
$ rpki-client -vvf rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft
File: 4BEF373BC53710D136B40D9F928C485C94C670AC.mft (raw, json)
Hash identifier: asQxltp76qkotlqsL2WqImBp89ea42xwxtk8RTu43AM=
Subject key identifier: 94:6C:5F:63:03:DD:0C:68:2A:A7:BC:63:67:41:F5:A2:7C:9F:D9:1F
Authority key identifier: 4B:EF:37:3B:C5:37:10:D1:36:B4:0D:9F:92:8C:48:5C:94:C6:70:AC
Certificate issuer: /CN=4BEF373BC53710D136B40D9F928C485C94C670AC
Certificate serial: 270D86B7ECD455AC857EF811CEEAD2CCCBD2AFBB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 11:23:59 +0000
Manifest this update: Thu 23 Jul 2026 11:18:59 +0000
Manifest next update: Fri 24 Jul 2026 14:55:59 +0000
Files and hashes: 1: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: BeyFn4HdqSwVXnWm2K4O6j5GAQt7VRMXeOWfjpsb09s=)
2: 4BEF373BC53710D136B40D9F928C485C94C670AC.crl (hash: YXbA7bP4EiOKhtDZG7ZQjYphztBATf2V27btvlOGCOU=)
3: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: u0AoFky6YChlG8p9ccsv4zHYDeuKyJl51gZR3MByaxM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.crl
rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 14:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:0d:86:b7:ec:d4:55:ac:85:7e:f8:11:ce:ea:d2:cc:cb:d2:af:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BEF373BC53710D136B40D9F928C485C94C670AC
Validity
Not Before: Jul 23 11:18:59 2026 GMT
Not After : Jul 24 14:55:59 2026 GMT
Subject: CN=946C5F6303DD0C682AA7BC636741F5A27C9FD91F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:c4:2e:74:86:b1:53:5b:be:36:05:40:3e:
7d:20:35:18:f0:eb:37:8b:6b:47:d3:3c:7d:1f:5a:
10:70:d3:97:4b:d0:c9:9e:84:6c:6e:3b:f9:4e:f1:
c4:4d:54:4c:fe:f9:a5:67:f4:22:68:ba:82:67:a9:
0a:a0:a6:a2:e1:00:c7:53:85:6d:50:cb:8f:d7:14:
64:1d:a2:ed:86:25:0b:cc:dd:9a:73:6e:d2:26:f9:
3a:b4:82:a9:d8:f0:0d:dc:0b:13:e7:f9:b3:62:07:
71:64:1c:d4:ec:24:0e:ed:91:8e:f7:b3:b9:e1:5d:
1c:e4:2a:94:96:96:21:66:f3:7f:06:b4:d1:b8:51:
36:91:29:98:b9:83:22:a6:a6:46:3f:b0:6b:62:b6:
a8:5f:5b:ef:52:9b:ca:6e:68:09:a5:18:45:26:55:
ae:83:4c:fa:01:3a:19:52:97:2f:8a:9f:4a:99:2d:
4f:f2:f2:34:11:96:e0:78:16:26:55:f3:56:8a:3d:
86:0a:51:62:c8:05:3e:d1:d9:6d:69:8d:f2:64:58:
b9:e1:1f:c6:8c:57:dd:6a:73:50:88:be:e9:65:12:
7f:28:52:f2:cb:4b:e5:2e:99:3c:5c:d4:bf:ad:3e:
78:72:ce:79:1c:66:35:61:af:03:b3:c9:d7:47:26:
3a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6C:5F:63:03:DD:0C:68:2A:A7:BC:63:67:41:F5:A2:7C:9F:D9:1F
X509v3 Authority Key Identifier:
keyid:4B:EF:37:3B:C5:37:10:D1:36:B4:0D:9F:92:8C:48:5C:94:C6:70:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:44:4c:a6:63:85:21:3d:88:d4:45:8c:63:3d:49:02:dc:22:
