
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft
File: 14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft (raw, json)
Hash identifier: mDQ0UYGDlT1YAWJ4uhbfSnGe73jg1TYG1aZNndV4MQM=
Subject key identifier: BB:A4:24:2A:A0:C8:71:6B:C0:9E:1D:52:AA:88:12:27:70:62:08:04
Authority key identifier: 14:38:4A:77:FC:1E:03:BA:BA:A8:DB:6E:95:F9:79:B0:8D:16:DA:B9
Certificate issuer: /CN=14384A77FC1E03BABAA8DB6E95F979B08D16DAB9
Certificate serial: 4536B431F77959551A1E05A4F9C3BDA840DF80F6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 17:04:51 +0000
Manifest this update: Tue 16 Jun 2026 16:59:51 +0000
Manifest next update: Wed 17 Jun 2026 18:49:51 +0000
Files and hashes: 1: 14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.crl (hash: Wsem4Z+PBjQ3rT1PLo9ohU6rY8KU+1PvibL57xkspAY=)
2: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (hash: EJ6cvXJ/T86AFVCQoEqikidmMKscKfWsdPHD8vPB1Oc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.crl
rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:36:b4:31:f7:79:59:55:1a:1e:05:a4:f9:c3:bd:a8:40:df:80:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14384A77FC1E03BABAA8DB6E95F979B08D16DAB9
Validity
Not Before: Jun 16 16:59:51 2026 GMT
Not After : Jun 17 18:49:51 2026 GMT
Subject: CN=BBA4242AA0C8716BC09E1D52AA88122770620804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:f8:80:76:72:00:41:5b:9f:81:3f:0a:28:
37:3f:24:62:9e:1d:72:dd:83:d2:fa:b4:b8:59:17:
26:97:93:c6:0d:a5:eb:95:94:df:02:d5:4b:3e:5e:
9f:f5:60:c3:52:f6:c7:6c:44:a5:5f:dd:e3:d7:71:
2e:1e:91:d8:aa:b3:f6:03:d1:a4:e7:1a:60:84:44:
e2:74:76:cc:41:55:31:20:9e:61:fa:37:a3:53:76:
d2:c2:51:8a:a7:b0:d0:d9:5e:5e:c9:6f:21:fc:64:
22:ec:c7:2e:90:ce:4a:f8:ea:e4:48:48:e5:f3:e8:
26:03:5a:f7:66:ac:26:55:e0:f4:0e:44:7c:50:80:
b8:c4:ce:b5:b9:7a:5f:ae:ef:ee:12:66:7d:29:e7:
59:cb:c3:bb:7c:2c:c0:00:d0:a1:be:34:6f:87:77:
22:c3:b0:38:9e:51:f1:f3:b8:c8:60:57:c5:47:6d:
4e:c6:f7:7e:51:48:ab:a9:0a:38:67:18:23:a9:a5:
e1:44:49:42:b7:36:20:f7:66:c3:43:31:69:c6:85:
92:33:70:59:45:ab:a3:70:d7:29:de:03:dd:c6:d4:
f2:4e:2f:69:a3:c4:ba:f4:b1:d5:d9:84:9d:af:aa:
07:e2:9d:61:3a:dc:6b:4e:4f:ae:3f:eb:68:a1:8a:
b3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A4:24:2A:A0:C8:71:6B:C0:9E:1D:52:AA:88:12:27:70:62:08:04
X509v3 Authority Key Identifier:
keyid:14:38:4A:77:FC:1E:03:BA:BA:A8:DB:6E:95:F9:79:B0:8D:16:DA:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/14384A77FC1E03BABAA8DB6E95F979B08D16DAB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:21:2a:60:18:40:28:e4:69:e3:76:41:4e:4b:4d:9e:33:54:
88:85:e2:69:f1:22:b8:11:20:65:c9:46:86:d4:6d:be:0f:29:
54:84:1c:00:ae:2e:8d:7f:f2:e5:22:9d:e2:13:42:d3:94:b0:
67:b7:ca:1b:fc:9f:2a:6d:c1:ef:36:a3:90:8e:3c:01:fd:5c:
ad:3f:8c:9d:55:26:4a:24:2c:a1:ae:7b:5d:ae:8f:8a:fc:40:
62:55:83:5e:5d:99:88:92:85:ad:f5:9b:ff:f3:4f:c6:8c:9d:
39:a5:0c:18:f0:0d:da:e1:43:fe:fa:e0:9c:2b:f7:86:ca:99:
d2:c9:72:f4:10:62:48:08:cb:18:c4:3e:5f:5e:1b:c6:80:ca:
6b:c3:1c:42:3a:cf:c8:56:56:7c:9c:e9:f1:20:7b:aa:53:33:
17:c0:90:ea:5b:9d:70:c7:d2:ae:ff:d2:29:5c:d9:6f:65:16:
b9:bf:1b:62:a0:bc:3f:5d:31:7a:e9:6f:49:63:ed:74:95:47:
4b:cb:e9:d8:dd:67:66:15:cc:e3:d1:90:98:91:a5:69:82:b6:
5a:32:10:ed:0e:de:0b:e0:05:ff:cc:5a:f5:7e:ff:e6:f8:ec:
a7:6e:3a:74:e2:1e:ef:f9:cc:e8:f0:1f:9b:96:93:d7:a9:41:
41:6c:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:40:58 2026 by rpki-client