
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
File: 04D52083D82721F61634E6629E16C7C7A870B9F5.mft (raw, json)
Hash identifier: 71e2N8sb44h9gwf1LchBNKdfTQe+BCp77oOBChq+hnE=
Subject key identifier: E4:70:91:48:5E:1B:31:2A:16:5A:EF:F2:53:5F:AD:13:20:9F:64:A6
Authority key identifier: 04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5
Certificate issuer: /CN=04D52083D82721F61634E6629E16C7C7A870B9F5
Certificate serial: 7CF08109860420A23D315B26455CAB72DC983F17
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 08:43:31 +0000
Manifest this update: Wed 17 Jun 2026 08:38:31 +0000
Manifest next update: Thu 18 Jun 2026 09:30:31 +0000
Files and hashes: 1: 04D52083D82721F61634E6629E16C7C7A870B9F5.crl (hash: e4hf24O+55EW1DF06lq3JhoyoOTJSMiuV+vBBw85Uwc=)
2: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: VKlwIPdpyMpqk0maSmWSiVv4EZTH1WpK0M+m3jBjjUU=)
3: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: JXl9nF73Wg0ANBBDSP3R1eZt9u9/t+JbOCpzL0EVDI8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl
rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f0:81:09:86:04:20:a2:3d:31:5b:26:45:5c:ab:72:dc:98:3f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04D52083D82721F61634E6629E16C7C7A870B9F5
Validity
Not Before: Jun 17 08:38:31 2026 GMT
Not After : Jun 18 09:30:31 2026 GMT
Subject: CN=E47091485E1B312A165AEFF2535FAD13209F64A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:b3:b4:f6:18:44:1b:51:bf:99:b6:87:99:
7e:90:d2:d5:c2:3a:82:30:50:4a:ee:07:b4:f8:75:
b3:de:cd:c7:74:60:98:90:d8:d4:de:0f:14:79:0a:
4c:f3:34:39:49:15:32:c7:7e:b3:0e:98:9b:9a:4d:
66:7e:b8:34:37:73:4b:23:5b:b5:fb:7d:f4:ef:87:
27:e2:a9:3b:22:ae:64:c6:d3:7d:f8:b7:73:e2:6f:
8a:83:b9:c0:0b:51:2f:1d:fe:f4:7b:bf:cd:17:9b:
ba:21:7f:08:88:5d:41:51:8e:85:d3:7a:6e:11:53:
0a:89:45:a7:1d:1e:af:79:64:f0:52:d4:01:29:e2:
c5:25:60:58:0e:fc:ee:c7:75:36:54:cf:a6:58:2a:
75:c1:85:98:b1:b4:0e:e8:35:17:ee:48:77:e1:45:
b9:c5:97:3e:5d:74:07:02:a3:64:55:c0:5f:32:fd:
9c:9b:1f:d8:ed:4b:21:77:70:16:62:20:80:2e:a7:
f2:1b:79:fa:72:3e:26:f9:23:b5:56:82:82:ce:70:
76:d9:65:9e:73:97:a8:0f:99:27:fe:02:4f:bb:d3:
57:22:ee:19:60:29:7c:97:92:96:5f:ba:bd:ab:22:
d6:f5:c1:06:9b:a6:82:d1:fe:42:2e:48:b2:3b:41:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:70:91:48:5E:1B:31:2A:16:5A:EF:F2:53:5F:AD:13:20:9F:64:A6
X509v3 Authority Key Identifier:
keyid:04:D5:20:83:D8:27:21:F6:16:34:E6:62:9E:16:C7:C7:A8:70:B9:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04D52083D82721F61634E6629E16C7C7A870B9F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/04D52083D82721F61634E6629E16C7C7A870B9F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:60:f2:2f:eb:39:3a:17:f2:9d:55:c3:67:4f:88:0c:02:2f:
5c:0c:d7:89:f8:fd:6c:f5:b7:43:61:59:32:d3:72:8b:4c:ae:
6c:78:7f:ac:9d:27:85:f1:c5:d5:ea:09:60:79:d5:9c:c3:59:
60:c6:17:87:a1:36:72:52:1e:12:0d:15:04:90:2d:ad:c1:82:
9a:a9:5e:67:9c:8b:0b:7d:65:6d:b9:62:55:83:f0:93:9f:3e:
21:bd:e2:30:f9:31:29:17:8b:c7:42:36:35:91:59:9e:36:ed:
09:94:70:14:6f:b1:2c:c6:a6:9f:79:68:d4:98:aa:d8:c7:82:
92:11:e0:60:29:79:73:da:0a:36:9c:cd:77:f9:7f:30:3d:7e:
bc:63:e8:3a:be:b8:a0:a7:ac:b8:3b:9b:63:90:d4:0b:0b:d8:
96:3e:75:86:f9:b8:87:d6:78:41:c7:7d:ab:bc:5e:b8:b7:1f:
83:c7:42:e5:fe:2b:02:3c:f1:b4:04:23:4e:d2:95:bc:f9:e2:
b4:4f:fd:fd:c7:27:3b:c3:67:08:a3:21:4d:0e:22:f5:bf:02:
c5:ec:45:3a:d6:de:d2:89:d5:16:e2:29:7a:9c:ac:40:b0:98:
78:b3:c7:98:e5:22:f8:78:27:4e:6f:b0:6d:34:b0:cc:d4:71:
93:d9:b5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:42:19 2026 by rpki-client