
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft
File: 4C378F3C5E9E84D98D0229475208B1E382584588.mft (raw, json)
Hash identifier: v6Q1GG7iCLKTt9K6YptA1mIGc6fgNMHemooO5sRKOHg=
Subject key identifier: 06:DF:37:58:E1:F9:DD:31:53:18:D6:3B:73:10:A1:B4:9B:89:D5:C4
Authority key identifier: 4C:37:8F:3C:5E:9E:84:D9:8D:02:29:47:52:08:B1:E3:82:58:45:88
Certificate issuer: /CN=4C378F3C5E9E84D98D0229475208B1E382584588
Certificate serial: 4376535E9C33AD468C25E769DA4B6A3D309F3103
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C378F3C5E9E84D98D0229475208B1E382584588.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 17:40:32 +0000
Manifest this update: Tue 16 Jun 2026 17:35:32 +0000
Manifest next update: Wed 17 Jun 2026 21:33:32 +0000
Files and hashes: 1: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: ABkgOJWd2fNKHCH6GAwk3bSoWGS8bHMY1ISOxz9j9j0=)
2: 4C378F3C5E9E84D98D0229475208B1E382584588.crl (hash: ZkryijoYPAZtaPY0VBgwRKVUzK1Pibw1TlqBBxkmOXU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.crl
rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C378F3C5E9E84D98D0229475208B1E382584588.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 21:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:76:53:5e:9c:33:ad:46:8c:25:e7:69:da:4b:6a:3d:30:9f:31:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C378F3C5E9E84D98D0229475208B1E382584588
Validity
Not Before: Jun 16 17:35:32 2026 GMT
Not After : Jun 17 21:33:32 2026 GMT
Subject: CN=06DF3758E1F9DD315318D63B7310A1B49B89D5C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:4d:25:a1:a2:e0:d9:db:a6:84:7e:7b:f4:
d7:a0:db:8f:ab:42:06:63:ac:8b:ee:ca:4d:27:17:
02:02:d2:45:09:86:a8:df:d1:54:93:bb:39:fb:79:
ac:b5:22:f7:96:32:8e:71:bf:26:ac:a6:d7:7f:af:
69:49:ff:1f:1d:c9:21:b8:da:ed:69:79:71:7e:3e:
b1:d8:59:16:8c:0a:04:03:c9:8f:1a:fd:81:ef:76:
6a:d0:88:a9:86:1f:2c:7d:68:0d:44:18:4f:8a:3a:
d8:85:85:8e:6b:f9:ee:ba:91:be:c5:29:54:dd:4b:
f3:5b:24:2c:1b:cf:0b:a1:0b:21:e8:31:d7:39:0e:
b4:5b:c7:f6:25:dc:ba:0d:f1:e9:c6:c6:73:98:6f:
05:89:ce:ca:9e:82:1c:15:a4:77:0d:9c:68:b4:16:
48:6f:30:19:c7:7b:30:ed:1d:a2:0d:a9:f4:6a:6e:
ae:c3:b5:89:93:80:bf:81:ba:df:ae:ff:33:99:57:
8c:2f:db:73:d8:00:6f:b3:e3:41:c6:d4:8f:e2:f1:
08:e0:af:fd:17:0b:73:e3:c0:fd:92:c5:9c:85:dc:
f4:ce:46:33:09:58:48:ac:b0:af:5e:47:50:14:65:
ee:10:87:92:4b:a7:24:ad:4b:9e:98:e4:7c:18:1a:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DF:37:58:E1:F9:DD:31:53:18:D6:3B:73:10:A1:B4:9B:89:D5:C4
X509v3 Authority Key Identifier:
keyid:4C:37:8F:3C:5E:9E:84:D9:8D:02:29:47:52:08:B1:E3:82:58:45:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C378F3C5E9E84D98D0229475208B1E382584588.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/4C378F3C5E9E84D98D0229475208B1E382584588.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:52:90:14:b8:05:bb:ed:c6:0e:52:f8:0f:a2:cc:66:76:50:
20:0f:7b:cb:36:cb:cc:24:5d:ec:d3:2a:ee:81:0e:93:4d:b1:
04:96:1f:01:66:0e:56:55:55:19:07:3e:65:0d:53:2a:3d:85:
16:73:ef:bc:9f:cf:a3:78:2d:6b:0d:6e:a7:27:d9:ac:d6:9b:
a5:b9:fe:d6:32:55:de:d8:b0:80:f3:b8:ad:bf:34:d4:23:bf:
1e:e5:1b:2a:ea:bf:22:d6:fd:ef:7c:ea:28:fd:5b:ed:d5:a5:
7f:58:38:76:b3:96:de:bf:f4:58:6e:78:01:b1:9a:c5:35:0f:
2c:cc:69:02:76:99:ff:9a:75:3c:3b:fd:28:e9:48:c3:eb:7c:
01:9b:d5:fa:18:52:9d:d5:a9:b0:95:ce:51:d9:c0:3d:4e:51:
c7:38:bc:e0:26:a2:a5:95:70:eb:27:93:fa:92:a5:1e:64:a3:
b8:c8:a1:e9:2a:8c:96:d4:5d:8d:f7:be:b8:a1:67:ad:f4:37:
46:1e:c9:b0:8a:c9:eb:a2:5e:63:60:4d:4e:03:c6:0a:2d:77:
14:63:7a:39:94:00:68:a1:9a:9d:b2:6c:57:90:b8:4d:4e:21:
7a:98:95:c6:59:13:f7:cd:02:95:4d:d9:74:d6:b9:99:56:70:
eb:42:8a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:31:10 2026 by rpki-client