
$ rpki-client -vvf rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft
File: 4BEF373BC53710D136B40D9F928C485C94C670AC.mft (raw, json)
Hash identifier: Juz0BLlZJS4mDTwgZGbgVmvqMMWp/HFdXxciqbxFBk8=
Subject key identifier: 62:C4:E9:6C:5C:2C:E1:99:60:93:09:49:10:BF:3E:F2:EC:38:7E:1E
Authority key identifier: 4B:EF:37:3B:C5:37:10:D1:36:B4:0D:9F:92:8C:48:5C:94:C6:70:AC
Certificate issuer: /CN=4BEF373BC53710D136B40D9F928C485C94C670AC
Certificate serial: 7D24394C12897F97728441B85C2432D93DF57219
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 07:22:56 +0000
Manifest this update: Sat 13 Jun 2026 07:17:56 +0000
Manifest next update: Sun 14 Jun 2026 11:15:56 +0000
Files and hashes: 1: 4BEF373BC53710D136B40D9F928C485C94C670AC.crl (hash: Qq88ToAGFahcDthpuna4D8Ueij/ob9LuOwkFGV11LcE=)
2: 3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (hash: BeyFn4HdqSwVXnWm2K4O6j5GAQt7VRMXeOWfjpsb09s=)
3: 3130332e3138382e3136382e302f32342d3234203d3e20313439373235.roa (hash: u0AoFky6YChlG8p9ccsv4zHYDeuKyJl51gZR3MByaxM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.crl
rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:24:39:4c:12:89:7f:97:72:84:41:b8:5c:24:32:d9:3d:f5:72:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BEF373BC53710D136B40D9F928C485C94C670AC
Validity
Not Before: Jun 13 07:17:56 2026 GMT
Not After : Jun 14 11:15:56 2026 GMT
Subject: CN=62C4E96C5C2CE1996093094910BF3EF2EC387E1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:c0:1d:63:d1:f3:62:cd:0c:e3:d1:79:5b:
ff:9c:4f:5b:d0:f7:9a:84:5d:92:14:1f:81:7e:d1:
db:34:29:26:63:ad:04:f1:7b:cd:76:c6:4a:6a:38:
06:30:d4:7e:20:81:3d:ac:6b:62:ee:27:d7:5a:9e:
2f:dd:0c:3a:5e:0a:e1:2a:2b:d6:e9:97:da:39:c5:
40:d0:ed:e6:8d:b5:6d:47:ef:c4:46:43:49:23:06:
56:30:e2:02:f0:25:81:19:51:13:a4:16:bc:98:54:
0f:fc:fd:e2:2a:1e:f8:91:55:f5:bf:be:2f:e1:42:
fa:94:54:02:8c:76:da:03:d8:58:0e:77:34:3d:9d:
94:f6:03:a2:94:ad:e1:37:1b:28:ed:e4:31:b8:ca:
0c:2f:e7:24:f4:38:43:8c:b1:86:1d:1d:06:7d:21:
17:18:ce:99:fe:6d:84:67:de:75:4b:3d:b5:c1:d6:
19:48:33:29:6d:11:ed:aa:65:92:85:32:94:15:4c:
30:31:e3:e2:6a:8c:49:a2:3c:12:e0:9f:c3:d1:f8:
09:82:8b:9b:87:1e:97:6c:f5:7f:12:3c:75:7f:0a:
38:d4:ee:ff:ab:be:3f:93:3a:a6:5b:82:44:d5:05:
03:70:80:24:86:bf:07:03:91:42:0e:e6:93:b1:37:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C4:E9:6C:5C:2C:E1:99:60:93:09:49:10:BF:3E:F2:EC:38:7E:1E
X509v3 Authority Key Identifier:
keyid:4B:EF:37:3B:C5:37:10:D1:36:B4:0D:9F:92:8C:48:5C:94:C6:70:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BEF373BC53710D136B40D9F928C485C94C670AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/4BEF373BC53710D136B40D9F928C485C94C670AC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b0:29:9b:54:6a:a4:f8:a7:5b:05:b7:a4:7f:61:57:91:35:
b4:18:45:07:54:39:ff:99:26:43:27:fd:f6:8e:ec:82:70:25:
da:5c:a6:10:de:73:24:93:62:11:27:e5:72:1f:cf:a0:87:ad:
2a:6b:18:cb:d2:09:70:7b:90:aa:3d:b1:4a:d4:3b:db:ab:70:
5e:4a:fd:fc:d4:7d:c1:2e:f3:6d:0b:37:40:62:30:63:b0:6b:
9a:92:a2:a9:b3:ed:99:11:f6:30:27:23:88:79:0a:98:da:86:
e0:57:0e:58:a9:8e:03:84:83:d3:89:ff:24:01:19:01:01:8c:
e7:46:79:66:71:92:ce:75:5e:a3:a9:2e:f3:60:d0:a4:21:59:
06:58:b1:1c:df:c2:e9:77:18:a6:86:38:06:26:86:95:4d:44:
dc:5a:8d:56:44:a7:d6:ce:15:96:ac:5c:4a:eb:67:eb:b5:ce:
79:a0:82:8d:f5:e9:bd:21:98:fc:e1:9b:4b:4c:9a:38:f4:e7:
3b:99:54:e5:64:99:f9:e7:45:c7:41:bf:15:53:e2:dd:c1:b2:
e5:83:be:a5:47:e1:4c:bd:4c:5e:8f:39:12:2e:ec:8c:ab:2e:
ea:d1:bc:5f:3c:63:e2:98:9d:a3:59:24:79:b0:f3:80:6f:fc:
2a:e6:4e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:19:52 2026 by rpki-client