
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft
File: F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft (raw, json)
Hash identifier: xWEja9RcvRASZGDhP3tlwY/wVkjo44YaaRBnIsLfqAc=
Subject key identifier: 20:F7:64:A0:B8:97:43:78:AF:F5:99:FB:AE:A4:BC:42:C7:2A:5C:C5
Authority key identifier: F4:93:B4:B7:B6:C0:93:2E:D4:59:0B:DF:81:32:9D:0E:AE:5E:EB:68
Certificate issuer: /CN=F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68
Certificate serial: 09B771AE55D92A2BA02E1EE526A7A30A8F18FB2F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:25:48 +0000
Manifest this update: Tue 12 May 2026 22:20:48 +0000
Manifest next update: Wed 13 May 2026 23:26:48 +0000
Files and hashes: 1: F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl (hash: OQkoVDqip6Sn4zJx6hoVyyt9gSX9bRjguGxNfMb2uhI=)
2: 3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (hash: f3wJQDXGzu3D9hBo8GBwbAPITCCR387RhleY4wa8/xI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl
rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b7:71:ae:55:d9:2a:2b:a0:2e:1e:e5:26:a7:a3:0a:8f:18:fb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68
Validity
Not Before: May 12 22:20:48 2026 GMT
Not After : May 13 23:26:48 2026 GMT
Subject: CN=20F764A0B8974378AFF599FBAEA4BC42C72A5CC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:15:cb:af:d7:14:70:93:08:67:e9:6c:ec:
c1:c7:56:54:d8:7b:7e:60:aa:2b:a5:d2:fd:61:f6:
73:6c:c0:35:f4:d5:ba:38:28:8a:ff:60:17:f5:a0:
34:c4:ef:6a:c4:2a:1b:11:f2:5a:1f:95:3a:94:26:
23:c8:58:f6:74:40:99:fb:e6:10:a0:61:6f:e7:6d:
50:92:db:99:6d:10:06:8b:ab:e5:b5:8f:30:d5:0a:
86:27:28:e2:d4:4d:72:0d:c0:fa:dc:83:1c:e4:a1:
0c:d3:8c:d5:5e:62:58:e1:e7:bb:a9:30:df:69:6c:
5a:e3:f3:cc:46:2c:20:ca:68:e3:06:ad:4f:b7:d2:
f9:28:b1:fe:2f:20:42:28:52:92:4f:c3:5b:22:a9:
1d:08:73:22:62:95:90:c7:4a:1d:08:2e:d7:dd:c1:
d4:5a:06:05:14:dd:d8:62:71:a4:2b:6d:3a:3c:42:
f4:7d:13:e8:c0:38:b6:83:60:54:cf:b9:7e:1c:1e:
7a:9e:ef:6a:eb:13:a9:c0:a3:fd:d3:d9:ef:0d:64:
f8:29:6b:b6:2a:a1:c4:5f:5b:39:74:fc:f7:a5:89:
6c:f1:30:a7:20:67:44:92:97:5d:ce:9a:18:77:96:
fc:d7:4f:51:fa:b0:a6:65:8c:a3:72:3f:09:2c:30:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F7:64:A0:B8:97:43:78:AF:F5:99:FB:AE:A4:BC:42:C7:2A:5C:C5
X509v3 Authority Key Identifier:
keyid:F4:93:B4:B7:B6:C0:93:2E:D4:59:0B:DF:81:32:9D:0E:AE:5E:EB:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/F493B4B7B6C0932ED4590BDF81329D0EAE5EEB68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:87:2d:8a:27:29:6d:e4:65:7f:dc:1e:2d:29:55:0c:5e:24:
aa:3d:a5:4a:3b:66:f3:84:94:d5:6e:7f:21:a7:e6:e8:dd:02:
6e:65:95:33:52:e8:51:19:f6:78:91:5f:89:0e:ea:37:86:48:
16:11:4e:06:fe:94:3e:79:5c:b6:9f:a4:d5:34:37:45:ed:c9:
bd:8d:5c:55:98:87:74:bd:40:c9:45:4b:c5:ab:13:8e:8e:11:
a2:4e:41:1b:2a:cd:ce:af:d2:37:3f:cf:09:35:3d:fc:86:fa:
1c:26:03:b5:3b:d8:84:60:ac:7e:bc:5d:c1:9c:01:3c:12:d8:
48:35:0b:ab:39:d5:8d:36:52:d3:a1:c0:24:d9:9f:93:66:7d:
8b:04:c7:d2:85:41:27:8b:79:95:7d:ed:36:45:d6:be:27:3b:
39:9d:9a:ff:dd:34:af:ac:ae:c5:13:9a:f7:81:c1:a6:b2:f7:
ef:b3:6f:fe:7d:3c:b7:84:ad:75:52:c2:9a:aa:51:18:bd:43:
75:04:1c:02:ee:c5:a7:8c:8f:0a:ca:72:5e:ca:7e:b2:1e:32:
f0:78:ce:a9:b1:2e:f8:f7:88:d3:4e:af:35:97:fe:0b:ab:a7:
d2:dd:56:59:24:82:6c:42:be:2f:db:0a:d4:36:c8:6a:b7:31:
b5:70:df:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:13:40 2026 by rpki-client