
$ rpki-client -vvf rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft
File: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft (raw, json)
Hash identifier: F50GxzunUowx0x8tMk8VEjFA4PY7o5/38+x6G5bIL3o=
Subject key identifier: A6:50:45:E6:C2:92:9E:94:29:49:42:4F:1B:B4:D8:8F:AB:2C:4B:96
Authority key identifier: 02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E
Certificate issuer: /CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E
Certificate serial: 46E335BA32739B351ED810238ACAA4702577994A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 07:17:52 +0000
Manifest this update: Sat 13 Jun 2026 07:12:52 +0000
Manifest next update: Sun 14 Jun 2026 08:24:52 +0000
Files and hashes: 1: 020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl (hash: PssLdEhnh3vCRJcebKHUAh0ZiN1m3+YWMZYK20M4Puk=)
2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: ZP3rmLF9cy6fjQhv3gmX6ZweiIwsNbdnkePWQCdw+7I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl
rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 08:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e3:35:ba:32:73:9b:35:1e:d8:10:23:8a:ca:a4:70:25:77:99:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=020403F6DD56F0D5C52C5937B517A4C1B81E8B2E
Validity
Not Before: Jun 13 07:12:52 2026 GMT
Not After : Jun 14 08:24:52 2026 GMT
Subject: CN=A65045E6C2929E942949424F1BB4D88FAB2C4B96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:ec:b0:ea:a1:de:f2:22:b8:7f:08:f6:68:
2a:51:52:39:70:7f:05:15:bc:72:88:49:23:ec:b7:
97:fa:0e:cb:36:85:1a:31:fe:6d:63:cd:82:b6:91:
9a:fd:e9:10:16:50:e3:0a:74:bd:6d:1a:c3:f7:29:
9d:4e:fc:5e:aa:b0:10:6d:37:07:0b:20:a8:a7:fa:
21:97:e3:70:8a:b5:6c:f2:29:92:3b:5d:9f:04:ee:
46:95:2d:e2:77:c5:11:73:59:d2:25:99:21:dd:a7:
b3:53:74:e4:40:19:5d:b8:92:ad:80:10:97:b7:2b:
71:10:5d:43:50:7d:73:f7:f9:59:28:e6:72:0f:76:
57:8f:60:fe:36:01:c9:92:a8:d9:41:51:22:34:e3:
9e:53:6d:2a:3f:be:5f:88:62:35:9e:52:74:c6:9a:
2e:32:ea:d6:0a:ed:b9:ea:04:88:d2:2b:a3:da:c1:
e8:ac:2f:6a:1c:2b:e7:a0:2e:c8:31:1b:5b:a0:59:
7f:7a:fd:16:27:13:1b:98:16:1f:e4:1f:6b:f2:05:
35:a3:4f:c6:86:47:ce:ff:5c:e2:36:19:1c:55:e5:
db:be:99:b2:97:8f:72:71:61:60:a7:03:7a:9d:97:
67:ce:4b:b9:f7:4e:86:36:b2:26:27:1d:bf:16:04:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:50:45:E6:C2:92:9E:94:29:49:42:4F:1B:B4:D8:8F:AB:2C:4B:96
X509v3 Authority Key Identifier:
keyid:02:04:03:F6:DD:56:F0:D5:C5:2C:59:37:B5:17:A4:C1:B8:1E:8B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/020403F6DD56F0D5C52C5937B517A4C1B81E8B2E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:16:74:e8:91:d8:cc:7a:84:47:19:f0:73:60:a9:1d:cd:52:
5c:37:52:e5:0e:94:40:50:25:b6:63:a2:58:db:13:49:2e:9e:
0f:11:3e:96:d2:3c:c9:7d:6e:c5:0d:5d:bb:be:5b:79:c9:54:
d4:36:87:51:eb:0e:08:a2:ad:54:a3:44:cd:44:75:dc:c2:44:
90:9e:89:77:ac:ed:86:a5:33:0a:26:3d:13:09:d9:2e:3c:b9:
07:3f:50:27:f9:3b:30:c2:1f:4e:ab:d0:8e:e4:50:f9:f7:4f:
25:d8:f0:76:55:8f:a7:e2:3c:d3:60:45:6f:37:4f:2b:fc:36:
61:91:32:8e:af:f3:9b:1e:72:20:d3:c9:dd:51:cf:48:1f:1d:
bf:b4:33:52:f5:ef:89:66:26:90:d9:09:b4:66:c8:20:12:d5:
7f:b2:88:98:86:04:10:78:34:58:bf:3e:4f:9b:e2:9f:b8:85:
b6:74:80:9e:7f:36:2d:ef:03:bc:97:e4:39:ac:64:c9:67:2f:
71:a6:d9:ee:09:74:67:b2:28:9b:91:c3:bc:07:f9:61:05:cf:
b0:11:ab:52:73:9b:53:c1:7b:be:72:32:8e:3c:ad:50:67:c8:
fe:7a:c1:01:29:01:c3:c9:b6:b2:5f:20:cf:2d:bf:bc:9d:ff:
92:65:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:53:29 2026 by rpki-client