
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.mft
File: 934C6F41C654B1993222EAFE6F2C8AEB91C25C43.mft (raw, json)
Hash identifier: HSayvei7DkxBPE13cYjnaZ1Ei213DmUq1IheAWfjh98=
Subject key identifier: 3D:64:89:C4:A0:4F:F2:0B:00:DD:B1:CC:DA:AD:C6:9E:5E:DA:0C:7F
Authority key identifier: 93:4C:6F:41:C6:54:B1:99:32:22:EA:FE:6F:2C:8A:EB:91:C2:5C:43
Certificate issuer: /CN=934C6F41C654B1993222EAFE6F2C8AEB91C25C43
Certificate serial: 6A6B2A1EB8459068AF8510EB3D9CF1F6DE62F06E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 15:17:46 +0000
Manifest this update: Tue 16 Jun 2026 15:12:46 +0000
Manifest next update: Wed 17 Jun 2026 18:44:46 +0000
Files and hashes: 1: 934C6F41C654B1993222EAFE6F2C8AEB91C25C43.crl (hash: S/YVHU7PdEzYqVu0EEoRHvd3FiJeIaf/WIOEqTCPXTI=)
2: 3130332e3138362e32362e302f32332d3234203d3e20313439363934.roa (hash: 1PrJaUHIWc4qUh8+kV5ygVFqkLMSodLr7rG/KYjeVKc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.crl
rsync://rpki-rsync.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:6b:2a:1e:b8:45:90:68:af:85:10:eb:3d:9c:f1:f6:de:62:f0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934C6F41C654B1993222EAFE6F2C8AEB91C25C43
Validity
Not Before: Jun 16 15:12:46 2026 GMT
Not After : Jun 17 18:44:46 2026 GMT
Subject: CN=3D6489C4A04FF20B00DDB1CCDAADC69E5EDA0C7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:23:c3:c8:6b:ed:0b:04:8e:af:51:47:37:a8:
b4:8c:8f:d0:3b:7f:29:8e:0d:37:d6:4b:71:cd:d4:
18:5e:3c:f8:36:6f:32:53:94:12:54:fd:cd:3c:54:
ef:75:f8:b3:ad:0b:53:ba:94:85:7f:a1:e8:fd:fd:
d9:d8:28:48:04:e2:3c:08:40:71:49:be:44:5b:21:
bd:50:d4:9f:17:31:17:6b:75:7e:27:2a:23:fd:15:
7c:19:1f:66:d7:fd:b1:80:1e:80:c2:63:a3:35:ca:
4c:41:11:fd:47:b4:31:85:11:00:2c:e4:f6:c1:fa:
52:a2:65:ff:5a:5b:93:03:e0:9c:de:58:10:b3:d8:
40:c7:50:53:27:49:18:bb:0f:2a:f9:bf:d9:e5:0b:
f5:7c:03:99:a1:94:9f:3a:e1:81:9c:0b:96:20:04:
4d:d7:b2:23:a2:35:24:a4:bd:80:ee:57:bc:cd:dc:
85:85:c2:0d:22:8d:99:3c:8b:74:a0:f8:6e:d0:5d:
9f:ec:3a:49:40:3a:35:53:39:17:8a:6e:7a:ad:b2:
86:1a:f0:84:78:32:1d:29:3c:aa:86:40:02:d3:da:
0d:7c:b0:79:80:8b:3c:09:f2:58:6f:48:1f:46:3a:
82:64:47:a4:5a:57:94:ba:d8:7f:44:e4:cf:3a:3a:
91:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:64:89:C4:A0:4F:F2:0B:00:DD:B1:CC:DA:AD:C6:9E:5E:DA:0C:7F
X509v3 Authority Key Identifier:
keyid:93:4C:6F:41:C6:54:B1:99:32:22:EA:FE:6F:2C:8A:EB:91:C2:5C:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc1e865f-d5a1-4af7-a719-0c26e74fcd61/0/934C6F41C654B1993222EAFE6F2C8AEB91C25C43.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b2:2a:c2:78:60:ba:0a:e6:11:24:90:e5:57:19:3f:2e:ca:
