
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft
File: 4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft (raw, json)
Hash identifier: mwdUhZCPN7kVzwEhTqDc2Q8p65SWP3FlHDR4T0/38aQ=
Subject key identifier: 77:0B:F6:AE:C5:52:71:04:A6:8C:D2:CC:29:48:DB:EC:55:9D:67:A5
Authority key identifier: 4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B
Certificate issuer: /CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B
Certificate serial: 51BCA50E9F85C20D7BB2D2A5AE843DAA97341CD5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft
Manifest number: C3
Signing time: Thu 24 Sep 2026 23:44:55 +0000
Manifest this update: Thu 24 Sep 2026 23:39:55 +0000
Manifest next update: Sat 26 Sep 2026 00:21:55 +0000
Files and hashes: 1: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: uOrrnMFrPoXL03YICCzOHjByECp/J3X4Q9+yuwlgUIA=)
2: 4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl (hash: QBvzGoov1pbDAXrWkS6QtTFZP13KCxrFcIyVyqTAUKE=)
3: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: 3gsgdaMq9Jj1/PX8R0V/r0v44RenatE6Kq23gLzdu68=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl
rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 00:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:bc:a5:0e:9f:85:c2:0d:7b:b2:d2:a5:ae:84:3d:aa:97:34:1c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B
Validity
Not Before: Sep 24 23:39:55 2026 GMT
Not After : Sep 26 00:21:55 2026 GMT
Subject: CN=770BF6AEC5527104A68CD2CC2948DBEC559D67A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:fc:cd:b8:7c:26:56:23:4e:0c:97:87:5f:
16:4d:5a:d6:61:5a:3e:ed:2b:bc:84:40:26:4a:ea:
fe:94:76:b4:7f:24:bf:55:1b:ba:ea:3a:ac:58:f7:
ad:69:6c:16:36:d6:d4:a9:7a:e1:b9:44:cf:42:3d:
46:04:60:f8:f8:2e:4c:45:c6:33:67:e2:be:4e:d1:
22:df:b8:cf:83:00:5d:ba:e7:21:ce:41:72:81:31:
88:d0:62:5f:b7:b1:c7:b8:7f:b6:4c:d3:22:f6:7f:
a0:24:ed:52:28:74:46:25:73:6e:7c:45:3b:d8:c4:
f5:16:4c:de:8c:9c:c3:d2:bd:5f:ed:3e:9d:a9:a5:
00:3e:d8:b2:c8:19:1b:b4:bd:51:ea:0c:1b:0f:25:
a0:2c:ef:f9:e1:c5:40:5e:13:78:df:07:30:f0:f2:
cd:79:d1:e8:e8:03:5b:7d:c8:f2:c5:69:b9:be:1c:
8b:07:35:80:16:84:ae:4f:48:fb:1b:86:18:c3:fd:
0d:c1:20:c9:1e:63:6e:fd:7a:b2:b5:0e:6d:eb:0e:
db:48:cb:59:80:14:49:aa:b1:65:8b:9d:ba:e5:f3:
22:90:a8:f7:58:89:36:36:ad:3d:28:f1:4a:00:a0:
63:e2:11:cf:83:b5:03:6b:43:af:09:51:c2:f1:67:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0B:F6:AE:C5:52:71:04:A6:8C:D2:CC:29:48:DB:EC:55:9D:67:A5
X509v3 Authority Key Identifier:
