
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft
File: 4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft (raw, json)
Hash identifier: Xkh5gAhviFICEUjV9QzZKSIWz96Z638skI3hUXh5St4=
Subject key identifier: 24:A5:C3:F3:BE:28:8D:D8:84:11:81:FE:8B:B5:56:5C:9E:30:96:F7
Authority key identifier: 4E:B1:60:AE:98:58:8B:60:D5:AE:42:91:EF:D8:D1:D4:E4:1D:EA:0C
Certificate issuer: /CN=4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C
Certificate serial: 185831E754F99ABC3E1C96E11F2090BA82C617B9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 17:11:56 +0000
Manifest this update: Tue 12 May 2026 17:06:56 +0000
Manifest next update: Wed 13 May 2026 17:11:56 +0000
Files and hashes: 1: 4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl (hash: SUT2nlg9bncsI4DQf02jsZxKeH+nHcgbFRzBX5PlOZM=)
2: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (hash: UTTE4RHMUx5iXqdVFLmPyr84/+QQI3n2et5AtGkuCdU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl
rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:58:31:e7:54:f9:9a:bc:3e:1c:96:e1:1f:20:90:ba:82:c6:17:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C
Validity
Not Before: May 12 17:06:56 2026 GMT
Not After : May 13 17:11:56 2026 GMT
Subject: CN=24A5C3F3BE288DD8841181FE8BB5565C9E3096F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ad:05:57:d7:b9:58:c7:91:b8:cf:3a:a4:1c:
1f:0b:45:25:fe:35:b4:70:84:ea:f4:f6:de:e3:72:
e7:90:40:4f:7c:a8:fa:54:ee:e0:32:52:49:55:7b:
ce:55:f1:8d:78:f7:a0:ef:a1:dc:4a:4b:3e:cd:a5:
74:b2:b3:6c:4c:62:13:9a:4a:31:0f:90:d0:78:f5:
d6:09:63:7f:ae:d2:12:cb:35:47:cb:fa:b6:c2:dc:
0e:16:af:33:d3:e1:ff:61:3a:51:2f:59:a9:51:8e:
e7:86:0d:3e:5f:fa:05:1c:02:cd:a2:e2:e1:cc:46:
bc:21:64:b2:d0:51:64:10:10:10:3c:d8:a4:3d:fc:
68:b9:09:2a:6c:aa:58:74:3d:56:34:53:ce:98:ce:
4d:36:d3:bc:30:a1:46:82:53:a1:14:ef:e3:e5:0f:
47:94:6e:d4:a3:67:fd:47:94:49:3a:ec:4c:90:a8:
80:67:e0:df:80:c6:68:27:fb:a8:4f:32:4b:ca:d8:
10:69:d2:01:60:34:c3:65:1a:c7:2c:45:7c:42:0f:
fe:61:7e:70:7f:cf:64:b2:94:4d:e4:31:ad:88:57:
97:e1:13:1c:08:3d:62:14:28:20:f3:03:f5:4e:fc:
9f:21:c5:a4:2b:a6:43:f5:4c:28:f4:df:2b:95:22:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A5:C3:F3:BE:28:8D:D8:84:11:81:FE:8B:B5:56:5C:9E:30:96:F7
X509v3 Authority Key Identifier:
keyid:4E:B1:60:AE:98:58:8B:60:D5:AE:42:91:EF:D8:D1:D4:E4:1D:EA:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/4EB160AE98588B60D5AE4291EFD8D1D4E41DEA0C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:78:39:33:e3:02:ad:37:32:ee:a2:f2:3e:4a:6b:66:71:de:
0a:03:55:59:28:a0:ff:b6:cf:16:06:09:80:d5:c5:9d:b7:20:
eb:59:21:aa:83:bf:a7:87:06:a5:e4:81:3e:d7:e8:83:f4:a5:
ed:27:21:49:6b:97:9d:1f:b8:f7:b6:54:d9:91:8b:fa:3d:5d:
df:99:c5:bc:9e:49:2c:e3:26:b1:84:cf:64:5f:c1:be:17:2d:
02:ac:4a:bd:ab:91:fa:5a:6e:9d:cd:6d:86:73:1a:41:ea:a3:
df:00:c3:f5:2b:fa:7e:c4:f0:74:95:07:4c:30:f0:5e:33:9e:
2c:13:9d:12:d5:ec:52:f3:f5:56:ba:cf:92:8e:5c:b9:43:bc:
16:2a:20:ec:bf:20:42:dd:2f:d5:22:1d:27:c6:94:e0:cc:32:
a7:7c:23:7a:1b:35:51:c4:72:94:be:e6:26:94:05:11:70:b6:
3c:39:bd:98:cd:8a:8e:b6:d7:e7:a0:87:83:73:69:59:06:32:
9f:be:b3:de:f4:e0:83:de:86:a8:bf:f3:43:8e:f1:59:61:91:
a0:ba:b9:57:2e:e9:82:e0:d4:9f:aa:5c:8e:c7:ff:90:92:54:
78:14:73:96:5c:d2:3e:11:d3:29:3f:11:40:e4:64:a4:ff:91:
d8:89:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:17:24 2026 by rpki-client