
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
File: 46932859C0D86F27F517A125185AE45763AEA7D7.mft (raw, json)
Hash identifier: ReYNQBYqGZ9DdSWBJwR93dYR3+0PidKoZe/E5b4JukU=
Subject key identifier: 06:96:48:E2:B4:DA:9C:26:8B:61:49:44:E8:A9:A4:29:C2:0D:3A:40
Authority key identifier: 46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7
Certificate issuer: /CN=46932859C0D86F27F517A125185AE45763AEA7D7
Certificate serial: 1463141F91D0D217444958EA326513AB5E610290
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 14:06:23 +0000
Manifest this update: Tue 16 Jun 2026 14:01:23 +0000
Manifest next update: Wed 17 Jun 2026 17:11:23 +0000
Files and hashes: 1: 3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa (hash: JlLJ7++ECgOuHqdNFhp6s2bGWg+2iwYDZNhy26Z53Oo=)
2: 46932859C0D86F27F517A125185AE45763AEA7D7.crl (hash: VZtcPurWPjDy+H3BY5AzsCshvCS6jnnJcXWVQ7f7zdM=)
3: 3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (hash: Trw+y/sXFJtkefRvcCLMU2FAEepNpbCrLf/kUCXfHQE=)
4: 3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (hash: 26c5fhilGEyh6ibLUJuFc5ukaLSiZO65uEMgb+eN6Nk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.crl
rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 17:11:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:63:14:1f:91:d0:d2:17:44:49:58:ea:32:65:13:ab:5e:61:02:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46932859C0D86F27F517A125185AE45763AEA7D7
Validity
Not Before: Jun 16 14:01:23 2026 GMT
Not After : Jun 17 17:11:23 2026 GMT
Subject: CN=069648E2B4DA9C268B614944E8A9A429C20D3A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:4b:22:a9:f1:25:e2:8c:62:e6:17:e9:6b:
ac:9f:af:2b:9f:12:88:01:90:c1:47:13:a9:c8:c8:
e0:b9:03:8f:36:dc:f7:c5:41:10:29:65:ba:f8:f2:
eb:74:32:90:19:38:f0:8a:d6:71:0f:62:20:2e:5d:
55:d4:67:83:c7:54:5e:df:db:93:12:ac:af:d8:28:
17:06:ec:7b:55:15:e7:fe:61:b8:d4:db:02:20:80:
4d:c0:98:ec:47:f9:21:c3:a7:aa:d4:09:09:ff:3a:
db:f7:f3:03:82:7b:0b:41:3c:4c:5c:d6:c8:5b:d4:
77:7e:d9:84:70:6d:07:dc:f3:2f:b4:2f:75:37:80:
e7:81:39:47:31:fe:2f:f3:0f:fd:cd:96:fe:a4:7c:
d2:ba:8e:cc:dc:72:07:e2:17:f1:25:d7:85:40:3c:
77:cb:62:ab:fb:a9:68:f3:77:6a:ad:d4:e5:78:63:
47:2b:4a:e6:2a:52:e0:f3:56:f0:a5:43:8d:19:d1:
af:34:d8:72:26:f5:49:85:85:23:9c:c2:3d:5b:be:
48:6d:b1:91:30:96:36:53:f9:11:51:89:f5:31:66:
1b:f4:57:ae:47:ac:cb:a9:61:d2:b5:ef:15:e4:29:
5f:29:f4:81:80:e8:b7:60:ab:08:15:4a:3e:d3:96:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:96:48:E2:B4:DA:9C:26:8B:61:49:44:E8:A9:A4:29:C2:0D:3A:40
X509v3 Authority Key Identifier:
keyid:46:93:28:59:C0:D8:6F:27:F5:17:A1:25:18:5A:E4:57:63:AE:A7:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46932859C0D86F27F517A125185AE45763AEA7D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/46932859C0D86F27F517A125185AE45763AEA7D7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d5:ee:55:c6:7d:86:eb:c7:dc:17:b8:c9:10:89:e4:73:08:
ee:aa:da:8f:0f:fb:81:19:15:4e:1d:da:5c:83:f9:a5:0e:49:
79:03:7f:0c:d9:39:6a:18:55:c4:40:01:f3:6f:74:dd:11:6a:
a7:6d:f2:0d:37:ce:3e:e1:d3:d0:b5:e7:63:9c:f2:40:7f:af:
fa:98:76:2a:7d:1e:d1:34:a2:dd:15:94:bc:31:7c:ca:7c:e0:
64:e4:67:4d:72:c6:32:ea:8c:2c:05:55:ff:3f:b0:40:89:bd:
fa:92:a2:78:38:25:34:65:4e:86:8c:97:ca:43:0f:cb:8a:b8:
9c:04:9b:b0:cd:ec:e0:21:4f:b4:10:0b:c6:8b:1d:56:62:14:
db:98:4a:14:97:da:aa:3f:91:2b:e6:75:d6:82:d9:7a:2d:57:
7b:db:2f:1c:8f:d3:3c:28:0a:91:57:dd:db:8d:61:02:51:38:
1c:f5:c0:dd:c3:7d:ee:bb:dc:b9:07:25:68:df:06:e8:0a:d2:
6b:d1:ae:86:76:47:ff:c7:92:d9:ff:bc:e7:c1:e4:49:6e:16:
b1:3b:0d:ed:83:51:39:0d:14:fd:8a:b3:83:32:a3:1c:11:1f:
c0:cd:1f:02:11:b2:36:0f:28:5e:6c:57:f6:40:fd:aa:61:38:
f2:b0:e2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:43 2026 by rpki-client