
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft
File: 4202428F6F3C953C642F298719C5C35E169724A2.mft (raw, json)
Hash identifier: G+HhO2Zb+6LP2Vs8uLBJLarueNIV4w6iSNuDQ9UDqYY=
Subject key identifier: 2D:71:2C:6B:4D:DB:D4:19:D2:8D:FB:FC:BF:E0:CD:A4:48:8F:85:97
Authority key identifier: 42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2
Certificate issuer: /CN=4202428F6F3C953C642F298719C5C35E169724A2
Certificate serial: 6A050751E7B5EB8C2ACEC83728B1F2C4CA387365
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 15:12:39 +0000
Manifest this update: Tue 16 Jun 2026 15:07:39 +0000
Manifest next update: Wed 17 Jun 2026 18:17:39 +0000
Files and hashes: 1: 4202428F6F3C953C642F298719C5C35E169724A2.crl (hash: VSTUNuk2ubsppy3khcKEr0XbyEjbDrRb7qvAhluLsSI=)
2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: p7JO88fvmBW+Y+ZP8rFGldK5BvqAlDmHyGZVg3MhVAY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl
rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:05:07:51:e7:b5:eb:8c:2a:ce:c8:37:28:b1:f2:c4:ca:38:73:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4202428F6F3C953C642F298719C5C35E169724A2
Validity
Not Before: Jun 16 15:07:39 2026 GMT
Not After : Jun 17 18:17:39 2026 GMT
Subject: CN=2D712C6B4DDBD419D28DFBFCBFE0CDA4488F8597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b1:22:03:3d:4b:67:4d:94:a3:e6:cc:37:2d:
1c:3b:5c:f1:27:3e:93:40:38:52:4a:e3:76:71:36:
73:a0:b7:d9:0e:ef:22:3a:e5:5f:5a:b5:37:79:7e:
ad:97:47:bd:0c:ec:8a:ba:dd:03:7d:de:39:fb:2c:
58:1c:38:fc:b0:33:dd:dc:e4:33:d1:5a:8d:2c:58:
b4:3a:7f:e2:84:84:9e:76:2a:50:7a:0a:a8:cd:b6:
9a:cf:57:f2:51:63:c4:7a:fe:89:6a:72:a4:f2:55:
de:97:32:b9:21:b5:91:60:2b:b3:dd:38:c1:c4:b5:
c8:de:03:5c:87:d7:39:5d:85:35:13:82:6e:fa:3c:
1c:f0:91:ca:8e:64:fe:6f:e2:ce:0a:46:b4:c7:14:
c4:59:19:e9:c9:50:66:b2:d7:37:52:76:10:84:3b:
8a:7a:62:16:47:4d:af:4d:1c:8c:d6:1b:d0:76:15:
84:c5:ba:e8:07:69:b2:dc:70:61:d0:39:66:f8:83:
e4:a8:64:97:82:9a:70:be:20:af:a9:25:eb:e9:67:
89:c4:d4:e6:f1:47:9b:ba:3b:90:f4:f9:c9:68:3d:
aa:b4:77:f3:fe:ad:9f:d3:e6:6a:2c:d0:df:46:97:
2f:52:df:2c:73:a1:d3:e0:ae:1e:de:50:2e:d8:ee:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:71:2C:6B:4D:DB:D4:19:D2:8D:FB:FC:BF:E0:CD:A4:48:8F:85:97
X509v3 Authority Key Identifier:
keyid:42:02:42:8F:6F:3C:95:3C:64:2F:29:87:19:C5:C3:5E:16:97:24:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4202428F6F3C953C642F298719C5C35E169724A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/4202428F6F3C953C642F298719C5C35E169724A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:30:48:eb:eb:ce:13:5c:d7:e5:28:2e:a1:8d:f2:24:8c:bf:
24:1b:98:41:ef:07:5f:b7:2f:af:46:01:42:5c:73:be:1c:8b:
54:92:c2:97:39:6d:b2:d2:2e:4c:44:23:f4:ad:e7:9d:ad:f0:
14:bf:00:96:1c:66:47:b2:23:89:cd:46:25:2c:af:94:f1:c4:
de:5b:6b:9c:b1:b2:06:ce:a2:b6:3d:dd:39:b1:26:4a:a4:8f:
5c:d5:bb:e7:18:6b:b7:ad:50:3e:ee:a5:1d:e6:4b:a2:42:63:
16:5d:65:c9:d1:e8:8b:92:0f:1b:f0:f6:d9:10:dc:91:2b:c1:
a6:0e:d7:37:24:c3:57:da:ef:0e:5a:e7:4e:3f:30:aa:bd:d5:
7d:c9:c0:e9:ed:96:1e:4d:e6:cc:f5:47:38:f0:af:f6:79:fc:
01:2b:56:d6:b4:27:90:be:88:ee:80:e3:c7:9f:6c:a2:ce:8c:
b5:a7:bf:dc:fb:92:ed:89:e6:2c:1c:59:bd:b5:8a:f7:48:be:
70:6d:b8:4b:d6:c6:94:a2:8b:5e:9d:ee:0e:72:de:6a:70:17:
19:b4:63:02:34:ea:36:75:fc:2a:c8:01:77:60:93:cb:32:a4:
20:d2:c3:03:02:d3:c0:87:82:81:5b:8d:5f:05:f1:aa:cf:62:
5a:4c:0b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:50 2026 by rpki-client