
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
File: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft (raw, json)
Hash identifier: e3FOWDL+mDRCU3fiTU1FHe2ph1vwY9RnVJOTn8lC9v4=
Subject key identifier: 53:0C:BD:A6:E7:B8:92:EB:13:D1:C1:4C:48:2F:A9:A6:6F:7C:AF:A3
Authority key identifier: 4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2
Certificate issuer: /CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2
Certificate serial: 2CF23BB27564F965F6D8D8DEC32874FE7DB96D07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 20:49:24 +0000
Manifest this update: Sat 13 Jun 2026 20:44:24 +0000
Manifest next update: Sun 14 Jun 2026 22:12:24 +0000
Files and hashes: 1: 4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl (hash: EMAtKTwwaGSpLVj6ScAXArQEWJbf3tCeeCx/kHzEYu4=)
2: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (hash: ry2+KDu888rhvRXyvEVBH/F8IFRWnEG2799s3X5mVKA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl
rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f2:3b:b2:75:64:f9:65:f6:d8:d8:de:c3:28:74:fe:7d:b9:6d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A015B0B0A08D1B3F7EA3549B968DDE7663808D2
Validity
Not Before: Jun 13 20:44:24 2026 GMT
Not After : Jun 14 22:12:24 2026 GMT
Subject: CN=530CBDA6E7B892EB13D1C14C482FA9A66F7CAFA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:88:66:d8:fa:31:8e:35:19:6a:e4:22:0e:
cd:50:0f:a5:f0:a0:d4:3e:3e:37:87:7e:a1:9b:7a:
76:bc:60:09:5e:00:17:f7:f5:dd:e6:a7:c0:2e:92:
cf:c6:84:e4:3b:e1:f4:05:3b:16:4c:4e:28:a1:93:
80:3f:26:55:07:97:c2:f2:63:10:82:06:86:be:02:
b8:d7:da:c9:19:99:b4:47:9e:a8:3e:cb:15:10:91:
c4:72:18:9e:9e:4d:b5:fc:26:75:02:94:b6:6c:0d:
48:60:3b:1e:48:32:26:03:52:ea:eb:45:ea:d0:68:
8f:c7:fc:e0:90:ad:dd:73:3f:44:49:e5:aa:86:01:
5b:b3:27:2f:eb:24:df:55:9f:da:aa:d1:58:7c:c6:
d0:b6:00:6f:61:6f:cd:da:19:c6:eb:0a:24:1f:a3:
f8:77:5e:cb:35:32:69:72:53:d0:50:e4:1a:5d:d9:
f5:5f:54:8d:41:62:1f:ec:bf:d4:d8:f6:1b:e2:30:
3d:a5:00:87:88:5b:3f:a7:c6:28:2a:dc:3e:b0:6f:
d3:b5:81:de:00:f5:6b:06:a8:03:1f:5b:ca:58:fd:
ef:d6:d6:b9:67:45:e7:65:6f:66:4e:ba:50:f3:23:
fa:3b:dd:1a:dd:16:3c:6f:2a:e8:97:e4:cd:a0:0a:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0C:BD:A6:E7:B8:92:EB:13:D1:C1:4C:48:2F:A9:A6:6F:7C:AF:A3
X509v3 Authority Key Identifier:
keyid:4A:01:5B:0B:0A:08:D1:B3:F7:EA:35:49:B9:68:DD:E7:66:38:08:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/4A015B0B0A08D1B3F7EA3549B968DDE7663808D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f6:17:27:f7:a8:6d:b8:51:45:bc:86:15:27:56:31:92:57:
ad:38:04:48:1f:4a:bc:97:bf:8f:ea:da:0c:1d:bb:4c:f7:15:
99:f3:80:d5:06:26:64:7b:6e:a5:b0:a7:fd:c9:5f:4a:2f:5a:
a8:00:fb:b9:a1:bd:0b:e5:14:ea:b5:c6:7b:16:d4:32:fb:69:
51:c8:d9:ad:d7:37:65:df:51:9d:3c:ef:a7:e1:bb:84:1d:4b:
13:76:a7:08:71:19:c1:25:72:45:f6:34:90:85:29:dd:2c:0a:
ea:f8:15:05:7a:bc:7f:90:bd:6a:1f:26:d2:44:85:e2:25:23:
0f:e8:8a:de:9c:ff:8e:59:07:fe:71:3e:03:c1:18:a1:c5:2d:
01:57:4c:c6:07:01:c0:ef:f5:f2:d9:25:f0:2d:12:1c:e0:92:
47:61:74:9d:ca:3f:42:9e:6d:e0:22:75:cc:01:60:92:f1:21:
a9:50:e7:56:ef:24:e5:15:dc:cc:95:2b:4c:16:ca:49:23:c4:
40:d1:c5:a5:fd:1c:a3:bb:30:ff:37:f0:17:16:87:6d:f1:34:
6f:c8:91:c4:9b:16:24:4c:f2:6c:69:27:49:16:96:cc:1b:34:
4a:d4:c3:bf:48:48:ab:55:71:49:ee:aa:17:29:50:c0:02:ba:
3b:68:73:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:40:33 2026 by rpki-client