
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
File: 0446D571B5FD57D22786B0872C74829904EAAB9F.mft (raw, json)
Hash identifier: lPHKanLf1b1BCW3eevhYUc310einLUAHdO5CmzipZZQ=
Subject key identifier: 8C:AC:06:CE:22:2E:E2:A0:56:84:82:6C:2D:5C:B4:81:7E:A7:7F:32
Authority key identifier: 04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F
Certificate issuer: /CN=0446D571B5FD57D22786B0872C74829904EAAB9F
Certificate serial: 179247ADC331C04517D742F70754AD59A9404D00
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 04:12:51 +0000
Manifest this update: Wed 17 Jun 2026 04:07:51 +0000
Manifest next update: Thu 18 Jun 2026 05:11:51 +0000
Files and hashes: 1: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: +WRWxjAdOAaW9ozUiBysIyJuRRO3IGup2Zv05rrzhoE=)
2: 0446D571B5FD57D22786B0872C74829904EAAB9F.crl (hash: 7pOcGc95HKOe8kXjj2UVjSKwo+QbhgmxuYW7xiV1B0Q=)
3: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: HRGJ5g7ob2C6LusF30ZyigavwWaGRf5eI1zjWJC6sRM=)
4: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: ecVKsNk2S0Aj+ACqfjrNpX8pv8RXijVnKVy2HYKiIA0=)
5: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: kaGHUTZEr4BI633+KX6qHXh8OmneAQRf7YHLIlmtSgU=)
6: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: K+7+KqgCp4d18TVZTPxmAsUlKSyTdPx9xS3oBJGcNok=)
7: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: RykC0CgepUzoO/XGaABN4CTb5JdoVGJrzeKzsVUCn3M=)
8: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: aC4RLZpJ1CIL1Btz47Fr7aIh879KOm3isCxWG9+kLpI=)
9: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: JHRytoLKe3DoWLn6hLaaCfBPYIXsYxniAiTb3PYHUfQ=)
10: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: thRIrZ3+blRuGrSxkOAlYh2ltCPP95UB2kgDE2dzqA4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl
rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:92:47:ad:c3:31:c0:45:17:d7:42:f7:07:54:ad:59:a9:40:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0446D571B5FD57D22786B0872C74829904EAAB9F
Validity
Not Before: Jun 17 04:07:51 2026 GMT
Not After : Jun 18 05:11:51 2026 GMT
Subject: CN=8CAC06CE222EE2A05684826C2D5CB4817EA77F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:01:b5:b0:3c:72:7f:01:8f:1d:6b:61:cd:
9f:d5:d5:ce:bf:bf:5f:a1:6f:46:19:c9:84:ba:b2:
da:14:ae:de:2d:8b:4e:21:c7:3a:ab:e3:01:a4:40:
b4:b7:52:24:84:c7:3f:6a:e6:8e:84:ad:86:d1:a8:
db:7e:f9:49:99:4e:da:f6:21:cf:75:75:91:23:0f:
a0:40:ed:4f:48:2d:c1:b1:1e:65:83:b3:95:2b:63:
69:87:24:ad:37:40:94:89:2e:2c:4a:8f:6a:92:0b:
a2:13:9d:13:e9:78:1a:c5:de:b1:0e:33:eb:51:a4:
92:e9:72:7d:a3:e2:c5:00:27:1c:d1:5d:c6:2b:63:
31:fa:f2:0b:c7:bb:78:9d:ae:1f:5a:0f:1f:34:e3:
e6:b2:cf:be:02:3f:89:9a:3e:5e:11:7a:50:4c:6b:
7d:40:bc:90:21:f0:1b:d7:2a:66:b8:0e:a8:9f:8c:
fa:64:ba:08:b5:0c:57:16:e2:94:27:7d:1f:5b:c0:
39:c5:10:24:10:dc:a5:a3:97:e0:72:bc:3f:c3:68:
04:bd:ec:6e:52:9d:c1:1c:0b:81:1a:4a:1b:e4:08:
c3:c9:85:fe:68:27:59:16:09:ba:fc:ac:ab:b5:c0:
69:4e:a7:3c:b3:b3:63:44:4f:9c:de:ed:a8:92:96:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AC:06:CE:22:2E:E2:A0:56:84:82:6C:2D:5C:B4:81:7E:A7:7F:32
X509v3 Authority Key Identifier:
keyid:04:46:D5:71:B5:FD:57:D2:27:86:B0:87:2C:74:82:99:04:EA:AB:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0446D571B5FD57D22786B0872C74829904EAAB9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/0446D571B5FD57D22786B0872C74829904EAAB9F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:00:40:dd:43:0b:21:86:7d:18:de:fc:39:50:18:d6:b9:4e:
da:30:5b:e1:46:4b:f9:02:91:ef:ca:ea:fa:7e:aa:7f:82:f5:
4e:32:86:0b:82:34:53:82:94:b5:5b:98:ab:97:de:4f:82:94:
0b:64:a9:79:87:d5:8f:03:b5:81:0d:80:a7:9a:f6:b1:c4:06:
b4:fe:94:26:e6:5b:8b:cd:7e:aa:2b:a9:25:71:21:90:0b:b0:
41:bb:ff:19:b1:e2:ef:54:65:ec:7f:b8:95:e7:4d:66:84:c8:
d0:c9:d0:06:e1:e4:e3:d5:50:f0:d0:bd:02:91:f7:bd:ed:74:
68:2d:1d:ce:eb:e8:d5:27:65:53:de:61:9f:b2:74:d8:13:12:
77:01:64:55:c1:a1:7a:6a:c3:3a:66:b9:2b:94:e1:cb:0e:1d:
ce:f1:05:3d:e0:b7:29:44:c6:98:6d:bb:ed:56:8d:d0:0f:2a:
d8:51:3b:c1:ce:9d:7e:2f:4c:9b:2d:21:cf:ce:fe:b5:f3:fd:
a1:e0:ca:13:10:26:f9:84:04:12:6c:f9:63:73:1d:df:f8:10:
c7:d5:66:8b:42:fb:1a:08:51:d1:61:4a:b5:6e:ff:ae:29:28:
a1:fe:b3:84:62:9b:5c:11:d5:dc:a3:f0:32:cd:8a:05:49:18:
87:0c:85:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:50:40 2026 by rpki-client