
$ rpki-client -vvf rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
File: 4BCE188DE42B539EBB860A376D13FE292B001147.mft (raw, json)
Hash identifier: K/TOhr7WV2Ka/hw6PkU7Ngr6Rf8XFSvzR4RCpHUtUAE=
Subject key identifier: 9B:FF:4A:A3:A7:C6:35:F4:A1:89:17:A0:5C:6D:62:D7:B0:45:34:27
Authority key identifier: 4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47
Certificate issuer: /CN=4BCE188DE42B539EBB860A376D13FE292B001147
Certificate serial: 3B4168D3A9D360E4B15604A0EEDB7E2425970EF9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 06:57:24 +0000
Manifest this update: Sat 13 Jun 2026 06:52:24 +0000
Manifest next update: Sun 14 Jun 2026 09:48:24 +0000
Files and hashes: 1: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: u8jjg+GiS9S6r5A4phLntvppacWIJllmMAB+9fmlXA0=)
2: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: /L4LgvuxEYbH0dgsif++d85ZiL7YhQs+ni89j41DhXM=)
3: 4BCE188DE42B539EBB860A376D13FE292B001147.crl (hash: i5LUlxbwTwwhZGUS0YLEMjauQWLgtBjpial/iZiscQM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl
rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 09:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:41:68:d3:a9:d3:60:e4:b1:56:04:a0:ee:db:7e:24:25:97:0e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BCE188DE42B539EBB860A376D13FE292B001147
Validity
Not Before: Jun 13 06:52:24 2026 GMT
Not After : Jun 14 09:48:24 2026 GMT
Subject: CN=9BFF4AA3A7C635F4A18917A05C6D62D7B0453427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d6:64:c9:ba:56:9b:2d:be:7d:06:70:b0:87:
c9:66:41:2c:92:c4:9b:3e:04:ea:4d:2b:ba:70:fb:
cc:f1:74:6f:b2:24:10:09:e0:62:f4:ac:4d:61:bd:
e9:2a:1d:44:51:b4:31:d2:0d:f8:c4:a3:ca:37:ae:
8f:cd:f1:af:0a:7a:fc:89:ee:c7:dd:be:f5:2c:15:
b7:c7:14:b3:79:a2:91:33:53:ae:61:32:7a:a8:b8:
26:b5:0e:3c:18:01:a3:81:b9:18:7b:f7:2a:6c:6e:
c4:25:37:0b:a3:4e:dc:17:6a:14:68:d9:12:2d:ed:
17:6b:05:e8:da:23:14:42:30:92:b2:82:a6:47:65:
e6:cf:c4:11:80:95:c3:24:69:78:6e:57:b0:cd:81:
6b:3d:cc:a2:aa:3e:bd:3f:86:77:be:58:82:d5:62:
45:69:56:70:95:c3:96:db:72:3a:6f:19:77:5d:55:
9e:42:22:b8:b2:34:ad:43:f9:6f:ed:bc:4a:c5:c9:
26:97:e7:3d:2e:98:8c:ec:9d:1c:fe:8f:37:02:e7:
e1:4f:9b:0e:aa:1c:44:93:b5:f7:83:3e:ce:2a:1c:
cd:36:25:69:3e:1e:c4:8e:8c:a7:ec:5d:26:69:79:
89:31:97:01:0d:c7:22:4c:22:ee:03:78:de:e6:0c:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FF:4A:A3:A7:C6:35:F4:A1:89:17:A0:5C:6D:62:D7:B0:45:34:27
X509v3 Authority Key Identifier:
keyid:4B:CE:18:8D:E4:2B:53:9E:BB:86:0A:37:6D:13:FE:29:2B:00:11:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BCE188DE42B539EBB860A376D13FE292B001147.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/4BCE188DE42B539EBB860A376D13FE292B001147.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:68:73:63:b8:76:1a:86:67:3a:cf:2e:54:ed:69:7d:b4:17:
28:3a:7c:76:ec:c6:a7:e1:78:a3:75:65:ca:04:01:de:fa:57:
f7:7e:4a:cf:02:aa:8f:99:44:c7:7c:c4:be:8c:0b:79:d0:fb:
b1:bd:f3:91:13:f8:2a:4c:56:6b:b1:22:b4:01:94:c5:0a:e0:
78:fb:de:d4:2f:e9:d1:92:f5:55:9a:bb:8d:89:8e:dd:80:a4:
2b:6c:52:8a:4f:93:fe:d7:88:ba:2a:7b:93:19:1e:e3:34:fc:
cd:bb:f9:fb:82:d9:e8:94:42:8f:b4:94:e2:61:10:0c:8a:a6:
be:94:63:bf:b3:6e:63:d5:e7:a6:be:46:dc:15:e1:4b:1f:f8:
bf:da:e1:63:7a:ce:df:ef:c3:55:64:cc:d1:6d:85:f3:b4:28:
29:89:d9:86:12:98:b8:a7:b8:68:96:18:ca:73:10:99:04:b4:
55:63:62:69:e7:0c:e8:89:8e:65:1d:46:15:2c:b4:69:4e:92:
23:3b:c6:cc:ba:17:1a:4f:05:7e:c5:9c:85:6e:0f:f7:8f:c2:
1c:fb:99:12:b6:97:16:84:fe:8a:60:e4:17:41:b5:81:39:f6:
c2:6a:27:24:6d:89:0a:d3:11:68:b5:77:d5:eb:94:dd:b2:1f:
24:c7:07:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:17:36 2026 by rpki-client