
$ rpki-client -vvf rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft
File: 4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft (raw, json)
Hash identifier: W23eSQwgMZrD35QyoEjWXW+eNhmyiYbvHmrIzo1I3sE=
Subject key identifier: 5F:56:C4:17:16:00:43:40:89:6A:85:E1:BC:4B:C8:A2:51:E5:DC:8F
Authority key identifier: 42:72:D3:49:E0:4B:3A:5D:02:56:1E:E1:92:95:E0:FD:26:B3:7C:BE
Certificate issuer: /CN=4272D349E04B3A5D02561EE19295E0FD26B37CBE
Certificate serial: 5568932B9914FB6C78DDAFEBC3D14A0DE1723E80
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 23:32:35 +0000
Manifest this update: Tue 16 Jun 2026 23:27:35 +0000
Manifest next update: Thu 18 Jun 2026 02:27:35 +0000
Files and hashes: 1: 3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (hash: psydRP9iI2xqdgTYldVyaNuPRMq6F5KFPK4XNBT7jw0=)
2: 4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl (hash: /TRPezjoNI3lkqNTghncCxh+re5fPoJMhyhW3fo+MUo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl
rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 02:27:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:68:93:2b:99:14:fb:6c:78:dd:af:eb:c3:d1:4a:0d:e1:72:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4272D349E04B3A5D02561EE19295E0FD26B37CBE
Validity
Not Before: Jun 16 23:27:35 2026 GMT
Not After : Jun 18 02:27:35 2026 GMT
Subject: CN=5F56C41716004340896A85E1BC4BC8A251E5DC8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:14:72:91:93:fe:66:4e:fa:fa:eb:34:e9:
65:a7:2c:54:45:28:92:8c:21:2c:1b:23:6b:62:5f:
bf:01:89:b5:dc:8d:d6:ea:d0:3f:43:23:11:ec:60:
9b:81:5d:ea:7e:aa:82:19:da:fa:cd:51:32:91:66:
00:3e:9d:bc:f9:87:b4:4b:83:6b:71:dd:d9:92:e2:
81:bb:13:94:42:f6:a7:ca:00:bb:24:27:a4:64:e2:
12:39:f9:e1:f3:ac:ba:b0:fa:bd:15:46:77:21:c6:
a5:be:ad:49:4b:a1:41:5f:d5:48:f1:6a:dd:32:9d:
ca:cc:9a:40:11:77:61:c9:f3:27:7c:17:f6:31:e9:
b6:13:57:6c:4c:66:e3:3d:ea:c9:5c:ed:a2:28:33:
de:6d:bf:ab:a1:09:93:76:fb:5e:9b:b0:9b:e2:37:
f3:d0:24:64:0e:06:fc:19:2f:3c:ce:25:48:82:39:
1b:2f:83:92:f5:ba:fe:c9:3c:1d:2d:21:04:e7:f5:
d7:95:a5:bb:c0:ca:24:e0:e2:0d:6f:6e:67:db:85:
a1:d5:1b:37:9b:c8:7e:b1:1e:96:68:a4:b2:9d:6a:
80:6f:81:98:de:04:ae:71:83:fe:71:f6:6a:1c:3e:
b5:25:69:2a:9b:49:3d:59:09:a5:e1:dd:7e:1d:e2:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:56:C4:17:16:00:43:40:89:6A:85:E1:BC:4B:C8:A2:51:E5:DC:8F
X509v3 Authority Key Identifier:
keyid:42:72:D3:49:E0:4B:3A:5D:02:56:1E:E1:92:95:E0:FD:26:B3:7C:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:92:a7:53:29:f0:77:a5:e3:fc:71:11:22:6b:41:c6:85:4f:
26:3f:c5:93:1a:82:39:82:44:4f:69:11:b6:0a:cf:c0:7a:8c:
c3:0e:06:0a:66:6b:81:7b:04:11:27:b9:d5:3e:e4:85:f2:dc:
fb:03:ba:4a:ff:bf:d8:47:12:1a:4e:29:33:d3:d4:fd:bd:f7:
11:16:53:b5:02:20:18:36:5d:3e:17:f2:d2:be:ea:d3:58:16:
7f:8b:ad:26:5b:52:c2:9c:2d:2e:81:68:d3:f2:ac:5b:cb:f7:
eb:af:fd:7e:c2:de:de:45:ee:80:d1:bf:c7:9f:31:19:dc:a7:
bb:1a:05:2f:59:d2:15:4a:e7:71:4d:3f:d3:9c:3c:9d:9d:8e:
11:8a:20:02:d0:f3:c7:56:7c:e5:be:f1:a8:ca:9f:73:03:ec:
24:fc:9b:db:66:36:28:1b:5d:39:a7:b8:23:69:b8:fe:88:a0:
15:af:eb:71:60:b4:c1:ee:12:af:a7:64:e6:32:a9:70:04:e9:
9a:33:d5:d2:81:ff:cf:b4:39:0e:78:7e:a5:b8:d7:c9:5f:0b:
ad:79:7a:1f:74:6f:cf:46:42:47:3d:73:2c:56:ea:9b:01:15:
d2:6c:d2:47:4d:f9:de:60:9a:36:97:ba:eb:2a:b4:ea:2f:25:
af:df:e7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:33 2026 by rpki-client