
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft
File: 4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft (raw, json)
Hash identifier: fyEj4bjKxHSLC6CkBpB4Did+SQlUGQ32IPG1cToZalI=
Subject key identifier: 00:C8:04:DC:9C:34:FF:04:5F:15:01:F0:7A:EF:C7:4E:95:F1:49:40
Authority key identifier: 4B:E6:C1:BB:F0:E9:F5:30:97:19:55:68:AD:EA:22:26:4F:B4:E1:B0
Certificate issuer: /CN=4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0
Certificate serial: 10EFDF2EB8BCEB570F797DB57608CCA025F7E6D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 17:42:41 +0000
Manifest this update: Tue 12 May 2026 17:37:41 +0000
Manifest next update: Wed 13 May 2026 19:49:41 +0000
Files and hashes: 1: 4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl (hash: k1TdmaECkVPKKKe+niCYYcyFfTv841JhfijnFNJYNmo=)
2: 3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (hash: fyKEzPeEJ4+E+32EaynXxqr/Ouql5hSrF2WTR5BFrF8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl
rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ef:df:2e:b8:bc:eb:57:0f:79:7d:b5:76:08:cc:a0:25:f7:e6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0
Validity
Not Before: May 12 17:37:41 2026 GMT
Not After : May 13 19:49:41 2026 GMT
Subject: CN=00C804DC9C34FF045F1501F07AEFC74E95F14940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:dd:83:1e:78:91:68:5d:d3:35:ba:7f:ea:
da:ba:67:18:89:83:e6:40:bb:e1:72:1a:e8:6d:88:
d6:02:b5:d5:cd:6f:40:20:4e:50:54:82:68:2a:6a:
fd:8b:38:fd:ff:41:92:19:9c:b0:4a:a8:53:0c:36:
61:86:0c:a2:1d:26:93:dd:c9:de:0c:c3:e4:a2:ac:
14:15:14:32:bf:8f:d4:90:cc:85:6a:25:c4:cc:14:
2f:6e:88:54:b8:f1:cc:05:25:bd:a9:80:be:79:34:
1c:c6:b8:73:b0:28:49:04:aa:11:a5:92:59:11:ec:
35:db:c3:62:0d:c2:8d:8f:1b:11:7a:be:1e:2a:5d:
60:a1:39:42:95:29:60:44:39:89:39:89:1c:7c:66:
e5:25:f6:ab:1b:47:4c:8a:31:85:10:19:dd:b2:41:
c5:90:04:e0:47:ce:2f:bc:35:d8:38:19:20:09:e4:
03:51:e6:f3:5f:55:19:ae:bc:30:ef:b5:3f:2b:04:
05:b3:af:8a:29:a9:52:7f:39:83:93:b6:d3:8b:97:
a9:09:45:68:ea:89:57:0c:ab:dd:f3:e3:e1:a6:c1:
b4:08:d8:08:b1:1b:ad:ca:bd:63:e9:31:1f:44:cb:
62:c0:6d:20:52:58:ae:49:98:15:40:e5:1f:3d:18:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C8:04:DC:9C:34:FF:04:5F:15:01:F0:7A:EF:C7:4E:95:F1:49:40
X509v3 Authority Key Identifier:
keyid:4B:E6:C1:BB:F0:E9:F5:30:97:19:55:68:AD:EA:22:26:4F:B4:E1:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:80:61:12:03:f9:a7:f8:cd:ae:c2:ae:7e:3c:a3:5c:a0:7d:
