
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
File: 468662DE4789E1663881A25708CA5FBF0EC39637.mft (raw, json)
Hash identifier: POfTdCgs8KVx6S3/olejqdTcTtJTyDLPSUrPUnvmlFs=
Subject key identifier: 11:8E:D5:BE:61:9B:5A:2E:FA:7A:52:BD:5B:53:CB:7C:AD:92:21:ED
Authority key identifier: 46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37
Certificate issuer: /CN=468662DE4789E1663881A25708CA5FBF0EC39637
Certificate serial: 3AF5841387773625B4C9B4F7EF2660B994193ECC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 07:52:18 +0000
Manifest this update: Wed 17 Jun 2026 07:47:18 +0000
Manifest next update: Thu 18 Jun 2026 10:18:18 +0000
Files and hashes: 1: 468662DE4789E1663881A25708CA5FBF0EC39637.crl (hash: KUbUUrVqn9q0qGbItGt/VybfD3k8sovu5EJPErTytr8=)
2: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: TDJxU3359vrwAFB04SP7SYHre1Ki2hvpSBCNPL07USs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl
rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 04:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f5:84:13:87:77:36:25:b4:c9:b4:f7:ef:26:60:b9:94:19:3e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468662DE4789E1663881A25708CA5FBF0EC39637
Validity
Not Before: Jun 17 07:47:18 2026 GMT
Not After : Jun 18 10:18:18 2026 GMT
Subject: CN=118ED5BE619B5A2EFA7A52BD5B53CB7CAD9221ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:45:25:5c:49:f5:68:ed:aa:fd:6a:7e:b3:
1e:c1:89:91:a8:5c:14:ae:cd:88:8b:8c:79:c7:21:
ed:fd:84:09:16:3f:96:7b:79:ba:40:80:58:d4:ba:
4e:c2:c6:bd:18:a3:1b:57:f4:bb:09:76:b0:b3:ad:
c0:fa:7e:7d:f7:25:17:b0:a1:05:97:ee:f8:be:e0:
6c:03:71:84:93:34:07:c6:81:bc:4e:f8:83:25:ed:
b7:64:ff:e4:f7:4e:ad:96:55:ca:ed:4a:94:e1:88:
f4:64:fb:50:00:38:90:65:b6:72:a7:71:1e:57:19:
f1:2d:a3:e9:ed:2b:58:78:ff:a3:b5:90:b5:6d:06:
33:ee:2a:ba:55:da:cb:2a:ca:73:86:53:25:d2:81:
1e:cf:38:e1:53:ae:73:92:60:e0:fd:68:e0:5b:5e:
16:60:31:bb:12:86:ec:23:42:9a:c5:bf:aa:1b:cb:
9e:bc:dc:1f:cd:dc:72:70:54:52:df:a0:c9:89:20:
ee:27:e2:b8:41:4f:d0:ce:45:21:60:f3:09:6f:e4:
98:4d:89:c7:72:87:fc:eb:44:19:4f:5c:45:5d:6f:
63:e5:8f:ee:85:ba:90:b4:34:73:d8:0d:cb:08:25:
08:cc:d3:45:84:96:b6:d2:fc:7b:a1:45:ed:df:1a:
37:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8E:D5:BE:61:9B:5A:2E:FA:7A:52:BD:5B:53:CB:7C:AD:92:21:ED
X509v3 Authority Key Identifier:
keyid:46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ea:00:8c:ad:03:11:ed:0e:9a:d8:75:c6:75:57:de:ac:92:
da:ae:f7:1b:6b:30:e7:25:c6:f8:69:22:72:a2:f6:bd:38:3b:
52:53:d0:b6:8a:cb:e0:9f:b3:d2:4e:58:66:d6:51:23:e2:c9:
24:4b:1e:cb:16:b4:b1:a9:35:3f:12:1c:d6:77:dc:7d:0b:f3:
38:1b:34:c3:5a:de:c7:59:34:99:94:89:4d:85:f4:fd:25:ba:
8f:9f:bb:8e:bc:04:15:ac:41:7b:06:e4:88:f0:2f:0f:38:73:
29:40:e6:6f:46:80:f1:ef:6f:5c:a9:b3:3b:0a:8f:d0:2f:c5:
ba:f9:37:44:be:34:eb:62:4e:c6:09:ac:65:50:88:7c:5b:37:
d8:ec:c7:27:37:87:97:27:07:a8:16:eb:69:c6:7a:c1:22:18:
62:a0:1d:10:b6:c2:04:e6:2d:a9:fc:ec:f5:b0:a1:06:06:3c:
11:a3:d5:17:43:3c:10:fb:11:4c:c9:da:0a:eb:c4:41:e2:03:
7a:3c:56:fd:d0:fe:ff:eb:a5:9c:42:90:9d:2c:6d:0e:12:0a:
ac:c7:81:ae:b0:6b:a8:fd:50:6b:0f:b0:6a:ba:65:95:a6:2e:
3d:f9:83:95:bc:ac:ce:15:a6:8f:3e:03:e5:c1:eb:1e:84:f2:
2c:bf:6e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:50:14 2026 by rpki-client