
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft
File: 4063368E83B93018DA72EDEB060702A5F8F9269C.mft (raw, json)
Hash identifier: +7FEN1eKaJG3Sqcxn157h8oS98TUFeMxwyICO8/DONk=
Subject key identifier: 40:D5:FB:62:F6:A5:7B:F2:6A:31:66:C5:0B:58:F9:3F:E5:A1:6E:79
Authority key identifier: 40:63:36:8E:83:B9:30:18:DA:72:ED:EB:06:07:02:A5:F8:F9:26:9C
Certificate issuer: /CN=4063368E83B93018DA72EDEB060702A5F8F9269C
Certificate serial: 16DA2C80565106E613293F5BD627C33DAEB5ADA1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4063368E83B93018DA72EDEB060702A5F8F9269C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:25:46 +0000
Manifest this update: Tue 12 May 2026 22:20:46 +0000
Manifest next update: Wed 13 May 2026 23:14:46 +0000
Files and hashes: 1: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: YoPiO/BGRHdiNMspy83HWAqltNlSFq59XV4OA1NunVQ=)
2: 4063368E83B93018DA72EDEB060702A5F8F9269C.crl (hash: cCRh8Aem86s7jpko3r2egO8tVAnkj+dnU+tjZhLlhRw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.crl
rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4063368E83B93018DA72EDEB060702A5F8F9269C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:da:2c:80:56:51:06:e6:13:29:3f:5b:d6:27:c3:3d:ae:b5:ad:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4063368E83B93018DA72EDEB060702A5F8F9269C
Validity
Not Before: May 12 22:20:46 2026 GMT
Not After : May 13 23:14:46 2026 GMT
Subject: CN=40D5FB62F6A57BF26A3166C50B58F93FE5A16E79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ee:19:c5:cb:c7:90:c9:0a:b8:da:4e:c0:ba:
9c:4f:19:99:8b:ae:7f:99:d8:1a:bf:d1:1b:de:f9:
a5:e8:54:f6:69:03:de:c7:2a:20:32:43:b2:28:e4:
91:76:9b:43:c9:11:ed:3e:37:48:c7:b2:d9:32:9b:
88:b7:21:84:60:af:3e:90:d5:7e:4e:ac:34:ce:78:
83:c1:12:d1:0f:87:f0:85:8a:27:b5:13:c7:43:42:
e1:c9:48:10:df:1c:3a:ef:5c:ec:47:17:e1:4c:fb:
2e:25:8b:8f:15:a2:9a:cf:9e:7d:eb:68:e2:ab:e6:
1b:a9:2e:cc:b3:27:ce:99:fe:39:b1:59:69:0e:78:
23:40:ba:d3:de:73:f8:61:d5:95:a9:03:bd:c2:ab:
ee:ea:de:88:42:b3:50:ce:87:3a:89:91:c0:c5:3c:
1a:30:62:84:b8:13:f4:b3:72:cd:ce:6d:83:10:18:
3a:44:d8:3a:1a:c5:7e:01:ed:ea:4b:b2:01:d3:77:
a7:13:ad:b9:e1:8b:b8:69:d9:8d:d5:f3:1a:04:7d:
2a:90:5c:18:d3:51:bb:e9:a5:ab:f0:96:41:7b:04:
29:26:ab:7e:4e:e9:ef:4d:e0:8f:7a:84:6a:e5:7c:
03:1d:69:77:98:2d:15:47:d3:30:e1:2a:86:36:bb:
8d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D5:FB:62:F6:A5:7B:F2:6A:31:66:C5:0B:58:F9:3F:E5:A1:6E:79
X509v3 Authority Key Identifier:
keyid:40:63:36:8E:83:B9:30:18:DA:72:ED:EB:06:07:02:A5:F8:F9:26:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4063368E83B93018DA72EDEB060702A5F8F9269C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/4063368E83B93018DA72EDEB060702A5F8F9269C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b6:c9:8f:db:90:49:ad:9d:d4:3d:e1:67:f2:19:f2:da:dc:
5b:00:ce:9a:a6:91:ee:70:48:8d:6d:c0:b6:62:c7:49:db:4e:
af:7c:91:bb:8f:75:91:e3:fc:aa:22:7b:bb:16:10:24:45:00:
11:46:d3:7b:93:50:72:52:72:d3:65:6e:80:a0:38:68:c9:22:
9d:46:7b:c0:62:e6:4f:ff:85:b9:59:b9:9d:9a:7d:8f:b5:a5:
76:7f:80:46:67:1d:6d:63:ea:d3:1a:87:ce:df:08:f9:e5:5c:
ff:5e:45:ff:a9:9a:7a:80:b2:53:b8:d0:99:f8:69:11:4b:b0:
36:79:f3:3e:7b:78:11:84:03:13:e5:5d:e6:18:05:5b:c4:bd:
3a:05:b1:8e:a4:92:ea:47:30:e1:be:eb:a0:fc:f8:83:b7:04:
e8:d9:33:93:65:f9:53:87:74:3c:9c:05:c1:df:2d:cb:70:07:
2b:9e:4b:fa:82:ad:70:d2:85:e2:14:01:86:0b:41:30:13:18:
96:86:da:de:a3:c7:3c:b3:f1:09:35:24:e7:cd:ac:4d:cc:0b:
6c:cd:37:ce:0d:13:c7:67:e8:60:6d:d6:42:c3:fa:c6:f8:37:
15:51:df:55:af:b6:08:63:83:31:b7:59:98:ef:e7:4c:ff:94:
0f:d6:ce:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:04 2026 by rpki-client