
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft
File: 476A27F6557241F0C8B13CD6474412B065E838A1.mft (raw, json)
Hash identifier: Ts2MvYnKsJk6X4zshy4UhmHZGQkZK1dijDQUWQIywLo=
Subject key identifier: 4B:89:3E:D6:23:85:8F:63:C6:62:37:B0:C0:E6:03:11:4D:64:C5:41
Authority key identifier: 47:6A:27:F6:55:72:41:F0:C8:B1:3C:D6:47:44:12:B0:65:E8:38:A1
Certificate issuer: /CN=476A27F6557241F0C8B13CD6474412B065E838A1
Certificate serial: 5BAB2D079AC8EFA843B1331887A79355AC30AA63
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 18:11:08 +0000
Manifest this update: Tue 16 Jun 2026 18:06:08 +0000
Manifest next update: Wed 17 Jun 2026 21:43:08 +0000
Files and hashes: 1: 476A27F6557241F0C8B13CD6474412B065E838A1.crl (hash: SKASrfLBYidd5rN391z4NolNW1mHxpd16Ii4aoP6l40=)
2: 3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (hash: OYr7fPU7LqGA/4X0nRg4WLnhKqVCaQ39UeYK0Ag4/eg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.crl
rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 21:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ab:2d:07:9a:c8:ef:a8:43:b1:33:18:87:a7:93:55:ac:30:aa:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476A27F6557241F0C8B13CD6474412B065E838A1
Validity
Not Before: Jun 16 18:06:08 2026 GMT
Not After : Jun 17 21:43:08 2026 GMT
Subject: CN=4B893ED623858F63C66237B0C0E603114D64C541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:90:76:3c:e6:76:ad:93:f0:8a:33:8d:18:
7c:75:a3:7b:29:61:01:60:1b:9e:8d:d6:da:96:1d:
06:a8:d1:80:5f:ac:ec:53:8b:9f:d4:db:33:de:e7:
5f:38:e5:1b:b8:34:98:34:c4:3e:28:8f:5e:b4:12:
6e:f2:b5:88:70:69:60:82:da:ed:ca:df:88:64:ba:
d9:ab:f2:1f:49:e6:7c:9b:25:05:78:31:24:4a:39:
7b:16:b2:e4:79:31:a7:bb:62:39:b1:77:28:f8:07:
1d:4a:38:d6:70:05:54:ca:86:1a:43:b8:ee:cb:e6:
b8:85:26:d9:60:08:fc:64:90:ad:03:b6:23:9c:a6:
f0:a1:99:cb:7d:57:90:10:1a:5c:ea:01:1e:e7:1f:
5f:2d:4c:b8:81:0c:84:55:6e:86:b4:dd:0a:74:fc:
ee:38:b5:ff:5b:7a:c9:21:35:12:c2:46:7d:d7:fc:
49:78:df:a6:8f:7f:49:b6:30:2b:ed:e6:65:76:5f:
8e:c6:02:53:6d:0e:4e:25:e9:d4:fa:8d:d0:01:42:
ad:38:55:b3:c3:bc:53:f0:be:3d:76:9d:66:18:1b:
05:9d:d0:ae:d4:aa:0e:53:21:03:20:40:05:a5:70:
6b:a1:5c:e3:be:06:4f:82:5f:00:39:0e:31:5f:0b:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:89:3E:D6:23:85:8F:63:C6:62:37:B0:C0:E6:03:11:4D:64:C5:41
X509v3 Authority Key Identifier:
keyid:47:6A:27:F6:55:72:41:F0:C8:B1:3C:D6:47:44:12:B0:65:E8:38:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/476A27F6557241F0C8B13CD6474412B065E838A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/476A27F6557241F0C8B13CD6474412B065E838A1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:33:87:3a:f6:08:8c:36:f9:65:a3:43:63:5a:76:8a:86:8c:
1a:97:18:6c:91:ce:d9:0d:7c:76:23:cb:77:c7:e4:02:58:44:
38:08:95:5e:4f:c1:f2:1f:1f:82:0d:f0:cb:1e:28:d0:aa:6d:
09:ec:54:5f:91:5b:b8:6d:a8:bf:d0:26:4e:d2:db:c9:eb:a5:
14:7e:9b:cf:d0:ed:a1:1c:72:2d:d2:d4:51:33:69:82:d2:de:
01:2c:35:a9:7f:68:79:7e:02:51:6a:84:58:90:bf:f4:f5:38:
6e:f0:31:21:51:0d:d7:9d:27:05:e1:78:b7:8b:4f:9b:b1:8c:
67:cb:d7:59:f4:fd:61:9b:35:36:25:f7:4b:ea:1f:bc:5d:0e:
ee:0a:3b:24:27:4c:af:dd:cb:02:bf:79:29:9f:a1:15:14:8d:
72:56:0c:8c:de:6e:e7:ea:73:7f:6b:52:35:ec:f6:38:0e:07:
b0:b7:4b:cf:09:8f:10:b7:ee:8a:bb:13:38:40:e2:be:27:26:
90:e7:73:0d:a9:0f:b7:be:fa:76:69:d4:c9:0b:ad:18:35:0f:
fb:21:57:0b:53:2e:32:53:be:e7:f4:98:60:9e:55:47:4a:46:
19:ab:6f:7c:50:99:1e:44:48:03:09:95:29:29:a5:ce:ee:c8:
08:7f:01:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:14:44 2026 by rpki-client