
$ rpki-client -vvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
File: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft (raw, json)
Hash identifier: dH2aT1O8dk3bnkISXY4AQF4e7X372gRiSXWFNCjZPvE=
Subject key identifier: DE:62:CE:40:6C:51:D5:C7:3D:DE:2D:59:28:A0:35:B2:95:01:20:9D
Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93
Certificate issuer: /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
Certificate serial: 3E23E8669AC1C43743AF5457F453270EF719758D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
Manifest number: 38
Signing time: Fri 12 Jun 2026 22:07:05 +0000
Manifest this update: Fri 12 Jun 2026 22:02:05 +0000
Manifest next update: Sun 14 Jun 2026 01:27:05 +0000
Files and hashes: 1: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (hash: 66aA75QUcB6PMDAVxPn0l4kedL6JSinUSrD/FjvLrOY=)
2: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: q58scCW7sBCYqA/7Gndz9LKwymI96P89Wvy+Agpx7Mc=)
3: 4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl (hash: 5TyGpE/gbL9TJ70AzdTzljaodqCOnrgo/8Y6koLGTQ8=)
4: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: W25/R8+HpdSmi7KzPEgroFOQ480UBFrJ5yvQhWXeJXQ=)
5: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: 8L5+IN2jLctjeA6EMT3ij4Mxdk3Uel+Y6ekXcJbLdyM=)
6: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (hash: JSmaKD9Eb9InTbBwEjQnvpvNRxQcyoooyCEpIv/JUMs=)
7: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (hash: IW6kFtW7lOTzfvLnRGitZxVOzbp+5ns5aGwVJLG1nQc=)
8: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (hash: urgfoaYh1o6UsdX1mUmdbsm+CcX88/2KXBm9Z1HG15I=)
9: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: WalfT1mL5d9q2qz66c+NikOGnrlzK5PgkQomXo+2N10=)
10: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: G52CYZhUDrFCUCiXjLaytTYVhllqOW5hgj+MEiJQrDA=)
11: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: F+gSAhyteOkmJD/CsnwawpfqMUKtHHVAzkHCqnUyAyI=)
12: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: g1I0bBx5cjAJOzumuYvYP7lbpo4MSyJWdm8CedSYPpI=)
13: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: FpwgktK1DQqLal+31qD50dL+9IE6iqH71YHo/zowge0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl
rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:23:e8:66:9a:c1:c4:37:43:af:54:57:f4:53:27:0e:f7:19:75:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
Validity
Not Before: Jun 12 22:02:05 2026 GMT
Not After : Jun 14 01:27:05 2026 GMT
Subject: CN=DE62CE406C51D5C73DDE2D5928A035B29501209D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:f3:cb:56:00:4a:b9:5c:3b:80:e7:10:dc:
a9:4e:0c:cc:21:04:7e:40:af:3b:a4:a0:05:06:97:
9d:35:9b:7a:9c:ec:86:eb:ef:c2:0e:fd:fb:ec:87:
62:fa:1a:2f:10:6b:ec:f8:af:49:fb:43:a7:92:27:
fb:98:06:01:10:ac:b0:c4:43:b5:05:c1:ba:9d:9e:
9b:15:3c:39:c7:0f:5b:f8:6c:70:cb:f8:64:75:94:
1e:3a:02:6a:33:22:16:5a:9d:b6:11:f7:89:1d:f9:
b6:f3:f2:a4:2b:89:b0:27:be:63:67:89:20:b4:e1:
ba:45:d6:bb:5b:fa:57:ed:4a:ae:b8:80:fa:9e:d9:
8e:c1:6f:3d:40:33:6a:89:b0:66:eb:04:3c:ba:ad:
5e:2b:63:18:d1:cb:d2:92:f3:71:c6:c2:55:9d:bb:
75:d9:7e:9d:39:70:d7:83:ef:f9:11:20:00:79:91:
20:e2:60:05:92:30:55:22:9d:6a:c2:25:b5:76:4a:
77:74:86:6b:5b:e2:fb:10:6b:87:bd:d5:14:a0:54:
37:cd:a5:4e:a2:09:d3:28:45:50:f8:a5:85:03:ee:
d2:ae:4e:ff:ab:d8:e4:e1:94:c5:bc:d8:48:07:fa:
3d:67:ce:41:34:41:6f:e5:a8:9e:5b:4e:46:46:1e:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:62:CE:40:6C:51:D5:C7:3D:DE:2D:59:28:A0:35:B2:95:01:20:9D
X509v3 Authority Key Identifier:
keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f7:f5:44:99:44:de:7c:e9:12:d0:db:5a:8b:ec:e7:af:80:
6e:13:47:e7:29:68:30:d1:83:29:8e:be:71:96:30:b7:dd:c1:
86:8c:3d:d6:be:ba:95:9c:c5:0d:7f:8b:19:91:55:a1:63:29:
29:4e:c6:46:64:34:a3:b7:b5:6f:c3:7f:70:ab:37:7d:60:5f:
fd:af:79:a6:0a:b4:8e:31:b7:91:7a:33:37:f5:59:68:a9:d7:
b7:5d:a6:1b:01:73:b4:a9:f1:01:e3:83:12:8b:ba:20:e0:d1:
a2:c6:8f:61:10:9d:ce:14:aa:45:7f:e6:28:e8:9c:8c:f0:f3:
a7:b2:03:8d:db:df:11:66:20:39:b5:15:b0:5f:a1:25:54:00:
bd:e1:b5:3a:cd:da:23:b5:34:e3:3f:60:b7:e9:9b:74:1b:c1:
ea:ac:ac:27:eb:91:27:51:2f:e9:2d:5f:da:2a:99:4c:50:a5:
30:38:f7:d3:2f:26:9a:4e:c1:3a:4e:c5:77:b2:84:b7:29:65:
6b:8a:ed:87:5c:e4:df:ed:43:44:ae:0e:cd:50:ad:6c:19:d5:
72:3a:58:3b:57:38:a5:22:ae:2c:27:46:a1:75:6e:21:6e:5f:
82:6f:e9:77:02:3a:b5:4e:3f:b4:1e:72:fc:1c:2a:9e:f0:84:
8b:de:b7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:38:35 2026 by rpki-client