85:2f:e8:8e:ff:1e:3e:88:b1:75:7b:c2:7b:bd:4a:a6:c5:b8:
3a:7c:28:cc:89:cf:8c:9e:9b:6b:8a:b8:d0:70:22:09:bb:88:
6b:ec:db:c9:85:48:00:54:a7:aa:97:48:96:55:6a:8b:32:ad:
ae:27:67:af:55:a5:11:58:23:be:b4:59:7b:f0:ab:79:87:f2:
96:e9:7c:21:70:d2:3d:f1:f1:e8:89:77:d0:20:90:e9:e6:bb:
5a:bf:25:10:a9:d6:bc:94:fe:02:ca:5e:b7:0a:5a:f6:cb:fc:
aa:78:6d:73:63:28:0b:5e:aa:d0:26:8d:84:c9:ab:71:f5:28:
66:79:e3:7d:24:d0:a7:8d:85:ad:46:f1:d8:04:b5:dd:31:55:
47:3f:89:8d:53:d9:b6:1b:66:b7:bb:90:c2:4c:5a:e3:11:bb:
1f:3f:1c:28:07:8b:23:8f:fd:bd:aa:a4:80:7a:f6:02:ba:36:
f5:ed:64:81:58:8f:1c:b8:a7:b3:a3:fc:d3:a2:f2:82:9a:07:
77:a0:07:e7:b4:85:9b:5b:24:d9:cd:27:b1:ce:0b:84:1a:f2:
1e:a3:39:83:8c:07:58:bb:1a:5d:b8:d1:0c:2f:01:61:6f:5d:
62:da:87:eb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUamsqHrhFkGivhRDrPZzx9t5i8G4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM0QzZGNDFDNjU0QjE5OTMyMjJFQUZFNkYyQzhBRUI5
MUMyNUM0MzAeFw0yNjA2MTYxNTEyNDZaFw0yNjA2MTcxODQ0NDZaMDMxMTAvBgNV
BAMTKDNENjQ4OUM0QTA0RkYyMEIwMEREQjFDQ0RBQURDNjlFNUVEQTBDN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdI8PIa+0LBI6vUUc3qLSMj9A7
fymODTfWS3HN1BhePPg2bzJTlBJU/c08VO91+LOtC1O6lIV/oej9/dnYKEgE4jwI
QHFJvkRbIb1Q1J8XMRdrdX4nKiP9FXwZH2bX/bGAHoDCY6M1ykxBEf1HtDGFEQAs
5PbB+lKiZf9aW5MD4JzeWBCz2EDHUFMnSRi7Dyr5v9nlC/V8A5mhlJ864YGcC5Yg
BE3XsiOiNSSkvYDuV7zN3IWFwg0ijZk8i3Sg+G7QXZ/sOklAOjVTOReKbnqtsoYa
8IR4Mh0pPKqGQALT2g18sHmAizwJ8lhvSB9GOoJkR6RaV5S62H9E5M86OpENAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUPWSJxKBP8gsA3bHM2q3Gnl7aDH8wHwYDVR0j
BBgwFoAUk0xvQcZUsZkyIur+byyK65HCXEMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmMxZTg2NWYtZDVhMS00YWY3LWE3MTktMGMyNmU3NGZjZDYxLzAvOTM0QzZGNDFD
NjU0QjE5OTMyMjJFQUZFNkYyQzhBRUI5MUMyNUM0My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MzRDNkY0MUM2NTRCMTk5MzIyMkVBRkU2RjJDOEFFQjkxQzI1
QzQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmMxZTg2NWYtZDVhMS00YWY3LWE3
MTktMGMyNmU3NGZjZDYxLzAvOTM0QzZGNDFDNjU0QjE5OTMyMjJFQUZFNkYyQzhB
RUI5MUMyNUM0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJayKsJ4YLoK5hEkkOVXGT8uyoUv6I7/Hj6I
sXV7wnu9SqbFuDp8KMyJz4yem2uKuNBwIgm7iGvs28mFSABUp6qXSJZVaosyra4n
Z69VpRFYI760WXvwq3mH8pbpfCFw0j3x8eiJd9AgkOnmu1q/JRCp1ryU/gLKXrcK
WvbL/Kp4bXNjKAteqtAmjYTJq3H1KGZ5430k0KeNha1G8dgEtd0xVUc/iY1T2bYb
Zre7kMJMWuMRux8/HCgHiyOP/b2qpIB69gK6NvXtZIFYjxy4p7Oj/NOi8oKaB3eg
B+e0hZtbJNnNJ7HOC4Qa8h6jOYOMB1i7Gl240QwvAWFvXWLah+s=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:31:12 2026 by rpki-client