
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.mft
File: 4E4DE13CED941803F067EA0F530875538E7F1AA8.mft (raw, json)
Hash identifier: +ML1Y/juRB3mYxHe7Dg3xSnIb45m/6IubKeI+H6vt4g=
Subject key identifier: 7D:E1:BC:A1:00:04:62:2B:EC:C8:0A:50:71:84:C4:66:5D:F6:3F:41
Authority key identifier: 4E:4D:E1:3C:ED:94:18:03:F0:67:EA:0F:53:08:75:53:8E:7F:1A:A8
Certificate issuer: /CN=4E4DE13CED941803F067EA0F530875538E7F1AA8
Certificate serial: 0DEEC9F92821AA974567477209AE471D42882289
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E4DE13CED941803F067EA0F530875538E7F1AA8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 02:56:16 +0000
Manifest this update: Wed 17 Jun 2026 02:51:16 +0000
Manifest next update: Thu 18 Jun 2026 05:34:16 +0000
Files and hashes: 1: 4E4DE13CED941803F067EA0F530875538E7F1AA8.crl (hash: 4sXkkcHtKOOnKm5YcqDo9oJIWt8ciXFdleq7mENCFVg=)
2: 3130332e3133372e33322e302f32332d3234203d3e20313338383131.roa (hash: pS17p4MkvrBveGdgex+XwX4S4Wesu7Vq17SWjXP0+w8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.crl
rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E4DE13CED941803F067EA0F530875538E7F1AA8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:ee:c9:f9:28:21:aa:97:45:67:47:72:09:ae:47:1d:42:88:22:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E4DE13CED941803F067EA0F530875538E7F1AA8
Validity
Not Before: Jun 17 02:51:16 2026 GMT
Not After : Jun 18 05:34:16 2026 GMT
Subject: CN=7DE1BCA10004622BECC80A507184C4665DF63F41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:bf:7e:99:2d:67:dd:37:c9:6a:3b:0b:e2:
98:dc:d6:d2:f4:22:8f:1d:5f:ea:a1:07:a0:79:4c:
65:39:be:b2:eb:98:ee:f6:09:61:a1:9f:6f:7c:62:
0d:78:2f:cb:c9:67:04:8f:c1:fc:b3:bf:ae:0c:19:
4e:16:4c:3c:71:ea:2d:6f:bb:a9:8b:f7:b2:3a:2e:
87:32:d3:26:8d:27:c4:16:9f:c3:9b:2e:6a:c8:12:
08:7d:8c:11:25:44:80:7f:1a:28:99:08:18:fe:49:
67:cc:9f:4d:0c:a3:e7:1f:3f:58:08:18:6d:12:b4:
46:83:77:f1:1c:5f:ea:06:f3:a7:97:64:af:06:2b:
d7:29:9c:fc:1c:c5:c0:32:9b:0e:13:f9:0a:65:14:
16:2b:93:2e:8b:0b:92:4b:00:8f:bf:95:bc:8a:8b:
bb:a9:46:67:58:e0:63:91:bf:ea:87:a0:3e:3f:ed:
b2:32:57:d4:f9:14:e9:b4:95:00:c3:b1:df:35:8a:
1a:fe:95:c9:a9:a7:58:a8:b0:d4:bc:0f:15:0e:63:
30:40:02:ae:79:5b:24:f0:65:de:7d:67:a8:34:05:
45:f2:6d:e8:c5:11:0e:3f:4e:c8:4e:02:5c:42:13:
81:f5:dc:c2:76:37:fe:4c:e4:4b:8f:36:39:53:e1:
4a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E1:BC:A1:00:04:62:2B:EC:C8:0A:50:71:84:C4:66:5D:F6:3F:41
X509v3 Authority Key Identifier:
keyid:4E:4D:E1:3C:ED:94:18:03:F0:67:EA:0F:53:08:75:53:8E:7F:1A:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E4DE13CED941803F067EA0F530875538E7F1AA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/4E4DE13CED941803F067EA0F530875538E7F1AA8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a7:2a:f6:fb:fb:ad:6b:aa:ae:89:c2:d0:a8:81:40:e7:7d:
d3:3c:b3:88:ab:fa:a1:77:85:c3:b8:40:1f:f2:7f:ce:a8:d3:
b1:ee:04:8d:0c:6a:d3:5a:6a:50:fa:5e:16:e6:9b:d5:b4:82:
a9:df:6b:7d:c4:e2:5b:8e:4d:06:c0:f3:65:e2:48:5d:df:86:
61:19:d2:68:32:49:f1:e7:c7:f6:88:6e:68:31:b3:ac:94:b1:
29:43:95:2f:90:d6:31:5f:90:d6:dc:a5:5b:e5:ee:ba:a0:df:
4c:6c:c5:54:2d:82:72:45:dd:06:52:f9:4b:37:f5:38:20:40:
7e:93:67:8b:ea:11:eb:fd:cb:bb:14:6f:18:56:54:68:97:d9:
97:36:fb:5a:ce:b3:3f:23:e7:99:21:54:c6:1a:7a:ce:2f:08:
d3:63:d3:f4:bf:07:9d:b3:df:ac:3b:fa:34:40:1b:3d:ac:38:
ce:58:d2:5e:50:d0:3f:81:49:e5:72:7d:17:bc:e3:57:af:b9:
45:b1:c2:a5:1e:7b:85:8f:ad:7f:1f:01:6b:be:9b:7c:e2:85:
07:dc:a7:df:87:1a:75:5f:f6:d3:f3:f3:d7:ec:10:04:85:a6:
cc:b8:4f:32:7f:40:d0:05:21:94:c7:bb:3a:82:83:f8:26:d0:
ff:28:a0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:42:40 2026 by rpki-client