keyid:4C:8D:B8:E3:4E:AF:27:84:6F:22:F0:E5:6C:A7:6B:56:1E:1F:BE:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/4C8DB8E34EAF27846F22F0E56CA76B561E1FBE0B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:da:56:ff:6b:d2:73:ce:ea:31:d9:9e:b4:4b:1d:f5:85:21:
bc:81:8e:5d:cb:8d:03:92:72:ab:1f:e0:da:2a:7d:62:2b:87:
34:eb:6a:6e:b5:c7:ef:6c:91:0c:99:9d:74:9d:78:ea:d9:96:
f7:1e:df:2c:bd:08:e7:42:84:9c:21:81:f5:95:45:e9:d9:ae:
72:9b:2e:d0:61:14:07:7e:29:cd:d7:d5:9a:f7:d8:cc:08:0c:
ae:3b:66:65:61:f7:b2:62:f1:e2:f9:fa:aa:61:97:18:d6:cc:
c4:8a:ab:72:82:a0:9b:ee:6d:58:ab:f5:d5:45:5b:1c:7d:52:
36:65:29:b0:0f:27:70:2b:10:df:c8:87:13:df:6c:59:9b:09:
ff:2f:f2:73:f6:d5:43:e4:4d:f6:1e:75:f5:bb:24:6c:b8:82:
b4:5a:5d:f6:9a:76:57:f6:e4:21:f4:de:4d:f6:9a:e3:94:ca:
18:a9:64:6e:82:37:dc:7e:8a:bb:7a:f5:24:bb:80:a1:1b:01:
79:05:53:3e:bd:df:aa:a9:20:18:db:22:55:d8:35:80:05:3e:
80:ba:3a:f8:a9:25:f7:23:18:7e:7d:8a:d0:a4:15:7b:8a:dc:
64:c4:e0:5a:53:0f:04:7b:76:2f:f2:bb:1b:4f:8f:7b:4c:c4:
8c:7c:b9:76
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUbylDp+Fwg17stKlroQ9qpc0HNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM4REI4RTM0RUFGMjc4NDZGMjJGMEU1NkNBNzZCNTYx
RTFGQkUwQjAeFw0yNjA5MjQyMzM5NTVaFw0yNjA5MjYwMDIxNTVaMDMxMTAvBgNV
BAMTKDc3MEJGNkFFQzU1MjcxMDRBNjhDRDJDQzI5NDhEQkVDNTU5RDY3QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs3fzNuHwmViNODJeHXxZNWtZh
Wj7tK7yEQCZK6v6UdrR/JL9VG7rqOqxY961pbBY21tSpeuG5RM9CPUYEYPj4LkxF
xjNn4r5O0SLfuM+DAF265yHOQXKBMYjQYl+3sce4f7ZM0yL2f6Ak7VIodEYlc258
RTvYxPUWTN6MnMPSvV/tPp2ppQA+2LLIGRu0vVHqDBsPJaAs7/nhxUBeE3jfBzDw
8s150ejoA1t9yPLFabm+HIsHNYAWhK5PSPsbhhjD/Q3BIMkeY279erK1Dm3rDttI
y1mAFEmqsWWLnbrl8yKQqPdYiTY2rT0o8UoAoGPiEc+DtQNrQ68JUcLxZ/2pAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdwv2rsVScQSmjNLMKUjb7FWdZ6UwHwYDVR0j
BBgwFoAUTI24406vJ4RvIvDlbKdrVh4fvgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjM3M2JjNjEtYzVmOS00MTU5LTk4YmMtYTA1MzBiNGRkOGI0LzAvNEM4REI4RTM0
RUFGMjc4NDZGMjJGMEU1NkNBNzZCNTYxRTFGQkUwQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QzhEQjhFMzRFQUYyNzg0NkYyMkYwRTU2Q0E3NkI1NjFFMUZC
RTBCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4
YmMtYTA1MzBiNGRkOGI0LzAvNEM4REI4RTM0RUFGMjc4NDZGMjJGMEU1NkNBNzZC
NTYxRTFGQkUwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJPaVv9r0nPO6jHZnrRLHfWFIbyBjl3LjQOS
cqsf4NoqfWIrhzTram61x+9skQyZnXSdeOrZlvce3yy9COdChJwhgfWVRenZrnKb
LtBhFAd+Kc3X1Zr32MwIDK47ZmVh97Ji8eL5+qphlxjWzMSKq3KCoJvubVir9dVF
Wxx9UjZlKbAPJ3ArEN/IhxPfbFmbCf8v8nP21UPkTfYedfW7JGy4grRaXfaadlf2
5CH03k32muOUyhipZG6CN9x+irt69SS7gKEbAXkFUz6936qpIBjbIlXYNYAFPoC6
OvipJfcjGH59itCkFXuK3GTE4FpTDwR7di/yuxtPj3tMxIx8uXY=
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:14:00 2026 by rpki-client