d9:09:55:d4:b6:3e:03:cb:0d:91:a8:76:4c:7e:a7:f0:d6:d7:
47:da:9d:3a:1a:ea:91:65:e7:b8:20:21:58:c3:e5:cf:cf:0a:
34:51:61:98:7a:0d:59:f5:1b:03:6f:8b:3a:73:e0:c0:d7:67:
1a:e0:c1:67:f0:ef:03:d0:9b:e0:34:12:78:d3:22:06:27:62:
14:a8:76:b3:50:d1:60:05:e7:e2:35:f2:55:94:78:8e:69:6d:
ae:f8:8b:56:d6:72:7f:a6:cc:b0:d2:9c:6e:b6:15:fe:a7:76:
d2:6f:20:33:99:09:1d:cb:4f:66:1d:b8:9a:64:9c:5d:f0:c0:
3b:f7:bd:15:86:77:75:9c:bc:d1:7a:78:37:3f:5d:c7:3d:ba:
05:b8:94:8d:3a:f5:ce:61:55:c7:cd:71:02:19:78:77:a0:f6:
67:7e:84:1c:5d:71:f5:85:0b:13:2b:c7:90:d7:e3:a5:ab:6e:
ed:02:4d:77:48:9f:88:ec:81:e5:e3:3c:ca:8b:62:9b:12:36:
6d:27:5c:ee:0e:a7:b3:e6:41:6e:13:89:50:0b:cb:55:ae:7f:
95:23:c0:da:2e:b6:13:89:c9:ae:3c:72:08:bd:c3:47:18:4a:
03:9d:57:44
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJw2Gt+zUVayFfvgRzurSzMvSr7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJFRjM3M0JDNTM3MTBEMTM2QjQwRDlGOTI4QzQ4NUM5
NEM2NzBBQzAeFw0yNjA3MjMxMTE4NTlaFw0yNjA3MjQxNDU1NTlaMDMxMTAvBgNV
BAMTKDk0NkM1RjYzMDNERDBDNjgyQUE3QkM2MzY3NDFGNUEyN0M5RkQ5MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUMQudIaxU1u+NgVAPn0gNRjw
6zeLa0fTPH0fWhBw05dL0MmehGxuO/lO8cRNVEz++aVn9CJouoJnqQqgpqLhAMdT
hW1Qy4/XFGQdou2GJQvM3ZpzbtIm+Tq0gqnY8A3cCxPn+bNiB3FkHNTsJA7tkY73
s7nhXRzkKpSWliFm838GtNG4UTaRKZi5gyKmpkY/sGtitqhfW+9Sm8puaAmlGEUm
Va6DTPoBOhlSly+Kn0qZLU/y8jQRluB4FiZV81aKPYYKUWLIBT7R2W1pjfJkWLnh
H8aMV91qc1CIvullEn8oUvLLS+UumTxc1L+tPnhyznkcZjVhrwOzyddHJjopAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlGxfYwPdDGgqp7xjZ0H1onyf2R8wHwYDVR0j
BBgwFoAUS+83O8U3ENE2tA2fkoxIXJTGcKwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDNhZGU5YzAtY2RlMS00N2YwLTljZDItNGE1N2JkZGUxNGU4LzAvNEJFRjM3M0JD
NTM3MTBEMTM2QjQwRDlGOTI4QzQ4NUM5NEM2NzBBQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QkVGMzczQkM1MzcxMEQxMzZCNDBEOUY5MjhDNDg1Qzk0QzY3
MEFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDNhZGU5YzAtY2RlMS00N2YwLTlj
ZDItNGE1N2JkZGUxNGU4LzAvNEJFRjM3M0JDNTM3MTBEMTM2QjQwRDlGOTI4QzQ4
NUM5NEM2NzBBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAtETKZjhSE9iNRFjGM9SQLcItkJVdS2PgPL
DZGodkx+p/DW10fanToa6pFl57ggIVjD5c/PCjRRYZh6DVn1GwNvizpz4MDXZxrg
wWfw7wPQm+A0EnjTIgYnYhSodrNQ0WAF5+I18lWUeI5pba74i1bWcn+mzLDSnG62
Ff6ndtJvIDOZCR3LT2YduJpknF3wwDv3vRWGd3WcvNF6eDc/Xcc9ugW4lI069c5h
VcfNcQIZeHeg9md+hBxdcfWFCxMrx5DX46Wrbu0CTXdIn4jsgeXjPMqLYpsSNm0n
XO4Op7PmQW4TiVALy1Wuf5UjwNouthOJya48cgi9w0cYSgOdV0Q=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:40:15 2026 by rpki-client