
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft
File: C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft (raw, json)
Hash identifier: axtmvHLt7pS1/JzIhGNK9oYGWVrC8Vm1SsTZrdBq2w8=
Subject key identifier: 2C:3A:24:00:A1:A1:ED:0D:3E:61:40:72:96:80:16:FD:0B:7B:B5:C1
Authority key identifier: C4:44:FB:9E:A5:E4:CA:4D:A5:FB:85:BA:13:1C:62:C0:12:40:2C:80
Certificate issuer: /CN=C444FB9EA5E4CA4DA5FB85BA131C62C012402C80
Certificate serial: 49452B9E90256DDA1CB261A87D9690E3A131168E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 21:23:56 +0000
Manifest this update: Tue 12 May 2026 21:18:56 +0000
Manifest next update: Thu 14 May 2026 00:39:56 +0000
Files and hashes: 1: C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl (hash: ggopG/XbvKDQXSrHZ1Vgdu0Y0uVEnosEkiwnNuD0HD0=)
2: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (hash: 8bdm59nV7JGD6nAo69wqK5zS2ZyFtuzqAXaUdVJTTG8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl
rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:45:2b:9e:90:25:6d:da:1c:b2:61:a8:7d:96:90:e3:a1:31:16:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C444FB9EA5E4CA4DA5FB85BA131C62C012402C80
Validity
Not Before: May 12 21:18:56 2026 GMT
Not After : May 14 00:39:56 2026 GMT
Subject: CN=2C3A2400A1A1ED0D3E614072968016FD0B7BB5C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6e:d4:e9:80:2b:bf:b8:08:4f:18:7c:39:1c:
2e:68:17:d8:07:89:35:56:67:4b:e0:a5:69:f8:23:
27:cb:f2:68:0e:8b:14:a2:34:c8:2d:c9:39:ec:1f:
07:77:d0:bd:f3:e2:8e:a9:a1:22:20:04:c5:83:f7:
4f:68:e3:68:2e:2b:4c:f9:3a:89:2f:b0:cc:81:8d:
3a:a5:0e:5e:90:dd:11:fd:4c:f0:f5:36:99:5e:b5:
92:d2:3c:29:fa:e5:89:47:a0:78:16:e4:7d:7c:42:
d4:2d:d6:5f:59:61:8a:7d:90:8a:28:e4:de:11:80:
61:7d:ec:b3:08:43:75:65:41:bd:d5:c1:84:d5:03:
81:d8:ce:5e:a9:77:84:08:48:06:ae:eb:68:c9:5c:
05:b0:01:9f:a4:66:63:43:3b:f5:ba:f0:56:42:2e:
2f:57:b7:63:a2:c4:95:2e:65:3d:97:11:75:e8:af:
a8:3b:64:cb:f5:fb:fa:fe:7c:12:ca:44:c0:21:d9:
3e:8a:b0:68:ef:5e:77:b4:43:2a:ee:17:4c:6d:f9:
f1:b8:39:28:56:9b:59:58:6b:02:81:7c:b8:c2:cc:
22:1a:54:e0:fb:c6:ab:2a:22:b6:f3:ae:6b:ed:7d:
28:dd:31:ad:1a:52:47:70:81:9a:b1:6c:fd:57:03:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3A:24:00:A1:A1:ED:0D:3E:61:40:72:96:80:16:FD:0B:7B:B5:C1
X509v3 Authority Key Identifier:
keyid:C4:44:FB:9E:A5:E4:CA:4D:A5:FB:85:BA:13:1C:62:C0:12:40:2C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0a:ae:02:9d:7f:28:64:c8:ca:c4:db:5e:d1:cd:c1:c2:d2:
76:49:b7:27:00:33:3e:68:f3:fa:62:0a:f2:d1:62:32:5a:e2:
6a:97:13:58:c6:2d:6b:66:5a:0c:e9:ad:67:1d:27:d8:d4:77:
04:23:b8:e9:c7:ac:b2:6d:dd:e7:49:61:43:f7:f7:dd:23:b4:
6e:7d:33:fb:9c:13:99:45:9d:98:37:f0:80:34:03:a8:8e:2f:
b7:de:24:4e:9b:1d:7d:71:16:10:48:4e:6d:10:38:aa:a6:9c:
49:d7:ab:35:29:4d:36:4d:68:f6:61:74:23:e5:e7:ec:7b:67:
8c:9f:ef:b1:e5:f2:b7:00:b3:3d:c9:ef:ec:0a:6c:dd:a6:bf:
92:cc:bc:56:65:c3:80:d7:92:35:e4:54:46:6d:b6:16:c9:42:
f0:af:8a:bb:2a:77:ef:e1:6b:27:53:a0:16:6d:dd:46:71:47:
6e:1b:51:f6:80:be:a5:83:e8:51:73:f1:11:53:e5:e2:f2:34:
81:1b:c2:66:dc:c6:32:e2:71:7b:e4:29:e3:6a:91:b2:ff:b1:
b8:2a:01:c9:18:50:db:06:02:e0:b5:f6:66:ca:d5:27:1c:86:
e8:56:83:9a:1f:f4:01:1f:e1:6b:00:65:92:75:b8:74:7b:41:
57:e9:bc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:15:52 2026 by rpki-client