
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
File: 4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft (raw, json)
Hash identifier: q2jE0KYU7pErZex4AcV0LPebsTSLO+JMXyWihvWCA6Y=
Subject key identifier: A6:10:92:6C:96:74:EB:BE:15:43:22:9C:6B:B2:40:79:38:8C:AA:F2
Authority key identifier: 4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26
Certificate issuer: /CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526
Certificate serial: 1FBE2256BAD87D1D8C9FA1A13FC595824FBF2904
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 07:08:20 +0000
Manifest this update: Tue 12 May 2026 07:03:20 +0000
Manifest next update: Wed 13 May 2026 09:09:20 +0000
Files and hashes: 1: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: crz5wQlV27LIwISEyXo4hYXR+StXchnW3rusJFfd1fY=)
2: 4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl (hash: JCWeQ/dbcRH4rE//6GkMlSpmFLIQTyK3vEBbZdb2SBw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl
rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:09:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:be:22:56:ba:d8:7d:1d:8c:9f:a1:a1:3f:c5:95:82:4f:bf:29:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526
Validity
Not Before: May 12 07:03:20 2026 GMT
Not After : May 13 09:09:20 2026 GMT
Subject: CN=A610926C9674EBBE1543229C6BB24079388CAAF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:7d:2f:03:26:6b:e8:38:45:5d:b6:51:7c:
7f:3d:9f:22:e4:a8:c0:c7:38:69:b3:fd:94:a4:df:
bc:43:6e:46:ec:3d:c4:85:ca:52:4a:4f:b2:4a:a6:
28:dd:19:a5:7a:f7:b1:0f:8a:4d:a7:b4:ec:8b:bb:
60:d0:ee:75:18:d8:24:94:d5:cd:34:50:ed:ee:99:
f5:4c:86:d5:a9:5b:14:c8:6f:08:2f:ae:48:57:39:
c0:9a:ac:b1:71:ca:73:7a:24:f6:4f:71:2f:00:ca:
c1:5f:79:2e:a0:ac:92:82:10:27:53:25:e3:76:20:
28:3c:da:c4:ef:51:9a:95:4a:2e:b0:cf:43:ea:6d:
0e:04:f8:02:59:ac:4c:99:4a:31:f4:b1:ab:14:c2:
4e:e9:00:46:6b:f2:d4:8b:9a:a6:ee:3a:ab:43:32:
c3:1a:89:9b:71:78:2a:50:c2:d1:9b:d0:83:52:ba:
3d:57:46:55:1d:41:8c:dc:e2:a5:2d:48:d1:15:b2:
55:b4:a7:74:dd:65:d1:55:67:04:76:79:77:35:39:
64:65:c7:33:b2:6b:35:27:ef:ef:a7:3c:c7:65:2d:
c5:57:02:52:79:f4:59:b6:1f:80:e8:86:1a:25:29:
41:aa:96:46:f7:5d:27:d7:24:fe:d3:34:6c:dc:6a:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:10:92:6C:96:74:EB:BE:15:43:22:9C:6B:B2:40:79:38:8C:AA:F2
X509v3 Authority Key Identifier:
keyid:4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a7:4e:cd:b1:29:d3:2e:09:17:cc:e9:b3:f7:72:87:64:56:
