
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft
File: 4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft (raw, json)
Hash identifier: yg2S2ZRPABMV9/uFNIQlwW1z2/L1TfiXYANnSmVFG5E=
Subject key identifier: 80:10:A5:8D:8D:6D:1B:14:D6:96:F8:94:E7:06:84:B2:6E:CD:FA:0B
Authority key identifier: 4B:B3:1C:C0:C0:64:3A:8E:F7:5F:54:B2:C3:50:B6:D9:E3:FD:4F:E4
Certificate issuer: /CN=4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4
Certificate serial: 5436B832ECAFAF5668FBE61EF73272D13CA511FC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 04:48:46 +0000
Manifest this update: Wed 17 Jun 2026 04:43:46 +0000
Manifest next update: Thu 18 Jun 2026 05:13:46 +0000
Files and hashes: 1: 4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl (hash: KTV6YdSO3YaMciuubnBWzcmtWGfqnk5K2byw9/6Dsrk=)
2: 3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa (hash: epbts0iMFTrBEO83zvZ3MaXP2Z9y72tIdDCt87torNA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl
rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:36:b8:32:ec:af:af:56:68:fb:e6:1e:f7:32:72:d1:3c:a5:11:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4
Validity
Not Before: Jun 17 04:43:46 2026 GMT
Not After : Jun 18 05:13:46 2026 GMT
Subject: CN=8010A58D8D6D1B14D696F894E70684B26ECDFA0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:11:aa:c0:2b:07:a1:43:fa:01:52:04:78:
8e:4d:e8:3c:2a:0f:62:b1:05:35:1f:22:ac:4f:ec:
5d:b6:d2:6b:85:0d:63:66:18:75:d5:4d:5e:36:93:
08:c9:20:fd:e2:f5:e5:18:d4:13:d8:30:ca:7d:0c:
6b:32:4d:62:2c:12:51:1c:41:85:ac:2a:9c:0d:dc:
b5:a5:3e:5f:d3:a2:53:d5:ee:29:4e:44:66:56:f1:
c5:7a:14:40:2e:1b:f3:8d:e9:9c:b0:a7:2b:9f:4f:
62:a0:0b:de:df:9a:98:d3:9d:14:03:b5:fe:ff:9c:
48:17:5b:b7:e3:3b:62:43:94:26:54:2b:6a:e4:64:
2b:e6:73:4b:09:eb:a5:5d:a9:6c:57:f0:3c:76:60:
62:54:15:37:e2:99:d1:fc:2e:57:7e:cf:9d:45:53:
52:a3:2d:40:57:03:9f:1d:38:8d:76:92:27:20:cf:
82:5c:42:66:35:bd:d4:3d:1f:78:f7:c2:ae:22:c3:
f2:b1:7b:4f:1a:c4:86:a3:69:c3:02:9e:00:cf:f8:
1c:32:b5:ba:d6:c4:fd:91:71:94:4f:69:27:3c:0c:
9b:02:99:db:e4:34:d8:21:68:f8:a2:f8:eb:dc:b4:
dc:3a:a3:b5:d0:ff:c5:19:2e:78:47:5b:43:43:e8:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:10:A5:8D:8D:6D:1B:14:D6:96:F8:94:E7:06:84:B2:6E:CD:FA:0B
X509v3 Authority Key Identifier:
keyid:4B:B3:1C:C0:C0:64:3A:8E:F7:5F:54:B2:C3:50:B6:D9:E3:FD:4F:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/4BB31CC0C0643A8EF75F54B2C350B6D9E3FD4FE4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d9:41:4c:88:95:e3:b5:63:21:8f:21:da:9f:3e:83:2a:55:
5d:f2:7d:23:73:07:00:ec:68:0b:84:c1:9d:38:70:d0:13:af:
7f:39:cf:ed:30:f3:57:54:01:c0:89:2c:16:46:c5:75:fd:6b:
94:ad:8c:42:c9:2e:fa:99:4c:9b:1b:e9:82:ff:85:a0:7b:91:
a1:42:1d:53:d5:d2:f7:15:a0:f7:18:2a:cb:30:23:29:28:79:
d3:ff:a5:22:09:82:1d:43:f7:e3:31:68:84:11:f0:39:1f:f7:
5b:80:b6:b6:f3:63:ae:dc:60:bd:f5:cb:e0:0a:ef:ef:2d:18:
ea:8a:f1:ae:5a:e4:a3:8e:1a:39:30:89:94:db:dc:71:0d:f1:
29:d6:61:0a:c1:e2:be:e2:ea:b1:f7:d7:e3:f2:7d:3b:20:ea:
4e:ea:4f:4e:8d:12:4a:89:06:18:85:68:7d:34:81:8b:dd:84:
74:b4:b3:03:3c:ff:be:5a:ec:7d:3a:c6:fc:d7:a6:ae:d6:57:
01:67:30:e7:c1:ca:f9:95:5b:e5:4d:01:eb:2e:c5:c8:a8:68:
86:9e:88:c0:43:fc:b2:e2:a5:f5:5e:d0:88:66:e5:45:5d:52:
e3:ca:73:27:c4:1e:56:b8:01:47:40:42:51:f5:b4:36:3a:36:
5c:d3:e1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:33:19 2026 by rpki-client