
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft
File: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft (raw, json)
Hash identifier: gtK4gYAgrePflud54lwf9t3ZMpQVbnqTTVvyEdC+6Ho=
Subject key identifier: B1:98:CC:DB:15:4C:D4:97:AA:8E:1F:E2:6A:71:F6:E9:9E:E6:2F:04
Authority key identifier: 45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36
Certificate issuer: /CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36
Certificate serial: 310904F49ADA5B24022E280FFCB99020F8A56F14
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 15:23:48 +0000
Manifest this update: Thu 23 Jul 2026 15:18:48 +0000
Manifest next update: Fri 24 Jul 2026 16:19:48 +0000
Files and hashes: 1: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (hash: P9vNVfY/gnSAC1gUwy4cPedcB+rYejwkV7mz34Jb55c=)
2: 4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl (hash: 5UXGoBlAXH6zyHepLTTyHG+V2NRr9EDtiOEZ8skmbK4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl
rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 16:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:09:04:f4:9a:da:5b:24:02:2e:28:0f:fc:b9:90:20:f8:a5:6f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36
Validity
Not Before: Jul 23 15:18:48 2026 GMT
Not After : Jul 24 16:19:48 2026 GMT
Subject: CN=B198CCDB154CD497AA8E1FE26A71F6E99EE62F04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:5a:df:88:da:ea:ed:6e:42:6b:59:a2:1e:
e1:31:ef:fd:6c:a1:e1:38:8f:0a:80:4f:f1:f0:26:
6f:fe:11:bd:05:56:08:57:07:07:c7:7d:67:b9:eb:
93:dc:17:61:98:a3:05:f9:86:72:d7:b7:0b:c1:13:
e8:9b:07:de:3c:28:97:10:77:e5:46:c7:1b:d4:b3:
d0:c7:01:6d:c8:cd:1f:a3:87:fb:ca:27:5a:f1:a6:
65:6f:84:a9:36:48:b6:9a:45:4e:f5:6f:f3:88:5f:
50:c4:b1:e2:22:dd:ab:a7:9e:0f:e6:4c:f8:50:c2:
ac:38:03:64:c1:5f:de:29:f1:01:7c:0f:33:cc:a0:
4f:fa:32:32:9e:99:de:85:09:0f:22:1a:14:6f:f5:
a0:26:09:e9:2d:34:70:85:8b:ec:e1:22:8b:0b:d9:
b3:6c:a9:b6:76:52:bc:ba:2e:be:bc:00:58:64:65:
d7:a3:5a:58:e1:a5:00:d7:f6:6d:58:48:66:14:be:
cb:4b:78:15:cb:0f:08:f2:88:02:39:5a:70:9d:fb:
17:25:d5:14:97:5f:8e:11:6b:cd:ab:c4:55:18:84:
4d:54:65:ef:a2:85:f5:84:3b:b1:12:d6:f8:79:7d:
f0:b1:30:b3:d6:0f:c9:a9:3b:06:05:ee:2a:72:39:
1e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:98:CC:DB:15:4C:D4:97:AA:8E:1F:E2:6A:71:F6:E9:9E:E6:2F:04
X509v3 Authority Key Identifier:
keyid:45:32:F8:00:A7:EB:5B:CB:5D:B0:56:99:C6:DD:AA:7F:95:FA:EC:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/4532F800A7EB5BCB5DB05699C6DDAA7F95FAEC36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7c:48:6f:de:d0:a0:98:16:c3:3a:96:2f:11:88:2b:08:fe:
dc:a8:43:62:24:6e:33:9b:d9:ca:45:48:58:e0:79:8b:31:f9:
1e:2e:2c:50:c8:29:84:a6:13:3c:06:63:71:02:e3:17:2d:ca:
bc:d9:80:05:4c:1a:03:58:3a:62:47:c7:e4:60:05:c6:00:e8:
aa:dc:35:cd:6f:bd:c6:cd:d1:0c:ab:1d:24:54:81:f1:fd:17:
dd:e8:fb:05:2e:10:1f:38:fb:57:93:7f:a7:bd:22:a9:0d:72:
30:cf:a3:a3:20:9a:98:31:cc:cd:86:51:38:f1:a2:7e:ae:80:
bf:ad:06:75:ad:02:5b:72:c6:a6:fe:02:6f:1c:58:bd:46:b8:
d5:d5:52:4c:f5:77:de:86:2a:9d:d6:70:49:6f:a7:be:6f:3c:
fa:60:a2:d3:32:5e:63:ee:6e:87:57:65:f1:b1:a2:a3:0d:43:
05:ff:69:3b:9e:45:2a:08:f0:99:3d:e8:84:af:42:65:29:40:
b7:fe:9c:76:4b:66:15:86:16:09:d2:72:82:9f:f6:ed:7a:2c:
b6:2c:b0:f5:39:63:4f:5b:84:c9:b4:5f:b7:0e:55:f7:38:b2:
4c:36:c8:82:61:dd:4a:f4:73:b6:36:f9:7a:75:13:94:d9:22:
23:c8:ea:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:35:02 2026 by rpki-client