
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
File: 468662DE4789E1663881A25708CA5FBF0EC39637.mft (raw, json)
Hash identifier: snIDzc4W/3hUv0mssyafb9/4lkcHOnxPQS29/7d3H5U=
Subject key identifier: 18:22:FA:85:C9:97:87:97:4F:DF:C0:1D:30:49:D2:3E:D5:E0:B9:A0
Authority key identifier: 46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37
Certificate issuer: /CN=468662DE4789E1663881A25708CA5FBF0EC39637
Certificate serial: 6C38D242AD1D3B9D0724EC65ECC3A96933904E0F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 13:43:43 +0000
Manifest this update: Tue 12 May 2026 13:38:43 +0000
Manifest next update: Wed 13 May 2026 17:04:43 +0000
Files and hashes: 1: 468662DE4789E1663881A25708CA5FBF0EC39637.crl (hash: qGfW4mc3mNEW0iTnOCcNgNPmH0bA2xr+CTr/ZH5kdtI=)
2: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: TDJxU3359vrwAFB04SP7SYHre1Ki2hvpSBCNPL07USs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl
rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:38:d2:42:ad:1d:3b:9d:07:24:ec:65:ec:c3:a9:69:33:90:4e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468662DE4789E1663881A25708CA5FBF0EC39637
Validity
Not Before: May 12 13:38:43 2026 GMT
Not After : May 13 17:04:43 2026 GMT
Subject: CN=1822FA85C99787974FDFC01D3049D23ED5E0B9A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:94:9f:b1:e1:5f:88:cd:72:14:ec:3f:d1:
99:59:b9:f1:0f:44:11:15:8a:09:08:85:1f:ed:d6:
a9:1e:14:60:a1:7d:d2:ab:7f:0a:1b:8e:1f:24:78:
40:b7:ab:87:6a:5c:eb:95:66:6b:21:eb:80:7e:9a:
b7:1c:3d:14:72:88:7d:65:fe:92:d2:c8:06:44:54:
16:a6:7a:ab:d0:6c:4d:63:cf:53:74:00:cf:a4:6f:
53:de:87:ea:67:a3:d2:9e:22:5a:99:8a:30:20:84:
f9:8a:dc:0a:ea:21:a5:e9:28:5c:90:0e:4f:d0:30:
f3:73:b6:f5:8f:bf:0a:33:ca:e8:95:d1:48:90:ec:
23:1a:dd:a7:eb:da:4c:28:fd:8e:6f:f0:57:a4:c0:
b5:bf:56:51:49:61:b5:a8:62:53:6f:5d:01:bb:13:
95:89:76:80:24:ef:8a:3c:c6:ef:b8:46:03:6f:93:
55:dc:93:c5:3d:72:8b:ee:ba:38:02:bf:5c:ee:0d:
c3:51:6b:53:9f:b8:a9:32:e4:1c:88:a0:df:9e:f8:
6f:d5:8f:0d:84:46:cb:b6:8e:78:b9:53:78:b0:a7:
2e:ed:dd:bf:df:fc:8b:19:be:62:99:b2:dd:b3:f0:
be:7d:a4:9a:e3:5b:69:cc:3a:44:51:0b:f3:1a:20:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:22:FA:85:C9:97:87:97:4F:DF:C0:1D:30:49:D2:3E:D5:E0:B9:A0
X509v3 Authority Key Identifier:
keyid:46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fc:55:9f:54:49:0b:10:0a:ca:76:87:5f:24:f1:f6:0f:06:
4a:dc:e5:fe:56:b7:11:35:bd:4e:0e:5e:6f:d7:e8:e9:e2:6e:
4a:81:37:6d:f3:17:03:ae:69:3c:dd:86:fe:73:4a:81:9c:3b:
0f:c9:af:bb:36:9c:21:81:c7:fd:44:f4:24:29:6e:91:81:57:
3e:ee:43:28:0a:f1:94:11:7b:76:26:8d:b7:cd:99:18:0e:d6:
6d:3b:9b:b8:68:34:fe:e3:41:53:54:28:cb:2c:82:37:48:09:
df:c0:d5:8e:df:97:cd:3c:ee:33:d0:ce:6d:51:da:4a:a4:a9:
46:c0:04:d3:cc:c0:22:62:06:bb:0a:93:84:13:26:6b:89:db:
58:bd:19:94:b6:3d:26:8d:41:a6:cc:52:67:ab:07:c2:5d:c2:
8a:e3:4c:f6:25:f0:4f:d6:c3:60:f3:cb:73:00:b0:98:17:62:
a0:8d:77:7b:77:e4:fb:a5:77:c3:34:eb:0c:af:53:eb:bd:4e:
06:9e:b5:ac:75:e2:e6:e7:04:3f:77:96:41:d2:7f:19:a4:64:
44:2d:83:e8:7c:6a:27:bd:18:c4:26:79:25:38:f5:1f:cb:22:
bd:dc:c9:5b:62:90:a6:96:6b:ae:97:1e:63:32:6b:27:0c:cb:
88:b5:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:19 2026 by rpki-client