
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft
File: 4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft (raw, json)
Hash identifier: yMEysjpjyq1eP7qv+Hhj0OsJSvGIESL0/JndEkfyyAQ=
Subject key identifier: 92:4E:5A:0C:2D:10:2E:27:84:16:6C:47:BC:D8:07:B5:E3:A6:09:01
Authority key identifier: 44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04
Certificate issuer: /CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04
Certificate serial: 0C40A3574732B16ECC5C94D06AEC060C6C78A59F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 01:19:26 +0000
Manifest this update: Wed 17 Jun 2026 01:14:26 +0000
Manifest next update: Thu 18 Jun 2026 04:19:26 +0000
Files and hashes: 1: 4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl (hash: lE6TVzazJdTJ17UrH6mJp3JXVHQDVZX4unNOpv4UkXM=)
2: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: Uy+ajDGX9/cC+n7NYziQ7Kjk71Ct0cfoPErhDEsQa8k=)
3: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: 1X91pKyabNo0X6kIX61xx6GkFtEHh7C2Pc++/TjZ3oA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl
rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:40:a3:57:47:32:b1:6e:cc:5c:94:d0:6a:ec:06:0c:6c:78:a5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04
Validity
Not Before: Jun 17 01:14:26 2026 GMT
Not After : Jun 18 04:19:26 2026 GMT
Subject: CN=924E5A0C2D102E2784166C47BCD807B5E3A60901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:5d:a6:45:2f:49:55:97:42:50:a7:90:17:
b0:d0:8f:2f:78:0d:52:29:75:03:d0:06:0e:7b:fa:
52:22:f7:db:bb:fb:c7:1e:6f:ac:05:66:16:aa:7b:
d0:c9:b4:c4:3e:09:ec:fb:11:11:d8:a9:68:5f:42:
84:e5:2c:7c:c1:90:f5:cb:dd:e5:a1:91:d6:9d:c5:
21:99:04:58:4f:d7:7b:54:4e:0a:d3:21:d0:b4:7d:
c3:cd:0e:a2:8d:45:e0:c8:64:3b:1f:bb:03:f0:13:
aa:31:bc:d5:bd:84:34:ba:57:38:c9:3c:c4:fd:e2:
84:56:9c:20:e6:bd:1f:98:72:6b:f1:2d:8b:7f:29:
3b:6e:36:d2:2e:81:2c:1b:d3:0e:5c:c2:f2:e1:3c:
df:18:9f:e7:85:8a:d2:e5:32:b2:00:8e:cd:07:f4:
0a:5f:b9:3a:a6:a7:6c:c6:1e:51:02:9b:b3:96:13:
78:7e:b6:a3:23:7e:a0:23:a2:06:07:56:47:42:a1:
61:4b:73:a6:f4:05:ce:a6:cb:1e:a9:3d:d4:fb:19:
3d:47:57:05:e1:b9:bb:80:6a:7d:d9:ec:f3:fd:17:
60:05:55:1c:06:87:18:74:91:33:78:57:37:93:31:
55:b3:5e:a2:0c:91:30:cc:9c:fb:21:f9:4b:78:51:
87:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4E:5A:0C:2D:10:2E:27:84:16:6C:47:BC:D8:07:B5:E3:A6:09:01
X509v3 Authority Key Identifier:
keyid:44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:24:ca:8d:da:1f:08:54:61:f1:b6:67:21:04:c6:7d:33:a7:
86:17:55:58:0a:65:38:46:5c:60:2c:9b:9b:6e:8e:eb:df:c6:
b9:f4:96:28:a0:60:7b:1a:7f:42:68:c6:0c:24:c1:14:ba:29:
d7:5f:d8:0b:ca:0d:3b:6a:1f:1e:fd:58:0c:ee:ff:4e:f7:02:
35:f8:13:a1:0c:61:bb:dd:52:06:47:14:c3:40:96:45:a6:a3:
5d:3b:10:27:ec:65:8f:f8:6c:74:9f:6e:82:5f:a7:59:72:34:
cb:ea:4c:71:bb:00:7d:f7:44:8e:cd:79:a7:71:0e:8d:f6:95:
c1:9a:34:ec:86:37:eb:e9:6f:95:44:aa:2a:f2:b4:78:b0:1d:
c2:20:22:15:69:ce:7a:a7:29:28:8c:59:bd:82:63:f2:c1:ed:
46:d2:8e:c4:2a:a5:8d:2e:f7:4f:3f:81:f2:9e:6c:8b:d6:45:
40:f2:33:b4:e1:b1:62:0b:22:59:a0:8f:b8:1b:db:bd:f4:f2:
6a:28:df:4f:d7:f7:ee:1a:31:64:3f:01:d0:72:d4:19:21:4b:
7d:57:81:c9:81:c1:f0:19:ab:e9:97:b5:87:9d:27:bc:0d:05:
4e:fb:b6:32:e4:38:0c:c2:92:32:1a:36:57:af:21:07:32:61:
3b:22:0c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:18:47 2026 by rpki-client