
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
File: 46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft (raw, json)
Hash identifier: KfnhSvV4+/Qt61gSdCztOSxZ+/YtfS8RPfPML9SkuIw=
Subject key identifier: 3C:7B:00:40:72:78:A5:37:CF:C5:4F:D3:C5:AB:D6:9F:52:09:A8:69
Authority key identifier: 46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
Certificate issuer: /CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Certificate serial: 19E2E49C2A6BCAC384792481CFDC1B172A8DA9F8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
Manifest number: 14
Signing time: Sat 16 May 2026 14:01:29 +0000
Manifest this update: Sat 16 May 2026 13:56:29 +0000
Manifest next update: Sun 17 May 2026 17:47:29 +0000
Files and hashes: 1: 46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl (hash: RcJUu7VE5qxupF1hOmmaPapACmUwNEqkVrjiu9sF/ds=)
2: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (hash: NpxuTMED+KkFsvGBsqYNwDD7Wr7ndBd2FBb62eDZGAI=)
3: 3130332e3134322e3235342e302f32332d3234203d3e20313339333831.roa (hash: 1okkgqoiBVDWBMw8B8fUz+WUWSrHUDprl2WG1iMqp8w=)
4: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (hash: jcwrytSrVr9iAZjPRv58Wx2zSE/xYS0utsjnTbXZlh8=)
5: 3130332e3134322e3235352e302f32342d3234203d3e203435333035.roa (hash: WTtSNSnNo9oz9/i7rHt1jxuFUkS6d/teW8M9wk46Nik=)
6: 3130332e3134322e3235342e302f32342d3234203d3e203435333035.roa (hash: 8IXeZT2nMIplDuKAy9sTdwidwLtl6QHRFLk7GQI0XlE=)
7: 3130332e3134322e3235342e302f32342d3234203d3e20313339333831.roa (hash: oJrAXv58oZDMk40W9JRPwNDx1VF9IQdEUdgQPzLFkmg=)
8: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (hash: P3rNCMyzAiokg7rVA737lP8Lovb0gWKaIdt9sIaalEY=)
9: 323030313a6466313a363338303a3a2f34382d3438203d3e20313339333831.roa (hash: uXr8DnKi8QtOAVEEstmImQaN4M7bPiEAwEuGTottsCo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 09:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e2:e4:9c:2a:6b:ca:c3:84:79:24:81:cf:dc:1b:17:2a:8d:a9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46669355EBB0FE3AE6C06C8DF7A917BEB48849A0
Validity
Not Before: May 16 13:56:29 2026 GMT
Not After : May 17 17:47:29 2026 GMT
Subject: CN=3C7B00407278A537CFC54FD3C5ABD69F5209A869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:78:28:05:92:ab:b4:29:95:80:07:24:61:55:
43:2a:78:8e:c3:e8:82:fd:57:a3:74:ff:ec:88:05:
4e:d3:c5:fd:31:d9:cb:d7:cd:ef:b4:d2:d8:95:19:
fb:c1:24:a3:c4:ad:ac:c1:0c:a9:c4:cf:eb:20:ff:
af:cd:29:bb:9a:4f:94:b3:28:06:b0:b8:68:0c:24:
91:22:20:59:e1:dc:1a:71:79:ee:06:32:5d:bb:80:
ee:c7:07:95:54:0c:d5:36:c5:9b:f6:29:37:e5:96:
c2:e1:ca:fe:04:3e:73:f9:b2:fe:de:79:52:85:3c:
cd:37:56:c0:12:e9:f1:58:be:2d:43:85:80:aa:92:
b2:29:c0:fa:8c:52:6f:da:79:04:09:3e:2a:e4:76:
d3:95:ad:1f:17:6d:74:88:25:ee:cc:ab:1f:40:a2:
59:7b:5b:2c:01:ce:e9:ff:54:21:11:85:f7:a2:96:
e8:dd:54:96:dd:78:4d:59:5b:d3:9d:af:20:03:52:
3a:f5:1d:97:cf:52:a7:b3:da:07:18:42:8d:d7:84:
b3:df:27:2e:1b:de:08:20:2a:07:a3:3c:ce:77:fd:
90:93:57:a3:82:12:a4:b0:1d:57:1f:e5:2f:2d:81:
93:b1:37:10:2f:82:94:f0:10:56:c3:51:94:51:ae:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7B:00:40:72:78:A5:37:CF:C5:4F:D3:C5:AB:D6:9F:52:09:A8:69
X509v3 Authority Key Identifier:
keyid:46:66:93:55:EB:B0:FE:3A:E6:C0:6C:8D:F7:A9:17:BE:B4:88:49:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/46669355EBB0FE3AE6C06C8DF7A917BEB48849A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c3:a3:e6:b9:04:ba:57:62:7c:58:5e:16:77:2c:46:0e:43:
b3:14:c1:d2:ee:29:4d:48:f9:c9:4f:ea:46:75:49:17:f0:61:
70:a0:52:4b:33:f8:cb:1b:39:1f:08:86:47:9a:b0:5e:68:70:
aa:3d:fb:df:17:5e:67:26:6b:7a:3c:20:f5:8e:51:57:79:e6:
91:4c:31:67:ed:7a:b0:06:30:8a:88:39:77:2f:d0:58:4f:2b:
6c:31:df:09:40:f3:5a:cf:ef:aa:3b:17:72:df:ae:2b:d4:c5:
a6:8c:78:69:8d:5e:11:5d:c5:97:34:4c:e5:27:9f:6f:18:46:
ac:7d:22:fa:71:94:d5:2a:a6:a6:1c:59:48:42:85:c9:a1:3e:
62:87:dd:03:3e:d9:bd:d4:1e:2c:61:79:2e:79:0e:32:31:e9:
8c:a2:45:aa:b5:51:7a:17:12:18:77:f8:17:b3:d3:f0:72:c1:
ae:80:23:61:2a:a4:42:30:2a:10:5a:5f:5f:7e:1d:4d:ed:e8:
fd:4b:42:5c:d8:b2:ad:db:90:89:32:17:26:4a:a7:64:a5:a0:
67:78:2f:98:1b:1a:ac:77:8f:86:db:70:c1:30:f1:60:4a:b1:
41:2c:04:3a:f7:d0:49:79:13:6a:f7:7e:7e:5c:b3:fe:7b:e4:
f6:a8:21:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:35:10 2026 by rpki-client