
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft
File: C4E9D4469828724936CAE63A417C0DE2014F205A.mft (raw, json)
Hash identifier: 4ZMleHnwxNRpxcGWsep6gOYGAmN+voEEs3zrZpqYc3Y=
Subject key identifier: 21:48:0A:00:BF:B8:56:EC:11:FA:F0:85:DA:31:A9:BA:49:D1:B9:B2
Authority key identifier: C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A
Certificate issuer: /CN=C4E9D4469828724936CAE63A417C0DE2014F205A
Certificate serial: 77AC186CD249E1991C04BC054585248DCECE3E5F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 03:48:43 +0000
Manifest this update: Sat 13 Jun 2026 03:43:43 +0000
Manifest next update: Sun 14 Jun 2026 07:31:43 +0000
Files and hashes: 1: C4E9D4469828724936CAE63A417C0DE2014F205A.crl (hash: Q5TcR/mD+/Pejj0UYYCzORco44ShpnRNtrHpyIuzGbE=)
2: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: n2rjzJ/zLgB675Rxossmph/fEyHX/dgt2ieO+QslQMw=)
3: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: O5O73bIVgP3Ny3ggR2VTr1FgLepLoRHQrtRQ7caTd/s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl
rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ac:18:6c:d2:49:e1:99:1c:04:bc:05:45:85:24:8d:ce:ce:3e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4E9D4469828724936CAE63A417C0DE2014F205A
Validity
Not Before: Jun 13 03:43:43 2026 GMT
Not After : Jun 14 07:31:43 2026 GMT
Subject: CN=21480A00BFB856EC11FAF085DA31A9BA49D1B9B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:28:6e:ae:31:9d:71:9a:13:ca:8d:61:20:
21:4c:8a:1d:c6:5d:f9:09:45:32:82:cb:02:9a:a4:
93:c6:d8:ae:77:7b:2e:8b:23:f4:ab:05:bb:11:fc:
b3:42:1e:02:9a:dd:09:e4:1b:96:87:b0:05:2b:2f:
de:54:00:1b:13:63:54:0e:73:1a:b6:bf:85:48:44:
fe:62:09:61:3c:4a:91:34:96:f4:b8:35:ef:35:38:
95:0d:18:14:cd:c3:1d:b2:d3:58:9a:01:1e:03:ab:
e9:27:fb:13:a5:c0:07:d9:0c:c7:34:70:ec:d5:00:
e6:03:90:5b:dc:6b:d1:1f:af:af:ff:9f:7e:40:ef:
56:06:c9:94:8d:ff:a7:8f:23:7e:60:6c:d0:7b:55:
74:b9:eb:51:96:98:5b:8e:ae:45:bc:c4:17:3e:79:
cc:df:a3:09:80:24:5e:fc:90:1f:80:0b:53:19:3d:
2b:cb:78:9c:e1:1a:bd:81:bb:ad:de:ec:94:86:7c:
77:35:8e:74:7d:ea:d3:1b:b4:3e:66:e0:af:b4:44:
1e:44:f3:b6:6e:1a:f2:e4:45:bb:3d:b8:ca:62:90:
67:bf:d7:ec:d1:d0:4b:62:15:2b:45:77:cb:37:e7:
c3:dd:23:2b:81:be:6f:0d:e6:f1:e3:8d:01:c0:0b:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:48:0A:00:BF:B8:56:EC:11:FA:F0:85:DA:31:A9:BA:49:D1:B9:B2
X509v3 Authority Key Identifier:
keyid:C4:E9:D4:46:98:28:72:49:36:CA:E6:3A:41:7C:0D:E2:01:4F:20:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C4E9D4469828724936CAE63A417C0DE2014F205A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/C4E9D4469828724936CAE63A417C0DE2014F205A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:88:67:5d:77:d5:29:9e:11:2c:bb:33:10:84:ef:c9:4b:13:
ac:01:09:4d:3e:21:9d:4e:98:7b:a8:94:70:57:4e:4c:0d:83:
7c:0b:93:90:f2:82:32:85:ea:7c:6a:9d:68:1c:fc:05:91:5c:
70:50:1d:69:d7:eb:78:34:ea:21:69:2e:65:c9:27:4b:96:41:
8f:9f:49:65:f8:98:0e:b4:30:23:8f:09:bc:32:0c:31:70:f3:
db:ff:d1:58:30:58:bd:7b:a9:9e:c4:62:46:65:e4:8e:3e:9a:
ce:d5:9b:04:0a:3a:11:13:31:dd:76:ff:81:6a:76:91:d5:b3:
9d:50:cb:ca:7b:ba:75:74:a8:bb:74:d8:8a:88:e2:b0:29:4b:
e8:f9:a4:83:79:61:b2:44:af:b7:ff:c4:99:2c:8e:5b:27:70:
f1:88:a0:88:52:96:7d:5c:dd:a2:b0:90:27:27:64:8d:f2:69:
b2:14:88:0f:42:69:ad:0b:55:63:03:14:bf:cf:be:04:71:b8:
66:7c:e7:7b:d9:ec:22:ce:c1:ce:be:fa:7c:ef:5b:78:76:d7:
5c:4e:68:e7:c3:4d:da:b7:5d:45:ca:96:b4:4e:ab:17:e9:64:
11:04:fc:23:c3:a0:49:36:3b:3c:a1:ea:fd:05:50:c3:0b:fe:
97:ca:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:36:44 2026 by rpki-client