
$ rpki-client -vvf rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
File: 4A690EC844644FC7C72921E7FA9D8B8827A68133.mft (raw, json)
Hash identifier: QcyQ7zvGFBVfgFp1xZpUbXCrna+5s9ftJz56ljih750=
Subject key identifier: 43:77:74:B7:2E:CB:7A:2A:DD:CF:44:28:F1:AD:C8:D9:FD:6D:FA:25
Authority key identifier: 4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33
Certificate issuer: /CN=4A690EC844644FC7C72921E7FA9D8B8827A68133
Certificate serial: 4317B12FEBA63591F31200783931D847169CFBF2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 17:10:22 +0000
Manifest this update: Sat 13 Jun 2026 17:05:22 +0000
Manifest next update: Sun 14 Jun 2026 18:00:22 +0000
Files and hashes: 1: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: UugzJo0XG4CnPFobTcgFSX6/vfuVvh/vQ7HS0KjLKPQ=)
2: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: pESLqdHWwG9pCnMMcNgeB95CfcGiK8SY4ni1NsaDZJU=)
3: 4A690EC844644FC7C72921E7FA9D8B8827A68133.crl (hash: znBDvJCcZJ7lkSyd0WJg3IaQPTI9lrb+ZjpLL/OdyZY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl
rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:17:b1:2f:eb:a6:35:91:f3:12:00:78:39:31:d8:47:16:9c:fb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A690EC844644FC7C72921E7FA9D8B8827A68133
Validity
Not Before: Jun 13 17:05:22 2026 GMT
Not After : Jun 14 18:00:22 2026 GMT
Subject: CN=437774B72ECB7A2ADDCF4428F1ADC8D9FD6DFA25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:75:94:53:7d:1c:05:d6:91:95:5a:65:5b:
4e:83:a6:59:64:8d:31:51:7f:6d:48:35:c1:ae:f2:
c0:6c:e5:ee:7b:6d:a3:2a:88:d1:bf:24:ad:8e:1b:
de:0c:71:ac:8f:16:1f:02:f3:03:eb:ec:78:31:bd:
63:33:d2:31:24:a1:db:47:79:04:ab:39:4c:94:54:
42:77:fb:aa:da:00:26:41:43:08:54:fb:15:aa:0c:
51:2d:7d:cb:71:9c:e9:bf:13:7e:de:ab:a8:26:7a:
5b:34:b7:de:aa:02:2c:16:fd:f3:34:77:34:54:bc:
a7:11:d2:6a:07:c5:20:7c:25:27:7d:74:cd:1c:1d:
c1:44:0b:ed:2c:e8:bc:84:4e:3c:23:cf:58:74:d1:
2a:01:27:7b:73:c8:5a:47:3e:27:0c:f4:c7:ce:1c:
74:47:f8:bb:e1:29:43:96:75:a2:2c:71:60:ce:0d:
db:ff:96:07:51:23:7e:3c:a7:ae:4a:37:ca:7a:6c:
ae:df:21:51:40:45:2e:ba:3a:58:e4:e9:c5:06:bc:
10:b8:25:22:0c:7a:e5:df:ad:2c:ae:38:df:b2:d7:
44:d4:a1:09:50:bc:64:79:94:e2:a0:76:03:95:6f:
91:d9:73:26:b9:4d:db:1a:e9:65:04:54:33:71:d6:
e8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:77:74:B7:2E:CB:7A:2A:DD:CF:44:28:F1:AD:C8:D9:FD:6D:FA:25
X509v3 Authority Key Identifier:
keyid:4A:69:0E:C8:44:64:4F:C7:C7:29:21:E7:FA:9D:8B:88:27:A6:81:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A690EC844644FC7C72921E7FA9D8B8827A68133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/4A690EC844644FC7C72921E7FA9D8B8827A68133.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5d:83:69:ca:37:e0:6b:8e:ea:f8:9d:1d:95:10:b5:a0:b3:
76:a3:0e:08:63:59:b6:84:72:95:22:ab:31:09:1e:bb:2e:61:
66:80:d3:8c:be:e4:05:fe:4d:b9:86:53:4c:17:b4:02:c0:ab:
a4:72:21:7a:52:72:b0:91:42:64:a1:93:37:3a:3b:67:91:ab:
75:6a:67:ce:d7:2d:15:93:23:d0:80:a4:cb:f3:8f:70:62:f8:
1c:fd:4d:ef:e3:f6:0b:36:b3:5c:c2:60:fd:0c:7a:79:6e:cb:
be:9e:d0:98:a4:a4:95:7b:09:ca:4e:94:48:ee:2b:2b:eb:78:
89:55:b4:29:f3:ef:df:3d:7a:36:23:6a:69:84:64:0c:f9:7d:
6b:33:31:63:82:ad:2e:64:56:f8:1d:60:3f:12:11:8e:5e:72:
db:58:19:22:6d:5f:91:91:08:cc:a2:be:d5:bb:bb:75:7b:cd:
35:6e:0d:20:fa:2e:70:a0:dd:58:63:9b:4c:9f:e4:f2:c9:8f:
75:70:61:6e:af:4b:0a:d5:f6:b9:98:ca:f0:cd:8e:63:5c:8f:
60:c6:86:f9:20:55:1c:be:59:83:a1:f1:3f:35:49:17:61:5f:
ab:68:9e:b7:4e:8b:a6:b5:1f:b0:99:11:58:05:dc:6a:27:79:
22:5e:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:00:50 2026 by rpki-client