5:9c:ec:ae:9c:06:db:5c:ed:5e:a7:71:1c:
ff:4b:c3:f6:ce:f6:eb:6f:d0:c1:fd:5a:74:38:1a:61:8c:16:
c1:b1:68:1a:fd:7e:d3:7d:0b:0b:b0:4b:d2:78:82:32:0b:a9:
75:30:ed:3c:c5:9b:d0:d5:7d:50:36:7b:c1:fb:f7:dc:ba:85:
18:a9:83:61:ee:20:02:d3:51:2b:24:88:d5:a3:93:8e:bd:23:
02:b0:61:6e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMKbGIdHESCREJQPCx6CV0f4TbBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM4REI4RTM0RUFGMjc4NDZGMjJGMEU1NkNBNzZCNTYx
RTFGQkUwQjAeFw0yNjA3MjMwOTIxMjlaFw0yNjA3MjQxMTI0MjlaMDMxMTAvBgNV
BAMTKDFDQzkwMUVBQjg1NUIyMzNGRjlCMzdCNTEzOTZCMzgxNkM1OUM1NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtNuCNy8JYMyZxrUP69EVgI3I4
eNynjPzPaIQ61mmYQUtxD+R6Vl+f+ZIiVfvTZmqWi7pL2vF5LRL9P3JQrQe4h4/I
KwWT89vGsnr+CtZVv7Q1D2+fVymbGfKNohP3EoM6OTtaoIz2NOsmh0kD/9ZDTC4y
y0X+gKWLXovmJMIa2ps3pzRM8BzYpqSEMoHYSfUmE61RCYmLY9BO8292PexelZ4s
vbMoI6RbBlMMjImPBzj1IdgCyLujFxvcjgdwB3A14E4eDv9ZFNwQHD+YGjCVfMdD
32e2p94TgraOS926h8/9Z74PeDg6G4ynmLDvbzTgvgIz82j43lIXyNJW9q3tAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHMkB6rhVsjP/mze1E5azgWxZxUIwHwYDVR0j
BBgwFoAUTI24406vJ4RvIvDlbKdrVh4fvgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjM3M2JjNjEtYzVmOS00MTU5LTk4YmMtYTA1MzBiNGRkOGI0LzAvNEM4REI4RTM0
RUFGMjc4NDZGMjJGMEU1NkNBNzZCNTYxRTFGQkUwQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QzhEQjhFMzRFQUYyNzg0NkYyMkYwRTU2Q0E3NkI1NjFFMUZC
RTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4
YmMtYTA1MzBiNGRkOGI0LzAvNEM4REI4RTM0RUFGMjc4NDZGMjJGMEU1NkNBNzZC
NTYxRTFGQkUwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAW/dk182fGMMWvZx5lijNSLysT6zDUk/+Ln
W0p9nSMor+S/rvqT55uP3shDlYFjT3bwIX/2j4RzksqrSsSRxfeUF7u21siK1XU0
6V5VGxkrqPTY6h4Kf98OG+ikEwic/Gxc52r12oLvV9i6GJlNQYSJw/5NvUXkpNbB
Oogz3nXM4RLW6kwYA6LL4jTtihw4ozM78vPAe+dHzHsJrhP20t8Eq6qIxoNd5Zzs
rpwG21ztXqdxHP9Lw/bO9utv0MH9WnQ4GmGMFsGxaBr9ftN9CwuwS9J4gjILqXUw
7TzFm9DVfVA2e8H799y6hRipg2HuIALTUSskiNWjk469IwKwYW4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:02 2026 by rpki-client