0e:e9:ac:de:d3:9f:35:66:55:12:ce:39:1d:a4:84:36:59:c8:
06:fb:e6:7e:a3:eb:4b:39:c2:98:de:38:45:33:0b:87:39:78:
6c:e3:29:db:b4:8f:1d:45:6a:2e:53:4f:1f:ef:93:aa:87:de:
45:55:53:bc:40:de:90:90:7f:f5:a9:e1:a6:48:5e:5c:a7:2e:
80:65:5e:49:c0:87:bf:eb:cf:ea:98:be:1a:b3:d9:f5:d9:68:
cf:a1:c4:34:cf:85:dc:25:9f:ca:f7:40:60:65:a5:2f:75:ea:
ff:5d:05:17:3e:10:d8:d4:4f:0f:ee:91:44:19:4c:05:f7:f4:
7d:30:ac:26:35:a0:9b:ef:32:68:ae:7a:b6:75:03:77:19:06:
33:a3:5d:d4:60:90:07:56:4d:73:0e:3c:61:98:1a:38:fa:2b:
0a:8c:0f:79:0e:0c:fd:67:eb:29:7e:9e:8b:65:87:35:be:3b:
1d:65:71:64:fe:ca:42:8a:90:c9:fe:78:de:bc:6a:b4:42:34:
f4:74:f4:81:3e:42:e4:0d:53:b6:5f:39:a0:11:41:2a:2e:9a:
22:79:ef:68:30:53:e7:30:6d:92:51:f2:10:92:61:57:c9:93:
fb:a4:45:97
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUH74iVrrYfR2Mn6GhP8WVgk+/KQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQzNjhENjBFQUUyQjcyMThFOUM1MjI0NjVERkRBRDdE
MkRENzUyNjAeFw0yNjA1MTIwNzAzMjBaFw0yNjA1MTMwOTA5MjBaMDMxMTAvBgNV
BAMTKEE2MTA5MjZDOTY3NEVCQkUxNTQzMjI5QzZCQjI0MDc5Mzg4Q0FBRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwg30vAyZr6DhFXbZRfH89nyLk
qMDHOGmz/ZSk37xDbkbsPcSFylJKT7JKpijdGaV697EPik2ntOyLu2DQ7nUY2CSU
1c00UO3umfVMhtWpWxTIbwgvrkhXOcCarLFxynN6JPZPcS8AysFfeS6grJKCECdT
JeN2ICg82sTvUZqVSi6wz0PqbQ4E+AJZrEyZSjH0sasUwk7pAEZr8tSLmqbuOqtD
MsMaiZtxeCpQwtGb0INSuj1XRlUdQYzc4qUtSNEVslW0p3TdZdFVZwR2eXc1OWRl
xzOyazUn7++nPMdlLcVXAlJ59Fm2H4DohholKUGqlkb3XSfXJP7TNGzcatRTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUphCSbJZ0674VQyKca7JAeTiMqvIwHwYDVR0j
BBgwFoAUTTaNYOrityGOnFIkZd/a19LddSYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWI3MDkwNDQtNTcxOC00ZjFkLWE2ZDAtODc2NmVhNzNlYWY0LzAvNEQzNjhENjBF
QUUyQjcyMThFOUM1MjI0NjVERkRBRDdEMkRENzUyNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80RDM2OEQ2MEVBRTJCNzIxOEU5QzUyMjQ2NURGREFEN0QyREQ3
NTI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MDkwNDQtNTcxOC00ZjFkLWE2
ZDAtODc2NmVhNzNlYWY0LzAvNEQzNjhENjBFQUUyQjcyMThFOUM1MjI0NjVERkRB
RDdEMkRENzUyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAGnTs2xKdMuCRfM6bP3codkVg7prN7TnzVm
VRLOOR2khDZZyAb75n6j60s5wpjeOEUzC4c5eGzjKdu0jx1Fai5TTx/vk6qH3kVV
U7xA3pCQf/Wp4aZIXlynLoBlXknAh7/rz+qYvhqz2fXZaM+hxDTPhdwln8r3QGBl
pS916v9dBRc+ENjUTw/ukUQZTAX39H0wrCY1oJvvMmiuerZ1A3cZBjOjXdRgkAdW
TXMOPGGYGjj6KwqMD3kODP1n6yl+notlhzW+Ox1lcWT+ykKKkMn+eN68arRCNPR0
9IE+QuQNU7ZfOaARQSoumiJ572gwU+cwbZJR8hCSYVfJk/ukRZc=
-----END CERTIFICATE-----
Generated at Wed May 13 00:31:20 2026 by rpki-client