
$ rpki-client -vvf rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft
File: 4263490508EE6D5873ACA7B620F66196D4A2AE63.mft (raw, json)
Hash identifier: S/l2aw2CdBNZg/9J39JaZZUCoulxmVrDTqua8JZ6Icw=
Subject key identifier: 14:2E:E3:28:42:23:2F:C9:D7:D2:AE:D1:2D:21:CD:C4:CB:BA:D1:CB
Authority key identifier: 42:63:49:05:08:EE:6D:58:73:AC:A7:B6:20:F6:61:96:D4:A2:AE:63
Certificate issuer: /CN=4263490508EE6D5873ACA7B620F66196D4A2AE63
Certificate serial: 151AC475697A362D992D2FD50F818E954E82C4FB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 08:29:57 +0000
Manifest this update: Tue 12 May 2026 08:24:57 +0000
Manifest next update: Wed 13 May 2026 10:12:57 +0000
Files and hashes: 1: 323030313a6466363a613434303a3a2f34382d3438203d3e20313432363339.roa (hash: iHApH4ig54MvTMEQeKGAbjPzbWKAy8vcZBqwYCxZPjg=)
2: 4263490508EE6D5873ACA7B620F66196D4A2AE63.crl (hash: j3TzMGqwiUdeKYLDqqPHUGijzwfMWFCcGleWh9lgu10=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.crl
rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:1a:c4:75:69:7a:36:2d:99:2d:2f:d5:0f:81:8e:95:4e:82:c4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4263490508EE6D5873ACA7B620F66196D4A2AE63
Validity
Not Before: May 12 08:24:57 2026 GMT
Not After : May 13 10:12:57 2026 GMT
Subject: CN=142EE32842232FC9D7D2AED12D21CDC4CBBAD1CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:e7:d0:a1:e3:bc:10:e6:54:d1:a2:70:81:
74:86:45:42:c1:72:07:d2:6a:0c:c0:11:d9:25:d0:
7c:8a:98:3e:6c:e1:36:c5:5c:93:e1:fc:be:29:c6:
12:8a:1e:e9:9f:a9:74:10:cf:35:eb:de:bd:ad:07:
24:f6:ca:3a:e9:fe:d7:e4:6f:6e:cf:1a:f6:85:f9:
88:15:30:09:43:53:b1:d7:0d:b8:e5:34:06:70:8e:
3a:b6:d7:e0:5e:20:cc:b2:46:36:27:6a:03:b2:6c:
15:e7:e5:55:6d:f9:fe:28:fd:36:93:36:07:e3:e9:
dd:65:95:22:87:c0:86:fc:fd:9f:b2:fd:ab:14:ef:
b5:37:32:ea:4b:68:c2:d7:95:b8:4b:3f:91:10:d4:
05:4e:54:a2:31:11:d3:a9:5e:71:eb:0a:2b:ce:54:
30:2e:7b:89:ec:3a:80:ca:fc:c3:af:f5:c5:2c:48:
b7:82:47:e1:d7:fa:66:57:55:9e:ac:04:83:e9:d4:
30:6a:72:c0:99:b9:ea:39:51:b7:90:c5:5a:f0:96:
b4:74:1f:bf:49:b9:e2:fa:15:0c:bd:cf:3a:79:e2:
e1:f0:d0:32:ac:48:17:25:38:34:04:d4:03:b8:f1:
34:05:b3:14:d4:65:55:4c:11:f1:94:58:cc:f3:ca:
2c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2E:E3:28:42:23:2F:C9:D7:D2:AE:D1:2D:21:CD:C4:CB:BA:D1:CB
X509v3 Authority Key Identifier:
keyid:42:63:49:05:08:EE:6D:58:73:AC:A7:B6:20:F6:61:96:D4:A2:AE:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/4263490508EE6D5873ACA7B620F66196D4A2AE63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f2:7f:17:2b:68:ef:77:46:7b:45:18:f9:a7:31:c0:96:33:
ac:8e:6a:73:5b:e5:59:19:c3:a4:06:a4:5e:e0:2f:a8:e9:c7:
18:b0:55:6a:b9:45:a7:a2:44:71:b8:de:db:e0:9a:0c:82:ac:
f9:fe:74:f6:23:8a:33:b3:e1:80:ef:a0:61:06:27:70:70:d3:
65:92:16:67:09:5f:38:d1:1d:6a:8b:dd:e4:79:9b:8c:64:5a:
b2:77:0f:36:a7:76:af:28:fd:44:63:4e:63:26:50:ad:c0:43:
df:16:79:69:25:66:6d:f9:0c:85:b1:c0:ca:4c:3a:48:7f:d6:
d4:a1:0b:f6:b6:c2:43:14:15:63:dd:77:73:c3:3f:16:96:f1:
96:f7:19:1c:e0:27:55:18:c2:60:c0:6e:f7:ed:3b:9b:aa:12:
9b:41:8e:69:3f:6e:93:1e:a4:cf:3a:f0:71:0b:f6:b8:04:57:
24:8c:02:c3:5f:ca:7c:74:23:01:32:53:76:4c:b6:79:5d:42:
b2:6a:bc:ef:17:17:8c:9d:04:22:2e:40:c5:08:31:01:9d:66:
36:44:d9:37:5e:a8:bd:e3:18:c7:2a:77:51:aa:1f:20:9b:a3:
90:87:c6:89:e1:1d:47:57:47:1a:38:9f:63:92:77:3c:41:dd:
83:be:f2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:37:25 2026 by rpki-client