
$ rpki-client -vvf rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft
File: B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft (raw, json)
Hash identifier: D75h+a2GDe4wx5Xa6Alfl5orAuPOMANYzsNj53X9V+w=
Subject key identifier: 07:D4:90:2E:19:29:35:2B:BF:E9:9E:EC:B7:71:5A:66:A3:20:D8:D7
Authority key identifier: B4:11:1F:C0:D1:83:6A:54:CF:F3:50:9A:FF:A8:39:33:C2:45:1C:AF
Certificate issuer: /CN=B4111FC0D1836A54CFF3509AFFA83933C2451CAF
Certificate serial: 739C20763D40C2CC37730857F13640F1208E81AF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 01:09:19 +0000
Manifest this update: Wed 17 Jun 2026 01:04:19 +0000
Manifest next update: Thu 18 Jun 2026 03:19:19 +0000
Files and hashes: 1: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: 7ewRXVv5rl+QG1YNIYilvzKzYUQ3mx2Wk/pMwVKtEKI=)
2: B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl (hash: kd4md0SeUlPYtW6GlhYG69sW74Kl1UNEydK9TCfcoOI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl
rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:9c:20:76:3d:40:c2:cc:37:73:08:57:f1:36:40:f1:20:8e:81:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4111FC0D1836A54CFF3509AFFA83933C2451CAF
Validity
Not Before: Jun 17 01:04:19 2026 GMT
Not After : Jun 18 03:19:19 2026 GMT
Subject: CN=07D4902E1929352BBFE99EECB7715A66A320D8D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b9:38:41:46:a5:3b:5e:5f:7a:57:c1:61:1c:
6b:91:f3:77:68:a2:5b:df:2e:90:21:64:a9:c6:bd:
66:22:b2:e9:df:b0:93:c5:9b:95:ba:19:bc:54:26:
84:74:cc:fc:10:a6:b0:25:c9:8f:b0:bc:f8:d8:cc:
ed:f4:be:92:28:74:c6:db:1f:6b:ab:2b:f6:34:d2:
a5:06:aa:a6:41:df:a7:93:8b:1f:fd:05:2d:56:b5:
4b:ae:08:6a:12:f6:79:97:41:27:b9:56:91:b1:60:
dc:a5:da:d5:a9:1c:d8:7b:32:34:de:4e:47:88:96:
71:f6:a6:c9:0d:99:53:10:35:2d:b1:7e:e4:18:1a:
1b:c6:99:ed:db:54:38:f1:38:73:a0:9d:75:0a:ea:
dd:fc:69:69:f8:a4:60:df:51:6c:60:07:c2:88:b1:
e0:e8:86:03:08:9f:45:84:3d:b5:7d:b4:db:e0:c7:
fa:44:54:ab:e0:68:b5:9b:4f:23:56:80:39:07:7e:
00:05:dd:30:57:ec:d2:a3:28:d7:f7:6c:5d:f5:70:
d0:f0:22:1d:9b:e1:a9:04:4f:db:1a:1b:1d:fd:9c:
de:3b:87:da:21:3b:10:d7:17:57:78:8b:b9:2c:0c:
24:e6:a0:64:f6:84:40:cc:36:76:bb:e9:1a:0c:35:
be:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D4:90:2E:19:29:35:2B:BF:E9:9E:EC:B7:71:5A:66:A3:20:D8:D7
X509v3 Authority Key Identifier:
keyid:B4:11:1F:C0:D1:83:6A:54:CF:F3:50:9A:FF:A8:39:33:C2:45:1C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/B4111FC0D1836A54CFF3509AFFA83933C2451CAF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ca:2e:cf:6b:50:96:71:29:bd:ff:d9:e4:8b:b2:92:50:ab:
