
$ rpki-client -vvf rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
File: 484F335D7E0307C0F7FF120F455566A5DD73933A.mft (raw, json)
Hash identifier: kxLvVx+HG5GKCSc89wtycdFqLyvpgJipiMefxg0ruWc=
Subject key identifier: 07:2A:B4:6E:F9:06:72:51:12:D8:A0:D6:8D:23:3A:BA:A7:F4:95:2D
Authority key identifier: 48:4F:33:5D:7E:03:07:C0:F7:FF:12:0F:45:55:66:A5:DD:73:93:3A
Certificate issuer: /CN=484F335D7E0307C0F7FF120F455566A5DD73933A
Certificate serial: 5DCAC2F6330243F2C2C91BF756D750A4603B25CF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 18:36:38 +0000
Manifest this update: Tue 16 Jun 2026 18:31:38 +0000
Manifest next update: Wed 17 Jun 2026 19:53:38 +0000
Files and hashes: 1: 484F335D7E0307C0F7FF120F455566A5DD73933A.crl (hash: DH82ql86oZjeMeGiGeBJpwD/U59YvYnSTG1BMjh8NzE=)
2: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: ESQviQfyCrkTtBnJrmVbWeQokiDKSwPNHmI0uyVl6TM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.crl
rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 19:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ca:c2:f6:33:02:43:f2:c2:c9:1b:f7:56:d7:50:a4:60:3b:25:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484F335D7E0307C0F7FF120F455566A5DD73933A
Validity
Not Before: Jun 16 18:31:38 2026 GMT
Not After : Jun 17 19:53:38 2026 GMT
Subject: CN=072AB46EF906725112D8A0D68D233ABAA7F4952D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:3f:24:35:13:b9:47:79:69:33:66:96:da:
f5:15:5e:7c:87:ac:63:31:d2:2b:29:3a:dc:84:d7:
fe:d0:4f:35:cc:b2:67:59:25:de:94:da:19:58:59:
de:00:30:a4:5e:d7:3b:91:a4:01:a5:21:89:d0:fc:
75:3e:cc:bd:c6:8a:a9:92:54:f6:df:98:17:4d:a8:
5a:9e:77:30:db:6e:3a:1e:aa:bd:e4:c0:d7:54:7f:
44:f7:9a:22:12:13:11:d5:e1:47:2b:32:38:80:0a:
b7:14:d9:8d:e3:28:7b:88:9a:cc:50:96:01:62:e9:
f3:2c:a8:25:ee:e0:4b:e9:42:38:e1:d3:46:a4:31:
d8:b5:e6:60:c6:4c:4e:65:e4:f6:fe:11:25:45:86:
1e:64:96:cc:c3:bf:de:3c:74:76:b7:d0:50:33:41:
f1:d3:96:5b:ec:7f:03:24:a8:c9:17:fe:bf:50:0f:
75:b5:d7:7d:c9:91:78:ad:25:e0:e0:ff:fe:35:95:
b9:61:41:79:7e:13:4b:8e:1e:d1:ff:5a:3b:55:5b:
22:b4:fd:e4:da:3a:34:ee:9e:c8:b8:e8:5e:a1:39:
48:ee:91:26:40:91:8f:ec:49:f8:5f:55:53:ca:d7:
37:6c:22:46:94:eb:49:23:ed:67:08:38:bc:eb:92:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2A:B4:6E:F9:06:72:51:12:D8:A0:D6:8D:23:3A:BA:A7:F4:95:2D
X509v3 Authority Key Identifier:
keyid:48:4F:33:5D:7E:03:07:C0:F7:FF:12:0F:45:55:66:A5:DD:73:93:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/484F335D7E0307C0F7FF120F455566A5DD73933A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/484F335D7E0307C0F7FF120F455566A5DD73933A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e4:75:b2:48:95:55:33:d9:a7:14:a2:cf:95:c9:e2:3c:f8:
11:01:f4:10:7e:a4:3f:ce:3c:c9:ea:eb:cd:17:d6:24:09:07:
44:fd:68:3d:cc:5f:b7:3f:cc:c9:77:44:81:dc:56:5d:7a:d3:
42:8e:42:e6:87:15:ec:f2:bf:d8:3e:4e:70:9c:e4:b0:49:af:
7c:0e:25:ef:51:ae:d6:00:70:58:0e:7f:a3:d5:e4:47:e4:45:
29:45:d5:52:f4:fa:c2:6c:c7:85:be:c0:d6:21:40:b8:19:14:
7d:89:58:81:ad:46:73:f1:d0:2c:37:cc:15:5e:fc:5c:c9:05:
41:a5:33:73:8f:6a:71:3d:50:c7:d3:dc:16:48:d2:6b:08:28:
cf:90:be:01:b9:df:71:0d:d9:6a:dc:b2:62:2b:0e:a0:30:36:
86:56:01:2a:4d:87:21:c1:d1:93:21:5c:51:89:c2:1c:66:d3:
81:9b:06:35:19:79:17:0e:49:40:c6:b9:00:98:ee:fe:3a:48:
9b:7a:92:8a:f2:06:2f:00:6a:e3:e7:7d:f4:fd:26:a3:2f:11:
6f:a3:e3:ef:13:fe:59:eb:00:89:b9:a1:08:c0:a6:e6:5d:56:
48:29:58:98:f3:ef:e8:56:75:46:e0:66:7a:8b:44:07:c0:13:
a4:cc:c3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:16 2026 by rpki-client