
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
File: 4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft (raw, json)
Hash identifier: FuTNqaWNyDocakEbO7KvMWDg1a074oJiRzTm5RsbBbs=
Subject key identifier: 4A:71:0C:66:8C:88:09:41:14:04:EA:54:CF:B9:18:70:2B:60:6A:B7
Authority key identifier: 4B:C6:9E:91:BB:5B:CC:5B:1F:0D:4C:11:2F:9C:88:39:B1:69:05:54
Certificate issuer: /CN=4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554
Certificate serial: 3A21807603AE0189FF78E7A244E83E84DE452949
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 17:32:24 +0000
Manifest this update: Tue 12 May 2026 17:27:24 +0000
Manifest next update: Wed 13 May 2026 21:19:24 +0000
Files and hashes: 1: 4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl (hash: 6U0dzF7aoBdUX+lqyPhVHw5orxfTdEcZM2uoJyGlHzw=)
2: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: dIbMNlmzPRtmx/pqtJnbGmYAZfEP0PtpQbV8sPyHXmY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl
rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:21:80:76:03:ae:01:89:ff:78:e7:a2:44:e8:3e:84:de:45:29:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554
Validity
Not Before: May 12 17:27:24 2026 GMT
Not After : May 13 21:19:24 2026 GMT
Subject: CN=4A710C668C8809411404EA54CFB918702B606AB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cd:6b:2f:61:63:dd:37:65:b2:38:3f:1c:39:
c4:ff:f9:56:5b:e6:b7:fa:5e:7c:4f:40:2d:f6:fb:
b2:e7:61:87:ba:51:c1:64:31:f2:ce:a4:5d:81:bb:
fc:d2:c6:74:1f:b9:0b:3b:ec:3a:20:77:5c:f8:b4:
57:64:59:fc:ae:73:e3:54:54:f6:a8:08:99:45:5e:
d7:27:e0:13:d3:50:3b:6a:01:c2:a4:6f:70:3c:42:
3e:9d:a2:e2:28:fd:de:13:23:10:f2:52:a0:b5:7d:
ae:e2:6f:db:a1:ac:72:6b:12:ae:43:a6:ce:ef:2e:
34:a8:79:64:c9:bc:db:ba:62:92:10:34:90:0f:ee:
4e:89:81:30:20:eb:8f:d7:66:92:70:02:b3:ab:26:
6a:e3:d8:82:16:c2:19:83:23:fa:40:24:d0:ab:f9:
4c:c7:db:aa:ce:a5:46:b6:8e:63:9e:c0:d3:ac:fc:
4b:f5:69:74:73:37:86:85:5f:1f:ed:cd:b4:44:a1:
42:98:4b:65:63:8f:3a:cb:3b:f8:a2:9d:79:d6:a6:
5b:69:23:b4:ec:9b:c5:37:53:97:7a:87:fa:22:0f:
72:1a:33:d1:10:dc:2e:f4:90:59:a7:bd:68:9c:7c:
f0:35:10:0c:5c:0a:23:83:52:ad:6c:f2:40:bb:f4:
6f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:71:0C:66:8C:88:09:41:14:04:EA:54:CF:B9:18:70:2B:60:6A:B7
X509v3 Authority Key Identifier:
keyid:4B:C6:9E:91:BB:5B:CC:5B:1F:0D:4C:11:2F:9C:88:39:B1:69:05:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/4BC69E91BB5BCC5B1F0D4C112F9C8839B1690554.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:a4:4c:ef:9a:15:cf:01:7b:a2:f3:27:92:d9:4f:66:8e:d1:
78:27:e6:e6:d8:74:2f:b8:42:c4:3b:04:26:2a:12:9a:72:9e:
c1:d2:4f:57:fd:3d:08:99:8e:4b:a1:94:db:d6:20:d1:15:30:
39:ef:df:00:db:b3:5b:6f:66:8b:a7:af:28:e7:66:70:f6:01:
b7:09:15:db:f1:48:39:a3:10:f1:77:f3:90:b1:91:ea:07:dc:
ba:4e:5e:23:98:bf:e1:eb:ef:c4:43:1b:5b:93:2c:7e:55:c9:
4c:80:a2:35:4d:16:67:cb:eb:a0:ed:bc:5c:62:4c:f2:af:f0:
ed:84:44:45:1f:15:94:6b:5a:a2:41:df:31:82:6c:ab:e6:76:
1c:38:36:88:5e:53:21:f1:f6:3d:50:91:59:f7:77:ca:db:0a:
39:87:79:72:59:c4:f5:72:1b:b5:73:4b:b3:d8:bb:3c:82:97:
a4:84:ef:7e:43:96:14:ab:37:43:93:cf:c1:39:86:09:46:d8:
8b:80:5b:49:1c:d4:b6:be:8c:06:6f:1f:e4:ca:a6:d8:74:ca:
71:8f:cb:77:f3:a1:cc:1e:b7:0b:db:f8:8b:d7:a0:c4:14:b8:
b6:e2:92:ba:00:d4:9d:47:0e:0d:d5:d6:09:73:f0:b6:40:09:
9c:30:41:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:50 2026 by rpki-client