
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft
File: 4887E721DA907B8223025FFDE0F11420EEFD8351.mft (raw, json)
Hash identifier: c/kGyYFQ99A7QHa3g+GshrPZMoY6sO4ua87uudQuLxY=
Subject key identifier: CE:B6:17:8B:1A:44:FA:73:D9:23:C9:BF:A1:6D:23:4F:42:1F:E6:EA
Authority key identifier: 48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51
Certificate issuer: /CN=4887E721DA907B8223025FFDE0F11420EEFD8351
Certificate serial: 3119344F2F9BFC663F41E10D4F2037A483EE0AB7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 15:33:06 +0000
Manifest this update: Tue 16 Jun 2026 15:28:06 +0000
Manifest next update: Wed 17 Jun 2026 18:20:06 +0000
Files and hashes: 1: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (hash: 4n1fjzMSG2wHW3ycKcIEduoFrdhB7CHV6B09r5tY0kg=)
2: 4887E721DA907B8223025FFDE0F11420EEFD8351.crl (hash: V6YKmabh2qIqFrBUAO+CMGYWBJ/Uy+lbAKVixHt6x+U=)
3: 3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (hash: S7aZljmglE5xN0p6gxyZ/h445nngm6FqwRnmfuS0RS0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl
rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:19:34:4f:2f:9b:fc:66:3f:41:e1:0d:4f:20:37:a4:83:ee:0a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4887E721DA907B8223025FFDE0F11420EEFD8351
Validity
Not Before: Jun 16 15:28:06 2026 GMT
Not After : Jun 17 18:20:06 2026 GMT
Subject: CN=CEB6178B1A44FA73D923C9BFA16D234F421FE6EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:6c:c3:fc:86:f3:ff:b6:5e:b8:05:17:2f:
b5:6e:bd:f3:3a:02:b2:b1:41:3d:0f:0e:86:99:a5:
87:0a:a4:29:2b:8c:25:a3:db:16:1a:09:81:90:ba:
1c:87:45:f5:5c:f5:2a:81:fc:2b:ad:97:ce:be:be:
4c:bb:da:0b:27:d7:67:67:82:01:0d:50:5f:ee:70:
ff:ef:3f:2a:bd:b5:e4:b3:87:8e:95:d1:f0:b4:63:
53:00:d8:8a:37:7c:05:50:e4:3c:25:33:0e:6d:00:
92:84:50:bb:ff:0f:82:f1:76:90:4e:40:49:d9:6b:
c8:a8:69:20:3c:ca:cc:5f:f8:63:3b:7a:f8:cb:a9:
3e:d6:a0:52:9f:d9:4b:78:96:02:7e:cb:38:4b:82:
fb:e4:1e:b1:15:22:66:8f:d2:ba:8d:40:15:cc:77:
c0:14:9f:2d:0e:15:2b:2d:c0:3f:4e:70:e5:a3:14:
f6:4d:01:bb:c4:7a:c0:5d:ba:cb:b5:b5:22:c4:f6:
3e:98:b5:76:62:11:59:66:c2:95:26:0d:95:80:8c:
39:78:b6:49:65:0e:c6:fb:36:93:cb:88:39:5f:5c:
03:7d:9e:7f:bf:a2:f7:6b:ff:76:72:6a:55:5f:e2:
9b:0f:3d:93:25:bb:1b:5a:da:da:7e:81:2b:5f:1d:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B6:17:8B:1A:44:FA:73:D9:23:C9:BF:A1:6D:23:4F:42:1F:E6:EA
X509v3 Authority Key Identifier:
keyid:48:87:E7:21:DA:90:7B:82:23:02:5F:FD:E0:F1:14:20:EE:FD:83:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4887E721DA907B8223025FFDE0F11420EEFD8351.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/4887E721DA907B8223025FFDE0F11420EEFD8351.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:00:78:45:49:a4:34:80:d5:38:66:e8:90:0c:34:10:67:1f:
9d:6f:04:66:a5:4d:ab:9a:95:44:85:38:80:6c:40:0b:51:05:
67:5d:e3:10:5e:e0:0a:89:c2:74:02:41:9c:75:c5:79:d9:de:
cc:91:0d:f2:47:b8:f8:5b:2e:2a:2d:5b:7c:dd:71:db:e6:bd:
f1:61:e3:54:bb:1a:f9:88:69:a0:1f:d2:7d:53:d6:ed:53:78:
7d:8e:79:d8:34:f3:db:99:27:9c:4d:e0:17:b0:53:4c:d2:74:
77:ad:3a:87:1c:f7:c7:94:f6:b0:f5:2f:ef:c7:51:02:59:8e:
57:d0:6d:9a:64:4d:09:01:0a:74:77:b3:41:0c:81:b8:d9:00:
10:f6:79:ca:4c:78:24:24:88:b3:c9:d6:ab:3c:d5:21:d7:be:
f5:8d:2a:77:d1:7a:f9:0e:25:09:f5:53:f4:d3:b9:c2:f9:a5:
8a:a4:2d:f8:1b:62:99:37:93:ff:6d:1c:f4:c9:f4:85:dd:b0:
98:88:8b:c6:ba:7c:b6:6a:62:d4:30:54:59:ee:73:be:0d:90:
ca:c8:12:0a:8b:a3:0e:72:0c:2e:72:78:d6:e5:cc:92:0d:75:
06:a1:0d:3b:bc:9d:af:55:66:7c:d3:0f:70:9e:dc:e4:e3:ea:
d1:f8:92:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:38 2026 by rpki-client