
$ rpki-client -vvf rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
File: 48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft (raw, json)
Hash identifier: VoSwqhR1BobTBTstiCyOELqLV5HEDbffOPkCqEffsiM=
Subject key identifier: 30:53:3A:CA:D8:E3:97:BB:91:6B:23:3A:24:3D:27:58:D3:1B:47:68
Authority key identifier: 48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07
Certificate issuer: /CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707
Certificate serial: 3578452FD31F34EEA2080285C5F8B7EB918CEF0D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 20:18:45 +0000
Manifest this update: Tue 16 Jun 2026 20:13:45 +0000
Manifest next update: Wed 17 Jun 2026 22:42:45 +0000
Files and hashes: 1: 48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl (hash: 6KWR/6xXe0ma8dHnRzg+Mpx73QdLABuO0TMh6pCkzQU=)
2: 3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa (hash: 2h40cYj+FZipSkN57utalp9BoUtVPQ6jY2aP7JdgYkw=)
3: 3131342e3134312e35372e302f32342d3234203d3e20313339393937.roa (hash: esSysVtUva8+Yocw0kAhWf9PJYZT8IbRg2/i3Lll6kI=)
4: 3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa (hash: EqctnmAo57Bc5SskCeon4d80kj/Meg9dikNNmLRW6f0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl
rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 22:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:78:45:2f:d3:1f:34:ee:a2:08:02:85:c5:f8:b7:eb:91:8c:ef:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48B03280F8E03B5F0A1EABE912AAC84BB9CB3707
Validity
Not Before: Jun 16 20:13:45 2026 GMT
Not After : Jun 17 22:42:45 2026 GMT
Subject: CN=30533ACAD8E397BB916B233A243D2758D31B4768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:9f:0f:97:0b:23:6b:93:3d:3b:3c:de:84:
a8:39:07:55:30:fa:d3:ed:1d:a3:0b:48:2e:5a:10:
84:ac:0f:22:8b:4a:04:8a:73:64:ee:7b:c5:4a:00:
22:c0:59:3b:94:0a:59:65:68:9d:be:78:0d:e3:2a:
03:95:53:59:c6:4d:d6:95:eb:fe:70:ae:11:41:93:
d2:bb:3d:a4:18:c6:a4:0e:81:47:85:c9:08:b8:e0:
67:a8:9e:9a:91:ee:bd:4a:dc:d1:b6:a0:8e:c5:6f:
4a:c1:70:1b:3f:96:e8:83:fc:72:3d:d6:0c:ca:cf:
9c:46:ca:76:53:1a:07:15:db:0a:c8:73:b5:0c:ae:
95:47:69:6c:50:ef:65:d9:76:9d:e6:01:2a:68:15:
87:aa:21:23:ac:9a:6e:d4:93:e9:5a:18:3a:a1:cd:
61:66:41:fa:e3:2e:02:85:cf:93:9a:94:65:5e:0f:
5f:f9:3f:38:de:5b:48:89:1c:7f:5f:9d:22:05:3c:
79:d1:43:cf:4f:bc:fd:ca:9b:cc:8f:4e:39:11:cd:
56:a1:62:9c:19:85:a6:ae:c9:de:c6:a8:d2:2e:8b:
d8:39:81:63:21:fd:fc:3b:e6:d8:ab:dd:1c:81:76:
00:87:d2:4b:9a:b2:22:76:a1:0c:27:9a:ea:52:a0:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:53:3A:CA:D8:E3:97:BB:91:6B:23:3A:24:3D:27:58:D3:1B:47:68
X509v3 Authority Key Identifier:
keyid:48:B0:32:80:F8:E0:3B:5F:0A:1E:AB:E9:12:AA:C8:4B:B9:CB:37:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/48B03280F8E03B5F0A1EABE912AAC84BB9CB3707.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ff:ff:29:1a:7e:cb:a0:7f:f9:47:94:e4:66:0e:dd:fd:3a:
8c:82:0f:a6:3d:2a:4a:07:9d:6d:80:93:c5:6c:da:cf:81:9a:
aa:a0:09:0f:4c:20:5f:0f:8d:3e:c2:16:84:47:02:48:f3:97:
2a:9e:5c:33:71:38:03:4b:78:47:dd:08:af:1b:39:2e:e9:10:
a4:8c:29:ed:9c:9f:e9:88:c2:5c:80:12:ba:e0:cc:f7:9e:74:
c8:23:cc:3d:3b:27:1f:2b:9b:3a:7b:9f:f7:d4:d2:ea:23:80:
06:6b:d1:bc:22:86:bd:3f:49:c3:76:3a:23:64:43:ae:33:95:
0b:96:07:8c:c0:af:3d:63:89:ae:4a:a8:fb:bd:13:9b:94:50:
6e:b2:b6:36:55:de:b3:2e:ad:bb:91:e5:aa:17:ce:b3:40:dc:
db:ea:b8:d0:dd:84:26:7a:88:fd:ca:0d:36:65:a1:ae:ad:22:
49:d9:8e:de:95:e8:b0:d3:85:14:ac:ef:41:09:fe:3d:80:b5:
7a:f5:b2:7d:96:03:a1:b3:a0:b6:40:73:42:fe:ac:41:df:44:
97:06:53:e2:b4:c3:e5:16:10:e8:73:a1:07:fb:97:c6:30:00:
65:7b:8b:f6:7c:85:47:2d:74:d2:e2:2d:18:03:89:fa:2b:c2:
c2:57:e2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:17 2026 by rpki-client