
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft
File: 236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft (raw, json)
Hash identifier: rCEtMSaIzdy1JAHGAlKZ9MRLqdOnEYRMNWquLkuDFz0=
Subject key identifier: 92:94:09:D5:B0:42:1F:C9:72:55:50:5A:C4:1C:18:94:ED:85:DA:E8
Authority key identifier: 23:6F:DF:FF:48:37:04:9A:03:57:4F:0A:3F:5B:0E:9B:6C:C8:E3:A4
Certificate issuer: /CN=236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4
Certificate serial: 749F627AAE16A687F02E9EBD41672D73F6073BC4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 07:52:18 +0000
Manifest this update: Wed 17 Jun 2026 07:47:18 +0000
Manifest next update: Thu 18 Jun 2026 09:56:18 +0000
Files and hashes: 1: 236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.crl (hash: l1lWsayAqzM7hfeLofpAdNkoVSNzEjeUYHgOiCOOc24=)
2: 3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (hash: 9nR8f+NKs+GCy2BCUqqfXP6eNr2a6TnGK4mv1oCv2Sk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.crl
rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:9f:62:7a:ae:16:a6:87:f0:2e:9e:bd:41:67:2d:73:f6:07:3b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4
Validity
Not Before: Jun 17 07:47:18 2026 GMT
Not After : Jun 18 09:56:18 2026 GMT
Subject: CN=929409D5B0421FC97255505AC41C1894ED85DAE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:5a:ac:aa:0f:cf:5e:12:f5:b8:d8:4e:07:
6b:0c:77:ee:58:31:f9:c4:f6:60:ed:32:2d:37:4c:
e6:81:cf:f1:11:2c:6f:29:ba:d7:50:ed:45:8f:ce:
70:7e:df:4d:37:cb:aa:d5:4e:16:2b:3e:7b:d5:f0:
bc:01:5d:74:91:18:9c:da:c9:21:96:0d:27:a6:50:
72:85:2b:75:06:32:69:6c:ad:3b:68:81:4e:37:91:
71:93:3e:9b:e4:28:5b:ab:b0:56:5b:f8:75:17:d8:
16:bc:4d:d6:e5:5b:b5:61:7a:a2:20:f2:9d:c2:23:
b7:27:8d:22:6f:49:71:23:87:2b:4e:fb:d1:66:3d:
28:a9:f8:37:e5:c6:b5:ee:f4:37:ea:6e:ea:3d:6d:
a4:f6:ba:76:fd:3e:0b:00:fa:8d:4d:42:89:b9:1f:
68:b3:b3:21:ba:4f:48:05:25:01:bf:5f:09:0f:ba:
b1:5f:a4:95:66:01:1c:eb:29:4c:22:7d:23:3d:00:
1d:8e:47:b7:c4:15:2b:78:cb:b2:34:27:05:c3:74:
8e:2a:3a:6b:41:0c:65:0c:07:7b:2a:f2:9d:43:2b:
5c:2e:51:72:8b:fd:d8:84:17:4e:56:aa:82:8e:99:
9f:37:12:7b:1c:78:6c:80:8b:00:0d:46:a7:be:cf:
b0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:94:09:D5:B0:42:1F:C9:72:55:50:5A:C4:1C:18:94:ED:85:DA:E8
X509v3 Authority Key Identifier:
keyid:23:6F:DF:FF:48:37:04:9A:03:57:4F:0A:3F:5B:0E:9B:6C:C8:E3:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f2:38:50:81:1a:e0:1e:7b:41:1a:f3:df:a8:cd:39:9d:59:
37:0e:5c:6a:23:96:ee:7c:b9:21:2e:c6:53:41:7b:7b:92:00:
52:27:c2:af:56:0c:6e:92:5e:a9:c6:cc:34:7a:f1:fb:82:a1:
4a:40:20:f9:25:d2:0f:99:2a:1e:a7:2c:71:19:81:05:98:0a:
42:2f:20:8d:f6:d8:ac:1b:5b:02:ad:d5:81:dd:59:22:47:d3:
cb:42:35:87:21:51:ad:65:70:97:08:a2:08:5a:a3:56:e4:2c:
29:17:d0:2a:f3:38:c8:ea:8d:ea:5e:f2:65:3e:9b:24:28:56:
69:55:51:e0:df:fb:c9:1c:b5:9d:7a:f8:eb:76:71:48:28:fb:
a6:66:94:2d:15:58:51:63:0b:2b:05:4d:65:6e:6d:fc:fb:ce:
b8:c9:ec:bc:70:26:5d:62:20:fe:0a:67:4f:59:ee:b6:69:25:
f6:eb:f7:2d:59:11:0a:bc:bd:d8:f9:23:8b:b9:b6:68:1b:16:
94:23:72:87:66:03:5f:f6:a8:ae:b5:6b:89:3e:4e:b7:35:0b:
47:74:16:67:a6:4f:f1:ef:6b:af:4e:52:e4:fb:fc:49:41:45:
62:9c:f8:cb:f3:d1:34:84:35:b3:80:62:e2:ab:38:68:55:3c:
c3:73:60:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:47:52 2026 by rpki-client