
$ rpki-client -vvf rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft
File: 04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft (raw, json)
Hash identifier: Ne6l5bEt4yTjqloqbYznqUSPrAUdkof9nN0tq3wgIoQ=
Subject key identifier: 47:8A:DD:34:74:6D:FC:64:2D:00:CF:CA:8F:13:DD:92:01:E4:D9:FD
Authority key identifier: 04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36
Certificate issuer: /CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36
Certificate serial: 20EB4F8066BEA2D02B4355B27156483E868D6EC1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft
Manifest number: 3B
Signing time: Mon 15 Jun 2026 04:26:46 +0000
Manifest this update: Mon 15 Jun 2026 04:21:46 +0000
Manifest next update: Tue 16 Jun 2026 07:52:46 +0000
Files and hashes: 1: 3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (hash: Sxgjfc3rJMR/6kggcztr6diqTcIFdNjFMaFwfjqQRVc=)
2: 04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl (hash: 07REXiUupknZnmfT6l3Vi71RS0WCVStmuboGy7T1YX0=)
3: 3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (hash: ngWzWlF3BDUAfLENIH4eXpEMJ09d6MMBm0aRXwTS2DE=)
4: 3130332e38302e38382e302f32322d3234203d3e203535363835.roa (hash: bImD2ZtrKw/qYZlZEa6DVDo0ea7PH2tJcz0npEPPdds=)
5: 3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (hash: vatB6xTCpKTsE4tbG+JDKUhfyJC22x4PAXCG04Pc2lA=)
6: 3130332e38302e39312e302f32342d3234203d3e20313337333033.roa (hash: 8fVyhPJOnEawBWwgARzQly7FMcHwy/+Ghg0XkCT2OOs=)
7: 3138322e35342e3134302e302f32322d3234203d3e203535363835.roa (hash: jiJN5uTtVqTyi/LsSOB3CZxJlHQ5mjW5GcesMlLX4EE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl
rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 03:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:eb:4f:80:66:be:a2:d0:2b:43:55:b2:71:56:48:3e:86:8d:6e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36
Validity
Not Before: Jun 15 04:21:46 2026 GMT
Not After : Jun 16 07:52:46 2026 GMT
Subject: CN=478ADD34746DFC642D00CFCA8F13DD9201E4D9FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:55:a3:3a:74:78:db:07:de:77:ab:15:cb:
95:41:88:c7:42:1f:8c:c6:53:32:07:1f:fa:1b:74:
4c:d1:04:43:5f:42:c9:cb:1a:74:06:cb:6c:bf:7c:
42:55:e7:1f:6e:a6:73:e7:27:e2:df:94:00:be:66:
a4:b7:51:89:bd:c7:b5:01:86:64:fe:c5:ba:43:f2:
25:b2:35:40:2d:d7:b2:0b:e7:39:7f:5e:df:9a:e3:
7d:9b:e5:d4:d5:7d:05:34:fd:ba:5b:13:c9:91:c6:
a6:4b:7f:6d:76:e3:df:2c:94:19:0e:24:2f:32:42:
7b:48:2a:1e:54:19:84:f3:a6:c0:a6:c7:87:d1:52:
3a:10:ae:a9:2c:e7:be:7d:68:e1:79:41:74:36:a5:
de:f8:10:f9:1b:c6:52:5f:c6:13:9b:d6:f5:5f:f8:
59:de:51:22:4c:c8:ba:5d:11:bd:31:9b:7c:62:82:
4e:21:74:7e:15:b3:95:3b:2f:64:bb:24:7e:3d:d7:
c3:ba:a5:98:8e:42:ae:b9:37:89:c2:c0:92:4c:49:
cd:ae:d5:b1:a8:2c:5f:30:83:b1:87:da:bf:3c:c9:
5b:e7:9a:ae:bb:78:fd:b4:2f:ba:8f:9f:f3:1e:31:
2c:5a:19:8f:75:87:c3:25:c9:0b:e8:50:32:d2:2f:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8A:DD:34:74:6D:FC:64:2D:00:CF:CA:8F:13:DD:92:01:E4:D9:FD
X509v3 Authority Key Identifier:
keyid:04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:87:9c:67:e6:84:6f:b8:c2:f5:fa:6d:e9:9d:2d:58:d7:76:
d6:3a:f7:d2:6c:76:1a:2b:1a:d4:4e:f3:6e:41:af:23:03:df:
41:41:0c:90:95:16:5b:87:ab:11:4a:ce:1d:7a:e7:c0:b0:ad:
65:cb:7b:56:2f:ce:10:a4:e9:27:15:4c:40:77:af:fc:91:f7:
01:d6:6b:01:10:62:63:de:57:be:22:a9:58:19:4e:54:b3:3f:
b5:90:14:26:fc:79:9a:7c:a4:19:26:a3:fa:9e:a9:c7:b1:f3:
6d:4f:2f:6f:ce:57:1f:5d:e8:0b:b9:6b:59:9b:21:9c:26:2d:
e1:3d:68:d6:ff:bf:96:7d:76:37:bb:4b:be:20:e1:85:b1:1b:
1d:7a:d4:fa:ec:8e:61:c7:44:9a:e1:1d:29:ee:67:ea:86:09:
cf:08:68:d5:ac:e2:52:76:14:f6:4e:9e:c4:06:39:c7:7e:90:
07:19:f1:73:f6:81:3b:c6:91:71:87:12:b6:3f:38:2b:03:4f:
be:5e:a0:21:81:51:bb:7f:70:a1:41:84:a1:8b:c2:24:f5:92:
1e:e2:32:6a:59:e5:eb:21:e9:ac:6d:f0:1b:4d:18:cc:03:80:
d3:e8:65:9c:5b:39:4d:bc:63:ab:cf:e7:d7:2e:8d:e4:63:c8:
bc:9c:8d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 13:58:25 2026 by rpki-client