
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft
File: 4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft (raw, json)
Hash identifier: CFBp4hA4deK9IusXZd+eyWjuKfunT7g3CCMwgIUA0Uw=
Subject key identifier: F7:46:7E:FD:B1:C5:7D:68:6E:64:68:2D:39:7E:76:7A:17:96:3B:7A
Authority key identifier: 4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F
Certificate issuer: /CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F
Certificate serial: 0E1E84376E004D1A109C4B259ABF26DDF7407744
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 05:29:29 +0000
Manifest this update: Wed 17 Jun 2026 05:24:29 +0000
Manifest next update: Thu 18 Jun 2026 07:02:29 +0000
Files and hashes: 1: 3136302e32302e3232302e302f32342d3234203d3e20313532373835.roa (hash: ySMFpx3jAtHRk6Y0gp/23WMKdK2+n4m1Qj3cdUQcw48=)
2: 4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl (hash: olNcQm7mwuodeMxNh4uFV9Ii0/52wOmqKBeXS6RBwzo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl
rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 04:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:1e:84:37:6e:00:4d:1a:10:9c:4b:25:9a:bf:26:dd:f7:40:77:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B1EABA76460DBE6046B857B57FDFB528C2DA09F
Validity
Not Before: Jun 17 05:24:29 2026 GMT
Not After : Jun 18 07:02:29 2026 GMT
Subject: CN=F7467EFDB1C57D686E64682D397E767A17963B7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:ad:9d:83:16:36:93:b6:67:89:32:e0:8a:
76:a1:3b:e8:50:cd:20:1f:1d:a2:df:af:f6:9f:39:
85:c5:9c:36:4e:19:68:a3:19:85:8c:1b:6e:14:f4:
a1:53:36:6d:5b:8f:29:14:0e:65:5a:40:11:2c:df:
df:08:24:d4:80:a7:18:d8:f9:81:a0:79:19:12:69:
08:49:7a:e2:a1:d5:45:91:34:78:89:05:db:f7:b6:
f2:77:2f:7c:08:2c:60:10:69:0f:46:ec:f4:f3:53:
e2:76:c8:fc:bd:7a:fa:25:31:74:95:b7:c0:85:e0:
37:ea:7d:57:80:88:63:38:3a:84:dd:d4:d8:2d:9a:
c9:40:fa:76:2a:3e:10:c6:6c:72:af:f2:b4:19:c6:
5d:78:56:c2:14:0e:27:fc:20:a6:b3:a0:63:3c:ac:
d5:a6:76:20:32:4d:07:e4:74:66:3a:27:ed:8d:26:
2b:ab:ad:1f:fd:6c:39:95:23:f8:ff:60:9c:66:e2:
82:85:1e:41:55:18:d0:b2:a3:11:58:51:f3:8f:ef:
3e:38:c0:2c:98:a9:4f:f7:4b:7c:65:50:83:b8:0c:
ce:67:cd:be:2f:df:20:f6:74:72:3d:e5:e3:04:f5:
f2:39:a5:04:00:06:76:b2:4f:5e:21:31:3a:32:62:
a5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:46:7E:FD:B1:C5:7D:68:6E:64:68:2D:39:7E:76:7A:17:96:3B:7A
X509v3 Authority Key Identifier:
keyid:4B:1E:AB:A7:64:60:DB:E6:04:6B:85:7B:57:FD:FB:52:8C:2D:A0:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d88575c8-54fe-4801-a7b1-517d0e6b8b73/0/4B1EABA76460DBE6046B857B57FDFB528C2DA09F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1a:c1:61:2b:7a:ad:ca:00:a1:4e:ff:05:23:5c:18:04:22:
09:f8:3e:45:dd:a6:2f:cc:cd:2d:7c:e7:31:e1:57:c6:f3:a8:
70:a6:e3:ba:b0:d1:80:76:0b:58:e8:3f:f7:c5:18:e4:22:2a:
34:38:53:ce:ca:9c:b3:7c:e6:37:63:f4:88:69:60:c7:19:3e:
98:ba:53:6c:92:ad:a9:86:7c:55:c7:04:a7:90:90:63:5c:e6:
48:a5:cf:08:97:54:d2:6c:e1:52:1d:7b:26:4e:f3:ea:1c:be:
4a:71:22:68:16:b9:d9:6f:b8:4e:24:8f:73:77:51:3c:59:fc:
24:84:01:28:6c:f7:0a:74:29:09:6a:79:f3:ef:ad:74:94:18:
cf:ac:5f:db:78:75:32:27:f5:07:44:fb:88:46:fc:c4:f2:8f:
74:fd:40:e5:29:9b:cf:59:4d:41:70:ee:d9:f6:11:e7:2f:46:
eb:c3:69:05:eb:a0:69:b8:32:47:85:0a:3f:ba:69:0a:ae:20:
96:89:c4:dd:ed:a5:d4:aa:e6:7b:1d:f0:6c:18:4d:46:20:8f:
0d:3b:45:cc:52:5f:9c:44:4f:87:df:2d:30:4f:24:d7:96:24:
ff:7f:1b:40:98:6a:01:fd:f9:53:b4:4d:32:57:22:ea:0a:a9:
41:7b:0a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:19:01 2026 by rpki-client