92:cf:34:2f:26:2c:96:a7:51:8f:1d:45:a8:bb:95:b1:f5:1e:
35:32:ff:37:9e:7e:20:b2:47:0f:96:ee:ac:c9:85:cc:ac:1d:
df:10:c3:a7:88:fa:21:f5:21:a7:a7:ea:3c:9d:f6:3c:5f:7e:
38:b9:7b:41:e7:39:e3:67:70:46:78:73:22:98:54:2c:47:70:
6b:f7:7e:26:13:19:27:25:7c:c1:1f:ee:e0:f5:a9:81:9b:37:
0c:30:3f:58:4d:27:fd:99:e7:31:a5:ab:90:62:48:ea:67:4d:
c8:d3:ef:db:00:5e:20:ec:4c:fc:1d:5b:da:17:da:19:5a:67:
19:ed:41:ef:e8:dc:a2:8d:5c:3e:b5:db:40:9e:3c:60:57:d4:
b7:d4:6d:01:0f:9b:df:a1:8a:17:e6:22:6e:92:0c:b5:31:14:
cc:e7:51:dc:2f:63:18:d1:3b:30:44:c6:5e:ba:3d:5c:a5:f2:
8d:e0:66:0e:ae:e1:03:47:64:2e:25:ab:81:8c:0c:05:49:99:
eb:7a:d5:7a:9e:07:50:bc:1d:98:9b:72:0c:12:a0:41:6c:d0:
1c:f9:27:4c:0d:5e:11:23:1a:97:7e:e3:6f:9f:82:b3:5d:a6:
d6:fc:df:8b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc5wgdj1Awsw3cwhX8TZA8SCOga8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQxMTFGQzBEMTgzNkE1NENGRjM1MDlBRkZBODM5MzND
MjQ1MUNBRjAeFw0yNjA2MTcwMTA0MTlaFw0yNjA2MTgwMzE5MTlaMDMxMTAvBgNV
BAMTKDA3RDQ5MDJFMTkyOTM1MkJCRkU5OUVFQ0I3NzE1QTY2QTMyMEQ4RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDauThBRqU7Xl96V8FhHGuR83do
olvfLpAhZKnGvWYisunfsJPFm5W6GbxUJoR0zPwQprAlyY+wvPjYzO30vpIodMbb
H2urK/Y00qUGqqZB36eTix/9BS1WtUuuCGoS9nmXQSe5VpGxYNyl2tWpHNh7MjTe
TkeIlnH2pskNmVMQNS2xfuQYGhvGme3bVDjxOHOgnXUK6t38aWn4pGDfUWxgB8KI
seDohgMIn0WEPbV9tNvgx/pEVKvgaLWbTyNWgDkHfgAF3TBX7NKjKNf3bF31cNDw
Ih2b4akET9saGx39nN47h9ohOxDXF1d4i7ksDCTmoGT2hEDMNna76RoMNb4tAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUB9SQLhkpNSu/6Z7st3FaZqMg2NcwHwYDVR0j
BBgwFoAUtBEfwNGDalTP81Ca/6g5M8JFHK8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTQ3NThlOGUtNDljOC00OGI4LWJkY2ItMzUzMzllMmFlNjAxLzAvQjQxMTFGQzBE
MTgzNkE1NENGRjM1MDlBRkZBODM5MzNDMjQ1MUNBRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNDExMUZDMEQxODM2QTU0Q0ZGMzUwOUFGRkE4MzkzM0MyNDUx
Q0FGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk
Y2ItMzUzMzllMmFlNjAxLzAvQjQxMTFGQzBEMTgzNkE1NENGRjM1MDlBRkZBODM5
MzNDMjQ1MUNBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHnKLs9rUJZxKb3/2eSLspJQq5LPNC8mLJan
UY8dRai7lbH1HjUy/zeefiCyRw+W7qzJhcysHd8Qw6eI+iH1Iaen6jyd9jxffji5
e0HnOeNncEZ4cyKYVCxHcGv3fiYTGSclfMEf7uD1qYGbNwwwP1hNJ/2Z5zGlq5Bi
SOpnTcjT79sAXiDsTPwdW9oX2hlaZxntQe/o3KKNXD6120CePGBX1LfUbQEPm9+h
ihfmIm6SDLUxFMznUdwvYxjROzBExl66PVyl8o3gZg6u4QNHZC4lq4GMDAVJmet6
1XqeB1C8HZibcgwSoEFs0Bz5J0wNXhEjGpd+42+fgrNdptb834s=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:11 2026 by rpki-client