
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
File: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft (raw, json)
Hash identifier: EqXJovftQ2fen631WMiTBzP9FN4DY8NsyTGkAAPMHAE=
Subject key identifier: 7D:E6:31:E7:55:B0:32:80:2B:F2:84:74:9F:8A:0C:D6:5B:67:29:F0
Authority key identifier: B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30
Certificate issuer: /CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230
Certificate serial: 694682EDC65EDF05F6446DD97DB1BFF741CD64EA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
Manifest number: 3A
Signing time: Sun 14 Jun 2026 08:18:03 +0000
Manifest this update: Sun 14 Jun 2026 08:13:03 +0000
Manifest next update: Mon 15 Jun 2026 08:33:03 +0000
Files and hashes: 1: B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl (hash: 0jo7XnyMt+2lcOcIWfPSjRi/2vfOhBvkeIE06w+5G/U=)
2: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: BKnEE3t5/yyaN3HJnwE9Dy+SO+1ms0WO08R6OxZOm7o=)
3: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Gy6gsEzVMHwZHSwsQeHdnkzzEfB+MjqsZcuu2XFRbNQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl
rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 07:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:46:82:ed:c6:5e:df:05:f6:44:6d:d9:7d:b1:bf:f7:41:cd:64:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230
Validity
Not Before: Jun 14 08:13:03 2026 GMT
Not After : Jun 15 08:33:03 2026 GMT
Subject: CN=7DE631E755B032802BF284749F8A0CD65B6729F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:35:cb:1a:89:e9:13:c4:34:d8:a7:c6:52:c2:
ae:de:d4:9d:7b:9a:3b:e6:5c:28:e1:16:f1:e4:23:
a6:0f:df:49:99:ee:09:08:cf:86:1b:a4:34:a6:a8:
77:e7:53:32:a8:50:07:32:c0:12:7f:c0:5c:37:14:
b2:b7:97:1b:77:36:2f:3f:86:41:cf:a2:e0:06:ae:
74:cc:29:c5:55:e3:41:7f:7b:2d:12:59:e4:20:45:
09:1f:b0:a8:ee:e9:a5:ef:e2:43:9f:22:48:51:fa:
61:49:2c:65:1d:06:e1:04:ea:34:f1:d4:cc:63:e5:
9f:dc:54:cb:37:fd:10:00:04:aa:d5:bd:b2:ee:8f:
52:ca:3c:68:0b:d8:0c:16:1f:80:5c:21:86:17:35:
bf:36:8a:30:5b:39:65:20:80:c8:37:37:2e:ed:dc:
1c:d9:b7:d9:39:a4:44:e8:12:b8:c4:bb:1e:0d:81:
a0:44:49:fb:4a:51:4b:1a:d8:d4:52:36:fb:2a:06:
61:20:27:8b:e0:ba:10:ef:6b:67:60:c7:04:50:e6:
13:30:42:24:1b:57:4f:ce:6a:d0:74:50:d0:73:7a:
7a:6b:f2:54:8a:59:b7:a1:ee:87:4f:6a:74:53:f3:
33:45:88:fc:98:bd:2e:cf:25:50:9d:90:53:36:15:
6a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E6:31:E7:55:B0:32:80:2B:F2:84:74:9F:8A:0C:D6:5B:67:29:F0
X509v3 Authority Key Identifier:
