
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
File: 4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft (raw, json)
Hash identifier: Bq8k4Z8bJJbG2BqS2NxJ42GNiRijGNckA4PYl9pLaY8=
Subject key identifier: EB:92:DA:83:E9:8D:19:59:1A:F0:BF:1D:D4:9A:73:D9:77:60:8A:74
Authority key identifier: 4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26
Certificate issuer: /CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526
Certificate serial: 52DA9E63A2740DFEE3463C0468F38839FB2D823B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 02:35:52 +0000
Manifest this update: Wed 17 Jun 2026 02:30:52 +0000
Manifest next update: Thu 18 Jun 2026 05:16:52 +0000
Files and hashes: 1: 4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl (hash: +eP6nj/lbFIpbsMEjyBxBZbxMFVBEHdbRmy7FTJCx24=)
2: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: crz5wQlV27LIwISEyXo4hYXR+StXchnW3rusJFfd1fY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl
rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:da:9e:63:a2:74:0d:fe:e3:46:3c:04:68:f3:88:39:fb:2d:82:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D368D60EAE2B7218E9C522465DFDAD7D2DD7526
Validity
Not Before: Jun 17 02:30:52 2026 GMT
Not After : Jun 18 05:16:52 2026 GMT
Subject: CN=EB92DA83E98D19591AF0BF1DD49A73D977608A74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6f:25:d6:ef:27:fa:5a:e5:87:47:db:95:d1:
61:fa:3a:52:f9:fe:7d:d0:c2:39:27:b2:ae:db:e7:
68:e9:72:84:6b:be:6d:8f:50:f4:f5:36:b1:55:5f:
ef:82:11:e5:7f:e0:d6:ce:e1:78:e2:ca:87:5d:0b:
9a:b3:ae:d6:e1:59:c1:f2:bc:72:22:08:93:f8:31:
ab:44:6e:fa:4d:51:1f:c5:27:3b:5f:89:3a:e4:f6:
6e:18:dc:a5:4e:4e:a9:b5:5c:d0:cc:8b:22:63:fc:
a5:61:97:cc:f0:1e:bf:93:3b:2c:b4:aa:40:03:3a:
1a:3a:51:2b:e6:ea:44:68:92:f2:c2:50:be:49:a2:
36:05:e9:fe:4d:7e:b1:20:06:f5:1b:b1:a0:8c:97:
47:b1:ab:5f:c5:41:80:cb:39:e2:7c:82:29:30:92:
d9:73:f4:90:6e:c3:14:94:17:db:4a:4f:5c:07:61:
af:c5:60:22:c7:c6:62:9a:f6:da:a9:97:15:10:8b:
14:20:a6:a3:e4:e7:b1:da:ff:12:1a:29:53:f0:bb:
e4:eb:1c:62:60:ec:d8:86:b9:61:dd:57:22:a6:9c:
dc:ce:18:9a:f7:04:e6:11:9e:7f:57:21:a2:bb:ac:
c0:db:13:36:86:3a:19:b5:f9:2d:2b:99:4b:91:de:
0c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:92:DA:83:E9:8D:19:59:1A:F0:BF:1D:D4:9A:73:D9:77:60:8A:74
X509v3 Authority Key Identifier:
keyid:4D:36:8D:60:EA:E2:B7:21:8E:9C:52:24:65:DF:DA:D7:D2:DD:75:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/4D368D60EAE2B7218E9C522465DFDAD7D2DD7526.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:df:f9:53:59:f5:8f:8d:3b:2a:f2:c7:29:c5:ca:20:e5:fb:
18:bf:d8:4a:6a:6c:e4:e6:8c:8d:06:ac:3a:12:b9:ff:08:6e:
c3:10:97:c1:c9:40:dd:f9:36:f9:df:93:92:99:60:80:7c:93:
00:7d:f8:a1:4a:67:1e:36:c2:18:e1:e1:a3:47:44:1d:3d:39:
68:2b:94:d8:28:01:69:8b:1d:fe:47:a7:9e:3e:a9:79:52:82:
22:bc:41:01:f5:bb:d6:e0:5c:a6:14:d4:30:c4:92:70:cf:16:
b5:d1:18:49:bc:89:b9:2c:a8:24:cc:00:bd:02:e5:44:13:b4:
1a:b6:fc:50:8c:56:86:7f:b0:c9:36:32:0a:f1:a4:ef:58:49:
94:63:ac:3f:67:70:e5:4e:06:95:81:9c:0a:42:1c:e7:81:08:
ba:ad:b3:9d:d7:49:10:53:d3:8a:c5:7a:b2:cf:f5:81:ce:d4:
9d:2a:40:b8:ed:a6:49:5e:7e:83:1d:a8:24:ee:8b:35:ae:7a:
ad:de:b8:e3:6a:f3:49:c4:78:bf:9d:9f:08:dd:41:c2:14:b8:
92:5c:11:04:67:7e:37:6c:46:3e:5b:eb:5a:1a:fe:94:fd:3c:
e0:aa:02:38:0d:f0:3d:39:13:c1:0b:54:be:a5:08:b6:eb:17:
66:ce:68:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:43:20 2026 by rpki-client