
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.mft
File: 04464393DEE86F9C4534E90FA657647430EE82F1.mft (raw, json)
Hash identifier: bKbNKJMwc2KnPDMR7HnxRvMFab89oWnT4GZOsKmn1Yk=
Subject key identifier: AC:19:09:BA:E6:FE:09:02:B8:65:E7:63:CB:51:A0:7E:DF:FB:B3:2B
Authority key identifier: 04:46:43:93:DE:E8:6F:9C:45:34:E9:0F:A6:57:64:74:30:EE:82:F1
Certificate issuer: /CN=04464393DEE86F9C4534E90FA657647430EE82F1
Certificate serial: 214E603F4444B1D981A2AF6BE2031AB7DD65E94D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04464393DEE86F9C4534E90FA657647430EE82F1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 06:01:45 +0000
Manifest this update: Tue 12 May 2026 05:56:45 +0000
Manifest next update: Wed 13 May 2026 09:54:45 +0000
Files and hashes: 1: 04464393DEE86F9C4534E90FA657647430EE82F1.crl (hash: n9M6u79B7LNqQCZVVnYIdNoujTLNba8mKd9/1gir5PE=)
2: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: yMvq469T5W+wgJnUE4TkrUjU3nQrgKOaqCtAI0sxxfU=)
3: 3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (hash: 5N/+NKK+QKHMpVx1kO3hDw5i9CbZNo+IX8Ypb8V9rXI=)
4: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: OOk+m+baT6rSEoQr7jsbvANi5LghM8WtezCSjbbc3mM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.crl
rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04464393DEE86F9C4534E90FA657647430EE82F1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:4e:60:3f:44:44:b1:d9:81:a2:af:6b:e2:03:1a:b7:dd:65:e9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04464393DEE86F9C4534E90FA657647430EE82F1
Validity
Not Before: May 12 05:56:45 2026 GMT
Not After : May 13 09:54:45 2026 GMT
Subject: CN=AC1909BAE6FE0902B865E763CB51A07EDFFBB32B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e8:bc:f3:d8:76:eb:54:3f:f5:ec:b4:2c:2c:
81:6d:09:2f:f5:d3:8d:47:92:ff:7d:ed:55:78:05:
1c:a4:1e:f9:a1:b7:3f:c2:72:eb:39:18:f8:89:54:
3a:75:3a:a0:c4:a9:9f:c6:21:5a:af:86:c6:3d:fd:
3f:6e:fb:e6:32:d1:e0:8a:a2:46:3d:3b:82:97:71:
71:76:78:ee:dc:f5:91:e1:0e:54:35:3d:8c:a8:42:
c9:d3:b6:96:52:67:e4:a7:b1:10:04:f0:ea:cb:6a:
15:5d:a4:e7:a2:84:6d:41:21:24:ab:b8:ba:65:8a:
65:ec:53:32:66:7e:f4:21:b7:53:5d:55:08:b6:15:
08:e7:fd:8a:f5:6d:ea:ad:32:46:23:52:fe:dc:2c:
7c:16:f5:db:77:7a:0d:c9:da:52:27:d7:86:36:6f:
37:2c:8f:7f:52:9a:07:c7:24:0c:8d:b6:c3:63:f8:
18:ee:4b:12:82:b9:4c:3b:2e:22:6f:ac:8f:ad:f3:
95:71:72:25:24:d0:ad:5f:b0:88:16:ed:4e:6c:1c:
e7:40:0c:ce:86:76:7b:c5:7a:c5:10:95:3e:3f:c8:
15:ec:72:54:d2:de:8c:fd:52:c7:bb:1e:75:f2:00:
be:cd:31:99:7e:44:9f:73:1a:d6:35:d3:86:eb:04:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:19:09:BA:E6:FE:09:02:B8:65:E7:63:CB:51:A0:7E:DF:FB:B3:2B
X509v3 Authority Key Identifier:
keyid:04:46:43:93:DE:E8:6F:9C:45:34:E9:0F:A6:57:64:74:30:EE:82:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04464393DEE86F9C4534E90FA657647430EE82F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/04464393DEE86F9C4534E90FA657647430EE82F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4c:54:81:db:49:9d:fe:e7:ab:9e:8b:34:9b:cb:a6:06:03:
b3:3c:21:74:9e:42:34:6e:48:71:0f:b6:fd:4e:8f:04:6f:af:
12:6f:05:a8:76:e0:b4:4c:0b:a1:40:ba:0c:08:2e:ab:6f:29:
65:59:7c:7d:46:1e:8f:58:c7:dd:49:a9:05:8d:95:4a:88:82:
38:31:3a:67:43:72:25:6c:ed:01:ee:90:52:d9:ee:c7:cd:3e:
0c:3b:c6:0b:61:16:c0:c1:22:89:f9:39:a7:3a:93:2c:d4:be:
67:5e:1c:c4:d5:22:44:c0:09:6e:66:0a:ab:ee:b4:05:0c:7e:
dc:6e:5c:42:31:be:82:97:0f:f3:9a:e8:85:dc:b6:01:29:e8:
a3:32:bb:54:79:ea:d9:d1:14:bf:0e:12:e9:dc:7f:c8:56:d7:
fb:e8:6e:c0:56:17:27:9d:f9:a5:f4:6c:12:0a:c2:6a:cf:a2:
c5:fc:0f:f6:b1:8b:3d:31:ee:52:d7:71:47:cf:9e:28:02:2a:
75:c5:f9:96:e4:d6:91:6f:06:74:bc:1f:aa:64:00:83:84:a2:
0f:fe:e8:ab:bc:ae:cd:76:7e:12:5a:11:4d:93:0d:ca:f7:fc:
e8:1b:02:b1:95:4a:a0:ac:f5:2f:7e:80:cd:cb:79:0b:71:95:
7c:bc:50:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:59:39 2026 by rpki-client