
$ rpki-client -vvf rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
File: 4BCE188DE42B539EBB860A376D13FE292B001147.mft (raw, json)
Hash identifier: nDN1AvUnYiUvhLvL2GUqxmz8VZI/+e4mCmo4ZPQK8r0=
Subject key identifier: FE:50:91:92:63:BC:F3:3E:B3:9E:08:47:44:9F:86:7A:49:60:FC:80
Authority key identifier: 4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47
Certificate issuer: /CN=4BCE188DE42B539EBB860A376D13FE292B001147
Certificate serial: 43E4C4A8E9B73AD996811FA1958DFAB5B7813F11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 07:18:52 +0000
Manifest this update: Thu 23 Jul 2026 07:13:52 +0000
Manifest next update: Fri 24 Jul 2026 10:14:52 +0000
Files and hashes: 1: 4BCE188DE42B539EBB860A376D13FE292B001147.crl (hash: zw/l3Xul7b4Z7RwTc9DagVnuGat9W6aLQSiDBIC8bvo=)
2: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: /L4LgvuxEYbH0dgsif++d85ZiL7YhQs+ni89j41DhXM=)
3: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: u8jjg+GiS9S6r5A4phLntvppacWIJllmMAB+9fmlXA0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl
rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e4:c4:a8:e9:b7:3a:d9:96:81:1f:a1:95:8d:fa:b5:b7:81:3f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BCE188DE42B539EBB860A376D13FE292B001147
Validity
Not Before: Jul 23 07:13:52 2026 GMT
Not After : Jul 24 10:14:52 2026 GMT
Subject: CN=FE50919263BCF33EB39E0847449F867A4960FC80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:76:d7:fb:d1:66:d2:bf:f1:44:cd:49:a6:
80:80:3f:f2:6b:1d:33:fb:86:dd:d1:ff:91:d2:a4:
e4:05:e5:29:67:6b:78:9e:3f:12:68:3f:da:09:34:
4e:26:13:52:44:9f:80:42:cb:d1:ba:94:70:c9:60:
34:e6:b1:84:de:93:5b:35:29:15:bf:2d:34:e8:fd:
7b:d6:bd:ef:c9:45:fb:74:b3:1d:db:43:5d:55:10:
75:18:0a:83:79:13:07:54:e5:cd:2f:09:85:bd:49:
9e:10:a1:d9:3a:e1:78:2d:b4:f4:a9:48:3b:53:5d:
3f:9f:fb:35:4a:a5:c6:09:50:9d:bc:ad:c3:37:8d:
1a:b5:91:80:26:e5:0a:94:77:51:e9:7a:43:9e:7a:
6d:41:f0:15:f6:fa:15:ab:dc:37:74:19:2b:ff:91:
6e:7c:a7:13:f2:49:af:4f:1d:ba:b7:05:8e:86:fe:
76:a1:7b:fe:c8:cf:81:b9:e3:3d:c8:76:5b:19:0f:
e0:69:a2:59:49:83:e9:20:8e:ca:cd:54:a5:7f:e1:
3a:d0:bf:67:1d:49:ac:ce:99:34:0c:a7:8f:46:98:
ca:0d:b1:c4:67:c0:b7:ba:69:52:66:4e:4f:7e:c0:
af:47:a0:51:de:66:f4:c3:d4:e3:85:a1:82:fe:63:
96:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:50:91:92:63:BC:F3:3E:B3:9E:08:47:44:9F:86:7A:49:60:FC:80
X509v3 Authority Key Identifier:
keyid:4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:66:d8:4d:34:f0:7d:26:10:7f:34:5a:57:e7:a6:33:5d:82:
4f:71:a0:1d:ea:f6:ca:12:f7:83:a7:1b:aa:29:24:2c:fd:7b:
8b:4e:c9:f3:9e:91:77:8c:83:5d:95:41:9a:1b:69:c3:3d:81:
43:a6:31:4a:b7:ae:0c:d4:bd:dd:d3:a1:24:3b:13:c3:ed:2e:
1c:9f:d7:3d:13:f1:93:55:45:a3:8d:c5:ec:e0:27:80:bb:04:
f2:77:2b:57:28:a2:f7:b1:f4:18:7e:c3:7e:dd:44:dd:d5:fa:
a3:ac:d9:dd:5b:6f:55:37:d5:38:24:10:a0:1a:6a:4f:aa:72:
15:25:3e:5a:99:9f:ea:cd:55:af:a6:f2:b8:fe:24:41:cb:d8:
23:3f:b1:7b:c0:ae:33:70:8c:fa:70:65:71:7e:55:d9:0c:3f:
53:db:24:18:a6:99:65:6c:e6:43:be:cd:f6:69:d5:76:ae:49:
a2:1f:97:84:bc:b9:07:ec:b4:8b:f7:77:71:93:fb:a1:71:a0:
cc:0e:10:3b:ec:1b:85:0f:a5:51:68:ab:61:5f:1c:5c:46:93:
3b:3e:f7:65:28:75:2f:d0:d1:45:a1:05:79:76:45:bd:cd:fb:
ca:05:14:4a:66:88:36:9f:42:de:ec:db:33:25:89:88:84:b2:
58:fc:35:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:12:11 2026 by rpki-client