52:e2:9a:d7:a0:eb:06:d9:ca:8c:93:79:37:97:d5:d9:5a:c6:
a2:b7:73:84:38:f7:ed:16:9e:49:f2:d9:0d:49:a4:89:8e:fe:
90:fb:c0:4a:1b:60:71:f7:db:42:1c:b1:4c:5f:91:ad:f5:63:
7b:d3:2d:09:52:1e:f3:c1:bf:35:15:2f:b8:a1:48:70:e5:24:
6d:2c:62:89:96:fb:dd:cb:ac:1e:63:e5:40:62:5c:12:bd:d7:
9b:5c:9e:89:19:45:14:2a:79:bf:2b:c0:4f:b0:b8:9e:bc:81:
f1:86:63:e2:69:f1:62:14:a6:f5:ff:44:b5:56:e9:ec:4c:8c:
c0:7d:ae:bd:2b:25:07:fd:6a:d0:e6:65:b3:27:f8:c1:fc:23:
ac:68:c2:97:0b:0c:97:8f:18:3a:9b:c2:5c:c0:ff:4d:60:7c:
18:12:0f:ed:64:49:51:f0:e0:04:2e:a1:8f:3b:81:e7:53:c9:
db:dd:08:64:73:34:48:72:03:7f:5c:17:85:bf:34:d0:6b:4c:
c2:d2:4c:95:cf:88:fa:e4:1a:68:72:7e:53:db:df:ce:b6:23:
02:8c:4d:b2:f2:29:6a:f5:af:c0:2f:c2:47:5b:43:cd:c2:aa:
d5:ba:12:61
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEO/fLri861cPeX21dgjMoCX35tcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJFNkMxQkJGMEU5RjUzMDk3MTk1NTY4QURFQTIyMjY0
RkI0RTFCMDAeFw0yNjA1MTIxNzM3NDFaFw0yNjA1MTMxOTQ5NDFaMDMxMTAvBgNV
BAMTKDAwQzgwNERDOUMzNEZGMDQ1RjE1MDFGMDdBRUZDNzRFOTVGMTQ5NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWOd2DHniRaF3TNbp/6tq6ZxiJ
g+ZAu+FyGuhtiNYCtdXNb0AgTlBUgmgqav2LOP3/QZIZnLBKqFMMNmGGDKIdJpPd
yd4Mw+SirBQVFDK/j9SQzIVqJcTMFC9uiFS48cwFJb2pgL55NBzGuHOwKEkEqhGl
klkR7DXbw2INwo2PGxF6vh4qXWChOUKVKWBEOYk5iRx8ZuUl9qsbR0yKMYUQGd2y
QcWQBOBHzi+8Ndg4GSAJ5ANR5vNfVRmuvDDvtT8rBAWzr4opqVJ/OYOTttOLl6kJ
RWjqiVcMq93z4+GmwbQI2AixG63KvWPpMR9Ey2LAbSBSWK5JmBVA5R89GPGLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAMgE3Jw0/wRfFQHweu/HTpXxSUAwHwYDVR0j
BBgwFoAUS+bBu/Dp9TCXGVVoreoiJk+04bAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjQzOGMxOTUtNDk0YS00NmEyLWI5M2MtOGUxNTY2OGYwNWIyLzAvNEJFNkMxQkJG
MEU5RjUzMDk3MTk1NTY4QURFQTIyMjY0RkI0RTFCMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QkU2QzFCQkYwRTlGNTMwOTcxOTU1NjhBREVBMjIyNjRGQjRF
MUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQzOGMxOTUtNDk0YS00NmEyLWI5
M2MtOGUxNTY2OGYwNWIyLzAvNEJFNkMxQkJGMEU5RjUzMDk3MTk1NTY4QURFQTIy
MjY0RkI0RTFCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJaAYRID+af4za7Crn48o1ygfVLimteg6wbZ
yoyTeTeX1dlaxqK3c4Q49+0Wnkny2Q1JpImO/pD7wEobYHH320IcsUxfka31Y3vT
LQlSHvPBvzUVL7ihSHDlJG0sYomW+93LrB5j5UBiXBK915tcnokZRRQqeb8rwE+w
uJ68gfGGY+Jp8WIUpvX/RLVW6exMjMB9rr0rJQf9atDmZbMn+MH8I6xowpcLDJeP
GDqbwlzA/01gfBgSD+1kSVHw4AQuoY87gedTydvdCGRzNEhyA39cF4W/NNBrTMLS
TJXPiPrkGmhyflPb3862IwKMTbLyKWr1r8AvwkdbQ83CqtW6EmE=
-----END CERTIFICATE-----
Generated at Wed May 13 07:01:19 2026 by rpki-client