keyid:B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f4:7a:b2:29:72:f9:ce:29:aa:d1:cc:78:48:b6:0d:e6:9d:
62:c2:43:b3:56:5a:97:de:cc:80:f8:ac:0f:64:da:88:6c:08:
ba:8b:5a:da:6c:64:48:f7:66:c9:df:a4:24:4b:b6:02:51:d9:
a5:33:6b:da:f1:e8:e2:ce:86:58:1e:cf:ad:05:89:7f:d3:2f:
c8:f3:d9:3f:7f:6d:71:9a:7f:b9:41:56:6c:05:71:24:89:0b:
90:5c:1e:1b:47:87:5a:83:e2:64:10:bd:ae:1f:02:35:d5:d4:
b8:01:99:75:09:56:8e:98:90:cb:10:8f:0f:ea:80:37:f9:5c:
97:0d:f4:09:25:62:f9:5c:02:31:04:6f:fd:b0:33:92:c2:80:
77:27:d8:5c:76:15:cc:f3:04:ea:81:d1:23:14:6b:5f:ed:77:
98:cc:b4:69:94:c4:fa:60:2d:3a:66:ab:8b:ee:28:a7:5b:8e:
36:60:85:7d:e5:7c:f2:f4:e9:d3:aa:55:f5:de:64:9d:ae:df:
86:01:be:3a:a4:27:78:1e:00:37:5f:c7:8a:35:6e:12:13:1b:
07:94:9b:df:08:b4:c8:7a:29:1e:52:39:74:9f:27:59:57:d2:
d6:85:f8:68:5d:09:77:39:da:a6:fd:91:d0:d6:72:79:64:ab:
b5:c0:58:52
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaUaC7cZe3wX2RG3ZfbG/90HNZOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRDNkQwNjAzNzU4MkZEMEY3MjIzOUI3QUVEQ0JEMEYz
MzQyRTIzMDAeFw0yNjA2MTQwODEzMDNaFw0yNjA2MTUwODMzMDNaMDMxMTAvBgNV
BAMTKDdERTYzMUU3NTVCMDMyODAyQkYyODQ3NDlGOEEwQ0Q2NUI2NzI5RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLNcsaiekTxDTYp8ZSwq7e1J17
mjvmXCjhFvHkI6YP30mZ7gkIz4YbpDSmqHfnUzKoUAcywBJ/wFw3FLK3lxt3Ni8/
hkHPouAGrnTMKcVV40F/ey0SWeQgRQkfsKju6aXv4kOfIkhR+mFJLGUdBuEE6jTx
1Mxj5Z/cVMs3/RAABKrVvbLuj1LKPGgL2AwWH4BcIYYXNb82ijBbOWUggMg3Ny7t
3BzZt9k5pEToErjEux4NgaBESftKUUsa2NRSNvsqBmEgJ4vguhDva2dgxwRQ5hMw
QiQbV0/OatB0UNBzenpr8lSKWbeh7odPanRT8zNFiPyYvS7PJVCdkFM2FWq1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfeYx51WwMoAr8oR0n4oM1ltnKfAwHwYDVR0j
BBgwFoAUtMbQYDdYL9D3Ijm3rty9DzNC4jAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTYzNjU1ZjEtMzhiNi00NDE1LThmYWYtMmI1YjkxNTNlNTJkLzAvQjRDNkQwNjAz
NzU4MkZEMEY3MjIzOUI3QUVEQ0JEMEYzMzQyRTIzMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNEM2RDA2MDM3NTgyRkQwRjcyMjM5QjdBRURDQkQwRjMzNDJF
MjMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm
YWYtMmI1YjkxNTNlNTJkLzAvQjRDNkQwNjAzNzU4MkZEMEY3MjIzOUI3QUVEQ0JE
MEYzMzQyRTIzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAH0erIpcvnOKarRzHhItg3mnWLCQ7NWWpfe
zID4rA9k2ohsCLqLWtpsZEj3ZsnfpCRLtgJR2aUza9rx6OLOhlgez60FiX/TL8jz
2T9/bXGaf7lBVmwFcSSJC5BcHhtHh1qD4mQQva4fAjXV1LgBmXUJVo6YkMsQjw/q
gDf5XJcN9AklYvlcAjEEb/2wM5LCgHcn2Fx2FczzBOqB0SMUa1/td5jMtGmUxPpg
LTpmq4vuKKdbjjZghX3lfPL06dOqVfXeZJ2u34YBvjqkJ3geADdfx4o1bhITGweU
m98ItMh6KR5SOXSfJ1lX0taF+GhdCXc52qb9kdDWcnlkq7XAWFI=
-----END CERTIFICATE-----
Generated at Sun Jun 14 12:18:48 2026 by rpki-client