
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
File: 4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft (raw, json)
Hash identifier: nxr8XJCirkHrYZrJy53db470DUqWy6tqxRBMlUOgNLA=
Subject key identifier: 55:D7:D2:95:52:3C:B1:31:E1:9A:2C:41:D1:E4:3B:7A:91:F0:CB:D1
Authority key identifier: 4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A
Certificate issuer: /CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A
Certificate serial: 7D6E95B6F4B76AF89202CE7B741F04BC00D316B3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 05:34:38 +0000
Manifest this update: Wed 17 Jun 2026 05:29:38 +0000
Manifest next update: Thu 18 Jun 2026 07:21:38 +0000
Files and hashes: 1: 3135372e32302e3233332e302f32342d3234203d3e20313532343339.roa (hash: Tkh0+XsPVTypniidThAuJHBFvt6qbkv8XEWtO3EZhzc=)
2: 4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl (hash: +Mts3F6C2rhzgHMZ4KjGp1a4zk0vuWUihB5rgYg2mGU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl
rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 04:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:6e:95:b6:f4:b7:6a:f8:92:02:ce:7b:74:1f:04:bc:00:d3:16:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AE1581EC7DFE65F5E99AA613475D8542808C46A
Validity
Not Before: Jun 17 05:29:38 2026 GMT
Not After : Jun 18 07:21:38 2026 GMT
Subject: CN=55D7D295523CB131E19A2C41D1E43B7A91F0CBD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c6:0a:c4:1b:37:ae:d9:55:c4:ec:cc:0e:7b:
fd:89:2e:ff:2c:84:a9:6f:13:8d:f4:2f:d4:48:31:
8b:66:c8:bd:30:9e:e4:b3:72:ac:91:5e:74:b3:7b:
f4:e1:f0:53:da:10:56:e8:07:e1:9c:a3:27:88:cf:
8b:96:87:e1:5c:8b:0d:df:85:92:3d:c7:cd:9e:ab:
1a:d9:fd:b8:76:0e:6b:d4:32:2f:f4:23:b6:29:8b:
f9:2b:c1:b3:26:15:71:1e:3e:10:01:ac:02:29:ca:
ff:e8:bc:e1:7a:54:27:8f:61:19:ae:50:fb:ec:bc:
fd:cb:72:cf:bf:f2:b1:8e:e7:7e:cc:a0:03:8d:a9:
cd:87:ec:df:a8:2e:96:f2:0b:ca:38:2b:e4:1a:32:
cf:71:6c:42:d1:ba:31:31:24:61:f2:7b:8d:77:9e:
ad:be:1b:6d:91:4e:93:cc:c6:8f:84:ea:d0:78:98:
42:bf:01:06:30:85:d9:07:b9:1e:35:fc:5d:16:f8:
33:8b:ca:22:2e:85:07:6d:dc:2d:22:4c:b9:ba:fa:
5a:2f:79:67:d5:19:ab:e0:12:91:6a:f6:9d:bd:cb:
b3:a6:cb:a8:2a:0f:59:15:f7:5c:84:8b:ad:ef:8b:
9b:dc:a1:3c:26:f8:c7:6a:c0:23:b4:81:4a:fe:de:
9f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D7:D2:95:52:3C:B1:31:E1:9A:2C:41:D1:E4:3B:7A:91:F0:CB:D1
X509v3 Authority Key Identifier:
keyid:4A:E1:58:1E:C7:DF:E6:5F:5E:99:AA:61:34:75:D8:54:28:08:C4:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8ced18d-a7cc-4b44-af4a-85f304f9eb6c/0/4AE1581EC7DFE65F5E99AA613475D8542808C46A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:82:42:9b:6c:0e:6c:f1:c4:22:27:6f:d2:0d:7b:74:e3:a8:
0e:0f:c4:ba:e4:d8:c7:81:4e:93:c9:b5:c3:89:ab:b7:7c:7c:
fd:29:c4:75:d3:cd:56:c8:71:4e:49:46:07:6c:92:c9:01:45:
5d:3d:d1:d5:da:0e:5e:67:a7:ca:4d:85:c5:e3:fe:6f:7e:2c:
c3:3a:4c:a8:e9:0f:8e:df:7e:d4:02:a5:32:03:4a:8c:d0:13:
41:b0:cf:67:be:11:17:36:a2:a8:b3:82:4b:73:43:30:d8:4f:
f1:44:80:2f:c7:fc:fc:62:f6:ca:e4:b1:b5:d7:bb:19:72:b6:
c2:85:a7:3e:1a:31:1d:48:ca:a4:3b:ea:6f:52:98:8f:f5:24:
b3:cb:08:87:89:92:b6:28:fb:16:0c:4e:61:79:d3:41:a4:56:
18:61:96:82:8b:4c:db:c9:c3:0e:fe:95:68:16:11:05:ac:ad:
63:68:2e:77:97:14:61:6e:f2:40:44:6f:c6:37:f4:f1:f8:b5:
c2:3e:3a:a0:18:92:99:7e:70:0e:2c:49:4c:39:22:da:06:aa:
60:e1:20:24:61:69:8a:c4:10:8b:32:c4:bf:7d:e7:fb:b8:99:
c5:0b:97:da:44:66:8c:16:f3:44:24:a5:29:3b:fe:02:1d:04:
c5:52:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:02 2026 by rpki-client