
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft
File: C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft (raw, json)
Hash identifier: DCMmyOyjB6hTBKiOJUReMI6Y2AImmizrNqBugfMZw2Q=
Subject key identifier: 62:CB:B9:CB:3B:02:FB:E1:1B:48:2C:6E:5A:F7:18:FC:90:C8:E7:4A
Authority key identifier: C4:44:FB:9E:A5:E4:CA:4D:A5:FB:85:BA:13:1C:62:C0:12:40:2C:80
Certificate issuer: /CN=C444FB9EA5E4CA4DA5FB85BA131C62C012402C80
Certificate serial: 11F038B10E6F298336846678EF48EF2F64F8B6B1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 02:51:12 +0000
Manifest this update: Wed 17 Jun 2026 02:46:12 +0000
Manifest next update: Thu 18 Jun 2026 05:04:12 +0000
Files and hashes: 1: C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl (hash: qrRGvfDlpsztYN2Wap4iXVKOKYA5xgW9/4QBpWIQ2RE=)
2: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (hash: 8bdm59nV7JGD6nAo69wqK5zS2ZyFtuzqAXaUdVJTTG8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl
rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f0:38:b1:0e:6f:29:83:36:84:66:78:ef:48:ef:2f:64:f8:b6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C444FB9EA5E4CA4DA5FB85BA131C62C012402C80
Validity
Not Before: Jun 17 02:46:12 2026 GMT
Not After : Jun 18 05:04:12 2026 GMT
Subject: CN=62CBB9CB3B02FBE11B482C6E5AF718FC90C8E74A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d6:b6:af:e4:c6:0a:d3:b4:f1:38:b2:c4:5f:
cc:07:40:5f:99:ac:b6:80:83:07:96:29:e5:fa:13:
5e:0a:5f:15:3c:78:ae:47:a7:41:44:06:c2:40:fb:
06:9f:ac:5a:7b:ed:fd:f9:c4:82:f9:47:49:8b:0b:
38:c2:7a:21:c9:90:04:fe:d0:fc:1a:3c:74:e6:56:
9a:b6:c5:c8:46:73:d1:1d:94:8a:23:7e:f7:8e:70:
f8:50:37:da:29:58:81:fb:aa:7a:42:a5:5f:f7:a0:
90:37:c2:ce:6f:d9:cc:a9:89:ff:39:f9:89:54:13:
9f:6e:e8:d1:26:ed:93:88:c9:c0:63:e2:b9:11:ff:
28:7b:95:bc:65:1e:ce:be:54:dd:5d:b7:be:45:7a:
9e:10:3e:d0:ce:53:0a:f2:8e:ff:d9:2c:f7:ac:fa:
28:36:e6:73:da:41:7a:c3:dc:bc:bc:69:e0:77:f2:
20:fb:a9:8e:55:95:2a:90:c5:94:54:7e:66:fd:2c:
83:6e:3c:87:14:b1:13:50:54:31:67:be:f3:09:82:
b4:75:76:64:bd:59:fd:92:23:c1:28:05:d3:6a:1e:
ca:66:d7:bf:27:8a:e5:72:18:fc:81:3b:f9:80:7c:
6e:94:2e:7c:2a:f7:ec:35:3b:62:2d:03:22:74:41:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CB:B9:CB:3B:02:FB:E1:1B:48:2C:6E:5A:F7:18:FC:90:C8:E7:4A
X509v3 Authority Key Identifier:
keyid:C4:44:FB:9E:A5:E4:CA:4D:A5:FB:85:BA:13:1C:62:C0:12:40:2C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/C444FB9EA5E4CA4DA5FB85BA131C62C012402C80.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:93:d7:8c:23:16:7c:89:d3:26:74:00:4a:b2:07:73:7d:ce:
6f:36:d4:02:0d:fb:e4:6d:b1:1c:25:3a:51:a8:86:46:e9:f8:
60:a3:2a:75:24:98:0c:a9:78:a2:e2:c4:48:c6:46:47:44:6d:
0c:63:e5:8c:c3:e6:8b:1e:96:87:c2:c7:34:14:4d:c8:39:9a:
b1:e5:c5:a7:95:7e:27:49:59:96:3a:c7:7f:c6:20:01:4a:fc:
97:0b:8d:e3:7e:47:c3:bf:c5:e8:9d:26:ea:59:04:3a:db:5f:
ba:9b:31:45:8b:ab:83:61:20:cb:b0:e5:12:a2:8a:29:e8:66:
2d:ad:76:98:c2:a7:b6:08:04:d8:77:d1:28:c4:13:b7:3d:7c:
ed:47:5e:fb:c8:ae:3e:9c:bc:39:4f:65:ad:db:5e:52:bb:d1:
6f:c2:63:f5:5e:6a:6b:bb:5d:5e:30:d1:95:eb:ca:78:65:1b:
ba:dc:c2:65:ca:b6:4b:81:68:db:d8:35:4b:1c:c3:fb:16:b0:
23:cb:53:90:48:0b:26:d3:23:fc:14:e9:fd:61:a5:07:a9:ee:
e8:a1:47:0a:d0:00:e6:0f:04:db:29:40:56:0b:8c:00:4b:d0:
8e:6c:a2:db:94:39:ff:04:84:b2:75:22:01:ce:47:08:f6:66:
55:e1:7f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:44:15 2026 by rpki-client